last executing test programs: 2.118533185s ago: executing program 1 (id=3920): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x145) 2.031329903s ago: executing program 1 (id=3924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000000000000000000000000000000000000000000000000000014000d"], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="3e1600000000c47a0b0180f45c6cef27", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000080b) 1.869410368s ago: executing program 1 (id=3925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f0000001f80)}, 0x20) 1.814954913s ago: executing program 1 (id=3926): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.40831554s ago: executing program 4 (id=3927): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @cgroup_sock=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@discard}, {@usrjquota, 0x22}, {@errors_continue}, {@orlov}, {@noblock_validity}]}, 0x1, 0x453, &(0x7f0000000f80)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000006c0)=ANY=[@ANYBLOB="c21781ca5507d8be8f4c48d9c56432c89e7a7d6f32f24647859b12f3fc251e02e351d5418e5c860f92972a54885a39bc3138c292b1ac45dcad47070a85fad206052022b6c7e315f7b19faf7c8d6bfb57aa23421d04307959ed1ca0acdb0662a62941a6b4c237f2853dba3b258a5dc2a3c94e714cdd9aa2a7f8cad9ace33194770c6d8a7f577c6669d5ea011b7a0639200d5e49f024f2c0ef9c02eced54453d4e389f97a66a43648d341162578940e74f15eae8e5effb6a1f70f0106a83aeabd00f82c439c70699a6e45152a2be181327298a19bbdd4bd4e12b925849fb34475578ac076c204105853606a1f8", @ANYRES32=r1, @ANYRES16=r0, @ANYRES8, @ANYRES8, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/42, 0x2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet(0x2, 0x6, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001c00000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000e6ff0004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000280)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.342503476s ago: executing program 3 (id=3929): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (fail_nth: 3) 1.054246573s ago: executing program 0 (id=3930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000009000000080000000300000000000000", @ANYRES32, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB="00000000e4bb467454d5e5cf49e147aab16dd53701f42eb70000000000000000"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000200), 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x22020600) 1.025825905s ago: executing program 2 (id=3931): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xe, 0xfffffffe, 0xffffffff, 0x0, "2af01c3d00400600ffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0xffff, 0x0, 0x0, 0x7fff, 0xff, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, 0x0) 1.025440856s ago: executing program 0 (id=3932): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 979.28738ms ago: executing program 0 (id=3933): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000002480)=""/4096) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000600)=0x1b, 0x4) recvmmsg(r0, &(0x7f00000032c0), 0x40000fd, 0x10000, 0x0) 978.88135ms ago: executing program 2 (id=3934): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x145) 978.50374ms ago: executing program 3 (id=3935): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r3}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) pipe(&(0x7f0000000400)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 971.300331ms ago: executing program 1 (id=3936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000000000000000000000000000000000000000000000000000014000d"], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="3e1600000000c47a0b0180f45c6cef27", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000080b) 928.731264ms ago: executing program 0 (id=3937): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000001f80)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000022000000010000002000018008000100", @ANYRES32=r2, @ANYBLOB="140002006261746164765f736c6176655f31"], 0x34}}, 0x0) 896.522688ms ago: executing program 4 (id=3938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) 896.274408ms ago: executing program 2 (id=3939): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) close(r2) 879.107269ms ago: executing program 1 (id=3940): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@data_err_abort}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sigaltstack(&(0x7f0000001000)={&(0x7f0000002ac0)=""/4095, 0x0, 0xfff}, 0x0) sigaltstack(&(0x7f0000001840)={0x0, 0x80000002}, &(0x7f00000018c0)={0x0}) sched_setscheduler(0x0, 0x2, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000680)=""/251, 0x80000000, 0xfb}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x202) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 848.319052ms ago: executing program 2 (id=3941): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) getuid() sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) 844.213252ms ago: executing program 4 (id=3942): r0 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x401, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe17) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001c00)=@newtaction={0xc54, 0x30, 0x12f, 0x0, 0x0, {}, [{0xc40, 0x1, [@m_police={0xc3c, 0x1, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x401, 0x5, 0x5, 0x854, 0x10001, 0x2, 0x4, 0x0, 0x2, 0x3, 0x0, 0x2, 0x7, 0x1, 0x3, 0x10000, 0x4, 0xfffffff8, 0x80000000, 0xfffffffc, 0x4, 0x10000, 0x0, 0xef4, 0x4, 0x7, 0xb, 0x80000000, 0x5, 0xfffffff9, 0xffffffff, 0x2d, 0x5, 0xcf5, 0x2, 0x8, 0xffffff81, 0x7, 0x70, 0x101, 0x4aeb7cff, 0x8, 0xb, 0x0, 0x7, 0xf5, 0x5, 0xd0, 0xffffffff, 0x6, 0x400, 0x8, 0x80000001, 0x4a6, 0x4, 0x2ef, 0x1912, 0x4, 0x101, 0x1, 0x97a, 0x3, 0x80000001, 0x497, 0x9, 0x5, 0x1, 0xf6a9, 0x3f6, 0x7fff, 0x4, 0x1, 0x3, 0x8, 0x100, 0x5, 0x3, 0x80000000, 0x100, 0x8c1d, 0x7, 0x6, 0x5, 0x9, 0xfffff801, 0x7, 0x1ba4, 0x9, 0x4a25, 0x3, 0x80, 0x4, 0x0, 0x1, 0x1, 0x85, 0x6, 0x401, 0x7, 0x100, 0x101, 0x3, 0x573, 0x1, 0x7944, 0xd, 0x4, 0x0, 0xfcd, 0x7, 0x3, 0xc292, 0x7, 0x1, 0x8, 0xd44c, 0x8, 0x9aaf, 0x1, 0x0, 0x8, 0x10000, 0x17cc, 0x7, 0x6, 0x5, 0x3, 0x1, 0x9, 0x7, 0x5, 0x5, 0x1, 0x750, 0x2, 0x9, 0x8, 0x0, 0x5, 0x7, 0x1, 0x1, 0x0, 0x8000, 0x5, 0x1, 0xce, 0x7, 0xe6, 0x8, 0xffff, 0xd, 0x800, 0x7f, 0x7, 0x4200000, 0x80000000, 0x34, 0x1, 0x0, 0x1, 0x6, 0x81, 0x2, 0x4, 0x3, 0xbba, 0x3, 0x5ec0, 0x800, 0x0, 0x400, 0x0, 0x8, 0x4, 0xfff, 0x6, 0x3, 0x101, 0x80000000, 0x0, 0x6, 0x3, 0x3, 0x7, 0x23c, 0xf, 0x7fffffff, 0xffffff00, 0x8, 0x7, 0xb, 0x5, 0x5, 0x7, 0xc0, 0x3f3c, 0x1, 0x7, 0x9, 0x200, 0x9, 0x86a, 0x1, 0x9, 0x87, 0x7, 0x8, 0x7fff, 0xd, 0x3, 0x4, 0x6, 0xd6, 0x3, 0x40, 0xffff8000, 0xbd00000, 0x3, 0x5, 0x6, 0xfff, 0x2, 0x4, 0x6, 0xf, 0x4059d037, 0xda92, 0xffffffc0, 0x0, 0xe, 0x6, 0x10, 0x0, 0x200, 0x1d, 0x1, 0x9, 0x5, 0x8, 0x4, 0x8, 0x800, 0x4, 0xffff, 0x101, 0x4, 0xffffffe8, 0xe0, 0xff, 0xc0000000, 0x0, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xc54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 813.743695ms ago: executing program 0 (id=3943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10048, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x4, 0x1, 0x10900, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x20004, 0x100, 0x4, 0xa, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) 750.869111ms ago: executing program 2 (id=3944): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1e, 0x24, 0xffffffffffffffff, @void, @void, @void, @value}, 0x20) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fd00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) 725.370893ms ago: executing program 3 (id=3945): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 717.283024ms ago: executing program 2 (id=3946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 650.97451ms ago: executing program 3 (id=3947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r3}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = dup(r4) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@rand_addr=0xfffffffc, @in6=@loopback}}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x0, @in6=@private1}}, 0xe8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000600)='/dev/snd/seq\x00'}, 0x30) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x2, 0xe6, 0xff, 0x6, 0x0, 0x3, 0x130, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xdec, 0x0, @perf_config_ext={0x1000, 0x6}, 0x8010, 0x6, 0x7, 0x4, 0x5, 0x9, 0x8, 0x0, 0x0, 0x0, 0x6}, r9, 0x6, r7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pipe(&(0x7f0000000400)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) socket$inet(0x2, 0x3, 0x6) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) 571.910987ms ago: executing program 3 (id=3948): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40c8, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x8004}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nodelalloc}]}, 0xfb, 0x498, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2037d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r9, &(0x7f0000000080), 0x4) 330.825139ms ago: executing program 0 (id=3949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aaefd526b7b5f90ff909b3b7b6a48f435578fb926cdc3a08753c653ef9a6670af33e624f1632159122a15f4e70d19b7691571c7e1a4e7282c3c7605b2bf91e598d2e66a283966ba43463c0d6739c42cbd33de3889e33a68e075966247e27c2ca48aa67c3390c3b07f7f74f2386ca9dfc31d9d64c9e7d92e2d12d9c95df333a29f6c3aec214ecc14242483395023be200000000000000000098a2ce78bd72bbdbd8019f7b5fedb018245c2996c97b8c77295572f338d1371c1802ed85b4ff55910de3b645eff08e937f5f1303ab2dd94fa81866168d8bb3a96f03f3b7e543ca92e664f70c34e4d445c963c9ae64e11ca2b9efed7bb74ef60c06697590cf996a72313ef70c0e023eab9a5e68c4693fd6ca31a68b7ed36d3f0978857995e022d27bc8a1bb37e955ab27b9cd40cc964d2efab5779d731c84e0b82517aaddc652"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100"/15, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x9000000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x8a, &(0x7f0000000580)=0x4, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r4, 0x0, 0xc1) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200c840, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$eJzs3U9vI2cZAPBnvHZIdrN1Chygh1JoUXYFaycNbSMObREITpWAcl9C4kRRnDhKnHYTVTQRH4ALAiROcOGCxDdAlbhwrJCK4AyiCIRgCwcO0EFjj9Ns1o6zwbFD8vtJs/PO3+d57Z3xvJ434wCurKci4uWIeD9N09sRUc7nF/Ih9ttDtt57999YzIYk0vTVvyWR5PM6+0ry8Y18s/GI+PpXIr6VPBx3e3dvbaFer23l09Xm+mZ1e3fvzur6wkptpbYxNzf7/PwL88/Nzwyknjcj4sUv/en73/3pl1/8xWdf/8Pdv9z6dpbWF/PlR+vxiIonLWxXvdR6LY5usBXx0hnjXTjFVg1zE6fb5uAc8wEAoLfsGv/DEfGpiLgd5bh28uUsAAAA8H8ofWky/p1EpN2NdZs5Hj3XBwAAAC6gQkRMRlKo5H0BJqNQqFTafXg/GtfTNyOan1lu7GwsZcsipqJUWF6t12byvsJTUUqy6dlW+YPpZ9vTB+9GtKbnIuLxiPheeaI1XVls1JdG/eUHAAAAXBE3jrX//1lut/8BAACAS2Zq1AkAAAAA5077HwAAAC4/7X8AAAC41L76yivZkHZ+/3rptd2dtcZrd5Zq22uV9Z3FymJja7Oy0mistJ7Zt95vf/VGY/NzsbFzr9qsbTer27t7d9cbOxvNu6sP/AQ2AAAAMESPf+Kt3yURsf/5idaQGeux7rWhZgact+JhKcnHXY7+3z/WHr87pKSAoej3mf6b8pASAYauOOoEgJEpPcrK/k4ALqWkz/KenXfezsefHGw+AADA4E1/vPf9/8KJW+6fvBi48BzEcHV17v8/NuI8gOFr3f/v1eH3OBcLcKmU9OqHK6/v/f9eHQDePm2ENH20jAAAgEGbbA1JoZJ/vTcZhUKlEnGz1d2/lCyv1msz+f2B35ZLH8qmZ1tbJn3bDAAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAACXWkThz8kv28/yny4/M3n8+4Gx5F/lyH8i9PUfvfqDewvN5tZsNv/vh/ObP8znPzuKbzAAAACA4zrt9E47HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6b37byx2hs68tHz+cf/6hYiY6ha/GOOt8XiUIuL6P5IoHtkuiYhrA4i/fxARH+sWP8nSOgzZLf7E+cePqfxV6Bb/xgDiw1X2Vnb+eTk7/sYi4ujxV4inWuPux18x4oHps2qd/7ITXJfzb+f8d63H8X/z2L6mesR44p2fV3vGP4h4otj9/NOJn/SI//Qp6/jNb+zt9VqW/jhiuuvnT/JArGpzfbO6vbt3Z3V9YaW2UtuYm5t9fv6F+efmZ6rLq/Va/u9D+y/1yS2r//Ue8af61P+ZU9b/P+/cu/+RHulk8W893SX+r36Sr/Fw/EL+2ffpvJwtn+6U99vlo5782a+fPKn+Sz3q3+/9v3XK+t/+2nf+GBHvH3lLAYAR2t7dW1uo12tbJxayy5Z+61zUQtZKvwBpKJytcNr/omcqvDnQHaZpmsb/dqQkMfIXvFMY9ZkJAAAYtA8u+kedCQAAAAAAAAAAAAAAAAAAAFxdw3ic2PGY+4elZBCP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGIj/BgAA//8ZadLP") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000500000000000000000000181200001b52d16b008cf02cc2193af1d3bd5a4a005b031173d6c21afbdb16ff7e782e770c502f4801d68eda1fd6ab64414589ff9619bc1b93d1da65e4b1d88d207bfb8deec87bed0f1f12cc0d9a729b60113f7d0275b18a3801d2f1500fc9027ed2a1346ddb13af99c94a42e5e5bdf02ff5c4f4953d7177d0bb86b62c446a80750eeeaf0c48bf08c3a23ca8e1b2b095", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodes=2']) close(r7) 210.181861ms ago: executing program 4 (id=3950): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x145) 100.553821ms ago: executing program 4 (id=3951): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) close(r2) 41.641916ms ago: executing program 4 (id=3952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) 0s ago: executing program 3 (id=3953): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f0000001f80)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000022000000010000002000018008000100", @ANYRES32=r2, @ANYBLOB="140002006261746164765f736c6176655f31"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): T18204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.010914][T18204] RSP: 002b:00007f81303f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 297.019334][T18204] RAX: ffffffffffffffda RBX: 000000000000020b RCX: 00007f813177def9 [ 297.027408][T18204] RDX: 00007f81303f6ef0 RSI: 0000000000000000 RDI: 00007f81317f1369 [ 297.035385][T18204] RBP: 0000000020000700 R08: 00007f81303f6bb7 R09: 00007f81303f6e40 [ 297.043389][T18204] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000200 [ 297.051497][T18204] R13: 00007f81303f6ef0 R14: 00007f81303f6eb0 R15: 0000000020000cc0 [ 297.059464][T18204] [ 297.095592][T18205] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 297.118226][T18205] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 297.570885][T18224] bond1: entered promiscuous mode [ 297.575987][T18224] bond1: entered allmulticast mode [ 297.582252][T18224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.594799][T18224] bond1 (unregistering): Released all slaves [ 297.658377][T18232] loop2: detected capacity change from 0 to 512 [ 297.666036][T18232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.674342][T18232] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 297.675944][T18234] tipc: Started in network mode [ 297.682311][T18232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 297.687160][T18234] tipc: Node identity 1, cluster identity 4711 [ 297.687173][T18234] tipc: Node number set to 1 [ 297.695511][T18232] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 297.715471][T18232] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 297.730099][T18232] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3496: dx entry: limit 65535 != root limit 120 [ 297.742267][T18232] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3496: Corrupt directory, running e2fsck is recommended [ 297.756437][T18226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3491'. [ 297.783120][T18237] netlink: 'syz.3.3498': attribute type 10 has an invalid length. [ 297.791651][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.798858][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.811846][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.819003][T18237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.826326][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.833374][T18237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.846872][T18237] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 297.856156][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3498'. [ 297.865795][T18239] bridge_slave_1: left allmulticast mode [ 297.871527][T18239] bridge_slave_1: left promiscuous mode [ 297.877365][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.886848][T18239] bridge_slave_0: left allmulticast mode [ 297.892532][T18239] bridge_slave_0: left promiscuous mode [ 297.898205][T18239] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.908655][T18240] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 297.918699][ T35] IPVS: starting estimator thread 0... [ 297.924366][T18240] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 297.938998][T18239] bond0: (slave bridge0): Releasing backup interface [ 298.045120][T18241] IPVS: using max 2928 ests per chain, 146400 per kthread [ 298.078939][T18251] loop0: detected capacity change from 0 to 512 [ 298.097878][T18251] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3503: couldn't read orphan inode 17 (err -116) [ 298.122733][T18251] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3503: bg 0: block 7: invalid block bitmap [ 298.176780][T18251] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 298.191166][T18256] ieee802154 phy0 wpan0: encryption failed: -90 [ 298.198439][T18251] macvtap1: entered promiscuous mode [ 298.203820][T18251] macvtap1: entered allmulticast mode [ 298.209469][T18251] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 298.241717][ T3339] hid-generic 0000:0000:0000.006B: unknown main item tag 0x7 [ 298.249205][ T3339] hid-generic 0000:0000:0000.006B: ignoring exceeding usage max [ 298.260004][ T3339] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 298.274165][ T3339] hid-generic 0000:0000:0000.006B: unknown main item tag 0x6 [ 298.281708][ T3339] hid-generic 0000:0000:0000.006B: unknown main item tag 0xd [ 298.294460][T18251] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 298.301927][T18251] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 298.311077][ T3339] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 298.576765][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'. [ 298.622035][T18274] hsr_slave_1 (unregistering): left promiscuous mode [ 298.735539][T18285] atomic_op ffff888115739928 conn xmit_atomic 0000000000000000 [ 298.812028][T18285] loop0: detected capacity change from 0 to 512 [ 298.843207][T18295] loop1: detected capacity change from 0 to 512 [ 298.882089][T18285] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.904062][T18295] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3516: couldn't read orphan inode 17 (err -116) [ 298.987413][T18295] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3516: bg 0: block 7: invalid block bitmap [ 299.009385][T18303] bond1: entered promiscuous mode [ 299.014456][T18303] bond1: entered allmulticast mode [ 299.022823][T18303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.033661][T18303] bond1 (unregistering): Released all slaves [ 299.071633][T18295] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 299.082306][T18295] macvtap1: entered promiscuous mode [ 299.087790][T18295] macvtap1: entered allmulticast mode [ 299.093197][T18295] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 299.127245][ T3340] hid-generic 0000:0000:0000.006C: unknown main item tag 0x7 [ 299.134710][ T3340] hid-generic 0000:0000:0000.006C: ignoring exceeding usage max [ 299.145660][ T3340] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 299.153849][ T3340] hid-generic 0000:0000:0000.006C: unknown main item tag 0x6 [ 299.155089][T18295] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 299.161363][ T3340] hid-generic 0000:0000:0000.006C: unknown main item tag 0xd [ 299.168567][T18295] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 299.183316][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 299.183329][ T29] audit: type=1326 audit(2000000022.689:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18312 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.212553][ T29] audit: type=1326 audit(2000000022.689:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18312 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.235713][ T29] audit: type=1326 audit(2000000022.689:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18312 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.258858][ T29] audit: type=1326 audit(2000000022.689:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18312 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.287660][ T3340] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 299.366901][ T29] audit: type=1326 audit(2000000022.879:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18319 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.390510][ T29] audit: type=1326 audit(2000000022.879:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18319 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.414111][ T29] audit: type=1326 audit(2000000022.879:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18319 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.437765][ T29] audit: type=1326 audit(2000000022.879:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18319 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.461368][ T29] audit: type=1326 audit(2000000022.879:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18319 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.484927][ T29] audit: type=1326 audit(2000000022.879:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18319 comm="syz.3.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 299.522331][T18331] atomic_op ffff888107dfd928 conn xmit_atomic 0000000000000000 [ 299.563973][T18333] loop3: detected capacity change from 0 to 512 [ 299.566799][T18331] loop1: detected capacity change from 0 to 512 [ 299.579105][T18333] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3531: couldn't read orphan inode 17 (err -116) [ 299.617778][T18333] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3531: bg 0: block 7: invalid block bitmap [ 299.623528][T18331] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.650081][T18333] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 299.678630][T18333] macvtap1: entered promiscuous mode [ 299.684189][T18333] macvtap1: entered allmulticast mode [ 299.689593][T18333] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 299.741277][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x7 [ 299.748798][ T35] hid-generic 0000:0000:0000.006D: ignoring exceeding usage max [ 299.759983][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.777260][T18343] loop1: detected capacity change from 0 to 1024 [ 299.783741][T18333] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 299.791034][T18333] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 299.799428][T18343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.811317][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.819094][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.826562][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.834070][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.841573][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.849015][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.856491][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.863876][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.871411][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.878832][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.886249][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.893643][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.901038][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.908497][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.915909][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.923344][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.930756][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.938183][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.945585][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 299.953061][ T35] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 300.056405][ T35] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 300.324046][T18365] loop0: detected capacity change from 0 to 2048 [ 300.467656][T18365] netlink: 'syz.0.3541': attribute type 21 has an invalid length. [ 300.761721][T18383] loop1: detected capacity change from 0 to 512 [ 300.770615][T18383] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3547: couldn't read orphan inode 17 (err -116) [ 300.783890][T18383] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3547: bg 0: block 7: invalid block bitmap [ 300.801730][T18383] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 300.809480][T18383] macvtap1: entered promiscuous mode [ 300.814893][T18383] macvtap1: entered allmulticast mode [ 300.820313][T18383] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 300.830811][T18383] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 300.838211][T18383] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 300.855613][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x7 [ 300.863072][ T9] hid-generic 0000:0000:0000.006E: ignoring exceeding usage max [ 300.874392][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 300.883860][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x6 [ 300.891309][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0xd [ 300.900974][ T9] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 301.064695][T18396] netlink: 'syz.1.3551': attribute type 10 has an invalid length. [ 301.082664][T18396] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.089946][T18396] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.102976][T18396] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.110097][T18396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.117464][T18396] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.124507][T18396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.142866][T18396] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 301.152365][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'. [ 301.164432][T18400] bridge_slave_1: left allmulticast mode [ 301.170157][T18400] bridge_slave_1: left promiscuous mode [ 301.175887][T18400] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.199253][T18400] bridge_slave_0: left allmulticast mode [ 301.204985][T18400] bridge_slave_0: left promiscuous mode [ 301.210670][T18400] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.239084][T18400] bond0: (slave bridge0): Releasing backup interface [ 301.331568][T18411] loop2: detected capacity change from 0 to 512 [ 301.353695][T18413] FAULT_INJECTION: forcing a failure. [ 301.353695][T18413] name failslab, interval 1, probability 0, space 0, times 0 [ 301.366515][T18413] CPU: 1 UID: 0 PID: 18413 Comm: syz.1.3558 Not tainted 6.11.0-syzkaller-04557-g2f27fce67173 #0 [ 301.376979][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 301.387034][T18413] Call Trace: [ 301.390309][T18413] [ 301.393253][T18413] dump_stack_lvl+0xf2/0x150 [ 301.397909][T18413] dump_stack+0x15/0x20 [ 301.402167][T18413] should_fail_ex+0x229/0x230 [ 301.406958][T18413] ? sidtab_sid2str_get+0xb8/0x140 [ 301.412081][T18413] should_failslab+0x8f/0xb0 [ 301.416676][T18413] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 301.423063][T18413] ? vsnprintf+0xdd8/0xe30 [ 301.427507][T18413] kmemdup_noprof+0x2a/0x60 [ 301.432022][T18413] sidtab_sid2str_get+0xb8/0x140 [ 301.437035][T18413] security_sid_to_context_core+0x1eb/0x2f0 [ 301.443013][T18413] security_sid_to_context+0x27/0x30 [ 301.448369][T18413] selinux_secid_to_secctx+0x22/0x30 [ 301.453672][T18413] security_secid_to_secctx+0x48/0x90 [ 301.459051][T18413] audit_log_task_context+0x8c/0x1b0 [ 301.464354][T18413] audit_log_task+0xfb/0x180 [ 301.469052][T18413] audit_seccomp+0x68/0x130 [ 301.473565][T18413] __seccomp_filter+0x6fa/0x1180 [ 301.478522][T18413] ? proc_fail_nth_write+0x12a/0x150 [ 301.483892][T18413] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.489598][T18413] ? vfs_write+0x580/0x910 [ 301.494033][T18413] __secure_computing+0x9f/0x1c0 [ 301.499032][T18413] syscall_trace_enter+0xd1/0x1f0 [ 301.504063][T18413] do_syscall_64+0xaa/0x1c0 [ 301.508648][T18413] ? clear_bhb_loop+0x55/0xb0 [ 301.513421][T18413] ? clear_bhb_loop+0x55/0xb0 [ 301.518229][T18413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.524338][T18413] RIP: 0033:0x7f813177def9 [ 301.528758][T18413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.548436][T18413] RSP: 002b:00007f81303f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000043 [ 301.556871][T18413] RAX: ffffffffffffffda RBX: 00007f8131935f80 RCX: 00007f813177def9 [ 301.564848][T18413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.570437][T18411] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3557: couldn't read orphan inode 17 (err -116) [ 301.572957][T18413] RBP: 00007f81303f7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.572974][T18413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.601170][T18413] R13: 0000000000000000 R14: 00007f8131935f80 R15: 00007ffc96b40098 [ 301.609148][T18413] [ 301.624621][T18411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3557: bg 0: block 7: invalid block bitmap [ 301.696372][T18411] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 301.714073][T18411] macvtap1: entered promiscuous mode [ 301.719469][T18411] macvtap1: entered allmulticast mode [ 301.725004][T18411] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 301.751287][ T35] hid-generic 0000:0000:0000.006F: unknown main item tag 0x7 [ 301.758823][ T35] hid-generic 0000:0000:0000.006F: ignoring exceeding usage max [ 301.770157][ T35] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 301.785090][ T35] hid-generic 0000:0000:0000.006F: unknown main item tag 0x6 [ 301.793049][ T35] hid-generic 0000:0000:0000.006F: unknown main item tag 0xd [ 301.798667][T18411] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 301.807925][T18411] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 301.815175][ T35] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 301.963141][T18436] loop2: detected capacity change from 0 to 2048 [ 302.018068][ T35] hid (null): global environment stack underflow [ 302.021896][T18436] netlink: 'syz.2.3564': attribute type 21 has an invalid length. [ 302.024996][ T35] hid-generic 0000:0000:0000.0070: unknown main item tag 0x2 [ 302.039744][ T35] hid-generic 0000:0000:0000.0070: global environment stack underflow [ 302.047981][ T35] hid-generic 0000:0000:0000.0070: item 0 2 1 11 parsing failed [ 302.058169][ T35] hid-generic 0000:0000:0000.0070: probe with driver hid-generic failed with error -22 [ 302.174921][T18452] loop3: detected capacity change from 0 to 512 [ 302.183769][T18452] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3570: couldn't read orphan inode 17 (err -116) [ 302.199765][T18452] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3570: bg 0: block 7: invalid block bitmap [ 302.238078][T18452] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 302.247190][T18452] macvtap1: entered promiscuous mode [ 302.252580][T18452] macvtap1: entered allmulticast mode [ 302.258055][T18452] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 302.278241][T18452] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 302.285502][T18452] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 302.306282][ T992] hid-generic 0000:0000:0000.0071: unknown main item tag 0x7 [ 302.313702][ T992] hid-generic 0000:0000:0000.0071: ignoring exceeding usage max [ 302.325304][ T992] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 302.334683][ T992] hid-generic 0000:0000:0000.0071: unknown main item tag 0x6 [ 302.342110][ T992] hid-generic 0000:0000:0000.0071: unknown main item tag 0xd [ 302.379466][T18463] netlink: 'syz.1.3574': attribute type 10 has an invalid length. [ 302.382891][ T992] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz0] on syz0 [ 302.387863][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3574'. [ 302.530447][T18474] loop0: detected capacity change from 0 to 512 [ 302.543240][T18474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.558326][T18477] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 302.565673][T18481] atomic_op ffff888114a5bd28 conn xmit_atomic 0000000000000000 [ 302.566469][T18477] macvtap1: entered promiscuous mode [ 302.578743][T18477] macvtap1: entered allmulticast mode [ 302.584122][T18477] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 302.593185][T18474] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 302.599013][T18481] loop1: detected capacity change from 0 to 512 [ 302.601166][T18474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 302.616400][T18474] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 302.625989][T18474] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 302.626481][T18481] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.651297][ T9] hid-generic 0000:0000:0000.0072: unknown main item tag 0x7 [ 302.658758][ T9] hid-generic 0000:0000:0000.0072: ignoring exceeding usage max [ 302.660970][T18477] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 302.670251][ T9] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 302.673747][T18477] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 302.694836][T18474] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3579: dx entry: limit 65535 != root limit 120 [ 302.707074][T18474] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3579: Corrupt directory, running e2fsck is recommended [ 302.721889][ T9] hid-generic 0000:0000:0000.0072: unknown main item tag 0x6 [ 302.729330][ T9] hid-generic 0000:0000:0000.0072: unknown main item tag 0xd [ 302.787051][ T9] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz0] on syz0 [ 302.867118][T18494] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 302.888816][T18494] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 302.956559][T18504] loop1: detected capacity change from 0 to 512 [ 302.969743][T18504] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3589: couldn't read orphan inode 17 (err -116) [ 302.977633][T18507] loop2: detected capacity change from 0 to 512 [ 302.985006][T18504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3589: bg 0: block 7: invalid block bitmap [ 303.000168][T18507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.011415][T18504] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 303.020149][T18504] macvtap1: entered promiscuous mode [ 303.021361][T18507] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 303.025598][T18504] macvtap1: entered allmulticast mode [ 303.033404][T18507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 303.037032][T18507] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 303.038819][T18504] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 303.046682][T18507] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 303.077747][T18507] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3590: dx entry: limit 65535 != root limit 120 [ 303.089965][T18507] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3590: Corrupt directory, running e2fsck is recommended [ 303.105672][T18504] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 303.112871][T18504] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 303.120635][ T992] hid-generic 0000:0000:0000.0073: unknown main item tag 0x7 [ 303.128049][ T992] hid-generic 0000:0000:0000.0073: ignoring exceeding usage max [ 303.138980][ T992] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 303.146424][ T992] hid-generic 0000:0000:0000.0073: unknown main item tag 0x6 [ 303.153809][ T992] hid-generic 0000:0000:0000.0073: unknown main item tag 0xd [ 303.163744][ T992] hid-generic 0000:0000:0000.0073: hidraw0: HID v0.00 Device [syz0] on syz0 [ 303.178526][T18510] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 303.189723][T18510] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 303.718188][T18525] loop3: detected capacity change from 0 to 1024 [ 303.744344][T18525] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 303.993595][T18535] bond1: entered promiscuous mode [ 303.998783][T18535] bond1: entered allmulticast mode [ 304.015640][T18535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.044203][T18535] bond1 (unregistering): Released all slaves [ 304.146531][T18546] loop2: detected capacity change from 0 to 512 [ 304.158721][T18546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.165789][T18544] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 304.178257][T18546] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 304.186316][T18546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 304.208978][T18546] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 304.218515][T18546] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 304.276530][T18546] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3605: dx entry: limit 65535 != root limit 120 [ 304.288945][T18546] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3605: Corrupt directory, running e2fsck is recommended [ 304.406456][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 304.406471][ T29] audit: type=1326 audit(2000000027.929:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.449792][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3611'. [ 304.458768][ T29] audit: type=1326 audit(2000000027.929:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.458769][T18562] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 304.458874][T18562] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 304.482263][ T29] audit: type=1326 audit(2000000027.959:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.525213][ T29] audit: type=1326 audit(2000000027.959:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.548690][ T29] audit: type=1326 audit(2000000027.959:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.572282][ T29] audit: type=1326 audit(2000000027.959:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.592563][T18559] bridge_slave_1: left allmulticast mode [ 304.595818][ T29] audit: type=1326 audit(2000000027.959:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.601434][T18559] bridge_slave_1: left promiscuous mode [ 304.624880][ T29] audit: type=1326 audit(2000000027.959:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.630540][T18559] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.653867][ T29] audit: type=1326 audit(2000000027.959:7029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.684491][ T29] audit: type=1326 audit(2000000027.959:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 304.711785][T18559] bridge_slave_0: left allmulticast mode [ 304.717501][T18559] bridge_slave_0: left promiscuous mode [ 304.723203][T18559] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.900896][T18577] loop0: detected capacity change from 0 to 512 [ 304.907475][T18577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.918854][T18577] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 304.926901][T18577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 304.935295][T18577] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 304.944827][T18577] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 304.956823][T18577] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3618: dx entry: limit 65535 != root limit 120 [ 304.969007][T18577] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3618: Corrupt directory, running e2fsck is recommended [ 305.013921][T18578] netlink: 'syz.4.3617': attribute type 21 has an invalid length. [ 305.023680][T18581] loop2: detected capacity change from 0 to 2048 [ 305.066874][T18581] netlink: 'syz.2.3619': attribute type 21 has an invalid length. [ 305.243282][ T7786] hid-generic 0000:0000:0000.0074: unknown main item tag 0x7 [ 305.250827][ T7786] hid-generic 0000:0000:0000.0074: ignoring exceeding usage max [ 305.267353][ T7786] hid-generic 0000:0000:0000.0074: unknown main item tag 0x5 [ 305.274814][ T7786] hid-generic 0000:0000:0000.0074: collection stack underflow [ 305.282311][ T7786] hid-generic 0000:0000:0000.0074: item 0 0 0 12 parsing failed [ 305.290221][ T7786] hid-generic 0000:0000:0000.0074: probe with driver hid-generic failed with error -22 [ 305.342154][T18595] atomic_op ffff88810c446928 conn xmit_atomic 0000000000000000 [ 305.357922][T18595] loop1: detected capacity change from 0 to 512 [ 305.377654][T18595] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.406377][T18529] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 305.409682][T18599] loop1: detected capacity change from 0 to 512 [ 305.429269][T18599] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3624: couldn't read orphan inode 17 (err -116) [ 305.444131][T18599] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3624: bg 0: block 7: invalid block bitmap [ 305.462540][T18599] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 305.470003][T18599] macvtap1: entered promiscuous mode [ 305.475440][T18599] macvtap1: entered allmulticast mode [ 305.480810][T18599] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 305.490929][T18599] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 305.498149][T18599] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 305.516333][ T992] hid-generic 0000:0000:0000.0075: unknown main item tag 0x7 [ 305.523823][ T992] hid-generic 0000:0000:0000.0075: ignoring exceeding usage max [ 305.534998][ T992] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 305.543582][ T992] hid-generic 0000:0000:0000.0075: unknown main item tag 0x6 [ 305.550986][ T992] hid-generic 0000:0000:0000.0075: unknown main item tag 0xd [ 305.575088][ T992] hid-generic 0000:0000:0000.0075: hidraw0: HID v0.00 Device [syz0] on syz0 [ 305.760377][T18627] loop3: detected capacity change from 0 to 512 [ 305.770865][T18627] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3635: couldn't read orphan inode 17 (err -116) [ 305.784269][T18627] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3635: bg 0: block 7: invalid block bitmap [ 305.803811][ T3340] hid-generic 0000:0000:0000.0076: unknown main item tag 0x7 [ 305.811312][ T3340] hid-generic 0000:0000:0000.0076: ignoring exceeding usage max [ 305.822123][ T3340] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 305.835224][ T3340] hid-generic 0000:0000:0000.0076: unknown main item tag 0x6 [ 305.842708][ T3340] hid-generic 0000:0000:0000.0076: unknown main item tag 0xd [ 305.853116][ T3340] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz0] on syz0 [ 305.919007][T18632] loop1: detected capacity change from 0 to 512 [ 305.937011][T18632] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 305.945243][T18632] System zones: 0-2, 18-18, 34-34 [ 305.956525][T18632] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3634: bg 0: block 248: padding at end of block bitmap is not set [ 305.980979][T18632] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.3634: Failed to acquire dquot type 1 [ 306.001822][T18632] EXT4-fs (loop1): 1 truncate cleaned up [ 306.008227][T18632] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.038447][T18632] EXT4-fs error (device loop1): ext4_lookup:1815: inode #2: comm syz.1.3634: deleted inode referenced: 12 [ 306.102150][T18657] loop2: detected capacity change from 0 to 512 [ 306.119695][T18657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.142499][T18657] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 306.150552][T18657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 306.175190][T18657] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 306.184789][T18657] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 306.196515][T18657] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3646: dx entry: limit 65535 != root limit 120 [ 306.208685][T18657] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3646: Corrupt directory, running e2fsck is recommended [ 306.242545][T18663] netlink: 'syz.4.3648': attribute type 21 has an invalid length. [ 306.594645][T17787] EXT4-fs unmount: 54 callbacks suppressed [ 306.594660][T17787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.622373][T18684] loop0: detected capacity change from 0 to 512 [ 306.629033][T18684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.639843][T18684] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 306.647932][T18684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 306.656069][T18684] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 306.665560][T18684] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 306.674784][T18684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 306.690030][T18684] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3656: dx entry: limit 65535 != root limit 120 [ 306.702317][T18684] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3656: Corrupt directory, running e2fsck is recommended [ 306.771550][T18695] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 306.786785][T18695] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 306.936764][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.996221][T18704] netlink: 'syz.2.3663': attribute type 10 has an invalid length. [ 307.006300][T18704] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.013515][T18704] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.024782][T18704] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.031999][T18704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.039305][T18704] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.046463][T18704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.058705][T18704] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 307.071639][T18708] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3664'. [ 307.081825][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'. [ 307.099734][T18711] bridge_slave_1: left allmulticast mode [ 307.102396][T18708] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.105408][T18711] bridge_slave_1: left promiscuous mode [ 307.118464][T18711] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.125696][T18708] vhci_hcd: invalid port number 23 [ 307.131421][T18711] bridge_slave_0: left allmulticast mode [ 307.137137][T18711] bridge_slave_0: left promiscuous mode [ 307.142814][T18711] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.156602][T18711] bond0: (slave bridge0): Releasing backup interface [ 307.178721][T18708] xt_CT: No such helper "pptp" [ 307.292295][T18721] loop1: detected capacity change from 0 to 512 [ 307.300305][T18721] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 307.311215][T18721] EXT4-fs (loop1): 1 truncate cleaned up [ 307.318725][T18721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.475066][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.502952][T18736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3674'. [ 307.563603][T18739] loop0: detected capacity change from 0 to 2048 [ 307.596264][T18744] loop3: detected capacity change from 0 to 2048 [ 307.603762][T18739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.654706][T18739] netlink: 'syz.0.3675': attribute type 21 has an invalid length. [ 307.686607][T18751] FAULT_INJECTION: forcing a failure. [ 307.686607][T18751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.699863][T18751] CPU: 0 UID: 0 PID: 18751 Comm: syz.2.3679 Not tainted 6.11.0-syzkaller-04557-g2f27fce67173 #0 [ 307.710475][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 307.720537][T18751] Call Trace: [ 307.723863][T18751] [ 307.726854][T18751] dump_stack_lvl+0xf2/0x150 [ 307.731454][T18751] dump_stack+0x15/0x20 [ 307.735710][T18751] should_fail_ex+0x229/0x230 [ 307.740395][T18751] should_fail_alloc_page+0xfd/0x110 [ 307.745696][T18751] __alloc_pages_noprof+0x109/0x360 [ 307.751005][T18751] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 307.756382][T18751] alloc_pages_noprof+0xe1/0x100 [ 307.761346][T18751] get_free_pages_noprof+0xc/0x30 [ 307.766401][T18751] __se_sys_mincore+0xde/0x480 [ 307.771158][T18751] __x64_sys_mincore+0x43/0x50 [ 307.775971][T18751] x64_sys_call+0x2cdd/0x2d60 [ 307.780660][T18751] do_syscall_64+0xc9/0x1c0 [ 307.785286][T18751] ? clear_bhb_loop+0x55/0xb0 [ 307.789984][T18751] ? clear_bhb_loop+0x55/0xb0 [ 307.794692][T18751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.800662][T18751] RIP: 0033:0x7f811de5def9 [ 307.805080][T18751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.824717][T18751] RSP: 002b:00007f811cad1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 307.833202][T18751] RAX: ffffffffffffffda RBX: 00007f811e015f80 RCX: 00007f811de5def9 [ 307.841173][T18751] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020dff000 [ 307.849187][T18751] RBP: 00007f811cad1090 R08: 0000000000000000 R09: 0000000000000000 [ 307.857245][T18751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.865218][T18751] R13: 0000000000000000 R14: 00007f811e015f80 R15: 00007fff64db02d8 [ 307.873366][T18751] [ 308.106282][T18767] loop2: detected capacity change from 0 to 512 [ 308.117594][T18767] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3685: couldn't read orphan inode 17 (err -116) [ 308.145609][T18767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.164263][T18768] bond1: entered promiscuous mode [ 308.169361][T18768] bond1: entered allmulticast mode [ 308.170872][T18767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3685: bg 0: block 7: invalid block bitmap [ 308.186767][T18768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.199469][T18768] bond1 (unregistering): Released all slaves [ 308.234435][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.271858][T18772] loop2: detected capacity change from 0 to 512 [ 308.287291][T18772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.302601][T18772] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 308.310647][T18772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 308.329937][T18772] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 308.339501][T18772] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 308.356549][T18772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 308.390492][T18772] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3686: dx entry: limit 65535 != root limit 120 [ 308.402649][T18772] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3686: Corrupt directory, running e2fsck is recommended [ 308.427044][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.522161][T18787] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 308.555403][T18787] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 308.621079][T18796] loop3: detected capacity change from 0 to 512 [ 308.624158][T18793] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 308.641027][T18796] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3696: couldn't read orphan inode 17 (err -116) [ 308.666957][T18796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.709744][T18796] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3696: bg 0: block 7: invalid block bitmap [ 308.728509][T18799] loop0: detected capacity change from 0 to 512 [ 308.761346][ T35] hid-generic 0000:0000:0000.0077: unknown main item tag 0x7 [ 308.768877][ T35] hid-generic 0000:0000:0000.0077: ignoring exceeding usage max [ 308.779777][ T35] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 308.826698][T18799] EXT4-fs (loop0): too many log groups per flexible block group [ 308.834514][T18799] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 308.841360][ T35] hid-generic 0000:0000:0000.0077: unknown main item tag 0x6 [ 308.848862][ T35] hid-generic 0000:0000:0000.0077: unknown main item tag 0xd [ 308.856820][ T35] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz0] on syz0 [ 308.868127][T18799] EXT4-fs (loop0): mount failed [ 308.894829][T16897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.931150][T18804] loop3: detected capacity change from 0 to 512 [ 308.951111][T18804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.976178][T18804] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 308.984114][T18804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 308.992242][T18804] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 309.001792][T18804] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 309.013283][T18804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 309.022907][T18808] loop0: detected capacity change from 0 to 2048 [ 309.033563][T18804] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3698: dx entry: limit 65535 != root limit 120 [ 309.045783][T18804] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3698: Corrupt directory, running e2fsck is recommended [ 309.100450][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.123589][T18808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.150391][T18808] netlink: 'syz.0.3699': attribute type 21 has an invalid length. [ 309.232280][T18812] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 309.285609][T18817] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 309.534290][T18822] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 309.551517][T18822] macvtap1: entered promiscuous mode [ 309.557054][T18822] macvtap1: entered allmulticast mode [ 309.562529][T18822] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 309.600720][ T3394] hid-generic 0000:0000:0000.0078: unknown main item tag 0x7 [ 309.608189][ T3394] hid-generic 0000:0000:0000.0078: ignoring exceeding usage max [ 309.619198][ T3394] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 309.665960][ T3394] hid-generic 0000:0000:0000.0078: unknown main item tag 0x6 [ 309.673417][ T3394] hid-generic 0000:0000:0000.0078: unknown main item tag 0xd [ 309.696699][ T3394] hid-generic 0000:0000:0000.0078: hidraw0: HID v0.00 Device [syz0] on syz0 [ 309.774261][T16897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.816637][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.861280][T18839] atomic_op ffff888114a5bd28 conn xmit_atomic 0000000000000000 [ 309.905583][T18839] loop3: detected capacity change from 0 to 512 [ 309.947914][T18839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.965475][T18839] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.986394][T18839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.026690][T18845] netlink: 'syz.4.3710': attribute type 10 has an invalid length. [ 310.058576][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3710'. [ 310.106434][T18856] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 310.209078][T18860] loop0: detected capacity change from 0 to 2048 [ 310.280081][T18860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.322121][T18860] netlink: 'syz.0.3717': attribute type 21 has an invalid length. [ 310.509502][T18878] atomic_op ffff888115e25928 conn xmit_atomic 0000000000000000 [ 310.869121][ T35] hid-generic 0000:0000:0000.0079: unknown main item tag 0x7 [ 310.876590][ T35] hid-generic 0000:0000:0000.0079: ignoring exceeding usage max [ 310.887435][ T35] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 310.894822][ T35] hid-generic 0000:0000:0000.0079: collection stack underflow [ 310.902296][ T35] hid-generic 0000:0000:0000.0079: item 0 0 0 12 parsing failed [ 310.948340][T18889] netlink: 'syz.4.3728': attribute type 21 has an invalid length. [ 310.969770][ T35] hid-generic 0000:0000:0000.0079: probe with driver hid-generic failed with error -22 [ 310.999793][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.042602][T18893] loop2: detected capacity change from 0 to 512 [ 311.071709][T18893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.095458][T18893] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 311.103428][T18893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 311.109045][T18898] loop0: detected capacity change from 0 to 1024 [ 311.125143][T18893] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 311.134620][T18893] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 311.145433][T18893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 311.167828][T18898] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 311.196656][T18893] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3730: dx entry: limit 65535 != root limit 120 [ 311.208829][T18893] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3730: Corrupt directory, running e2fsck is recommended [ 311.245264][T18898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.281960][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.311479][T18893] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 311.327730][T18893] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 311.380400][T18907] loop0: detected capacity change from 0 to 512 [ 311.408625][T18907] EXT4-fs: Ignoring removed orlov option [ 311.415867][T18907] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 311.439310][T18907] EXT4-fs (loop0): 1 truncate cleaned up [ 311.440857][T18901] loop3: detected capacity change from 0 to 512 [ 311.466133][T18907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.495748][T18907] ext4: Unknown parameter 'UؾLHd2Ȟz}o2FG%QA\*TZ918’EܭG [ 311.495748][T18907]  "|kW#B0yYb)A7' [ 311.525973][T18901] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 311.535382][T18907] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 4: comm syz.0.3734: path /156/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 311.540603][T18901] System zones: 0-2, 18-18, 34-34 [ 311.567006][T18907] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 311.593477][T18901] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3732: bg 0: block 248: padding at end of block bitmap is not set [ 311.614850][T18907] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 311.640451][T18901] __quota_error: 194 callbacks suppressed [ 311.640466][T18901] Quota error (device loop3): write_blk: dquota write failed [ 311.653704][T18901] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 311.682114][T18901] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.3732: Failed to acquire dquot type 1 [ 311.699607][T18901] EXT4-fs (loop3): 1 truncate cleaned up [ 311.709324][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.723234][T18901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.745176][T18901] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.769311][T18901] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz.3.3732: deleted inode referenced: 12 [ 311.799122][T18901] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz.3.3732: deleted inode referenced: 12 [ 311.818783][T18918] atomic_op ffff888102c3e928 conn xmit_atomic 0000000000000000 [ 311.820066][T18916] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 311.881425][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.953687][T18922] loop2: detected capacity change from 0 to 2048 [ 311.978584][T18922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.002435][T18922] netlink: 'syz.2.3739': attribute type 21 has an invalid length. [ 312.037029][ T3394] hid-generic 0000:0000:0000.007A: unknown main item tag 0x7 [ 312.044508][ T3394] hid-generic 0000:0000:0000.007A: ignoring exceeding usage max [ 312.055750][ T3394] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 312.063176][ T3394] hid-generic 0000:0000:0000.007A: collection stack underflow [ 312.070671][ T3394] hid-generic 0000:0000:0000.007A: item 0 0 0 12 parsing failed [ 312.108506][T16897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.149843][ T3394] hid-generic 0000:0000:0000.007A: probe with driver hid-generic failed with error -22 [ 312.189961][ T29] audit: type=1326 audit(2000000035.709:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18933 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 312.213511][ T29] audit: type=1326 audit(2000000035.709:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18933 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 312.255183][ T29] audit: type=1326 audit(2000000035.709:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18933 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 312.273115][T18936] loop0: detected capacity change from 0 to 512 [ 312.278900][ T29] audit: type=1326 audit(2000000035.709:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18933 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 312.308669][ T29] audit: type=1326 audit(2000000035.709:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18933 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 312.322895][T18936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 312.332158][ T29] audit: type=1326 audit(2000000035.709:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18933 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 312.362350][ T29] audit: type=1326 audit(2000000035.709:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18933 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 312.385858][ T29] audit: type=1326 audit(2000000035.709:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18933 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 312.416287][T18936] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 312.424267][T18936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 312.444515][T18936] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 312.454107][T18936] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 312.475062][T18936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 312.588491][T18936] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3744: dx entry: limit 65535 != root limit 120 [ 312.600677][T18936] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3744: Corrupt directory, running e2fsck is recommended [ 312.658591][T18941] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 312.709283][T18936] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 312.762152][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.839794][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.941371][T18953] loop0: detected capacity change from 0 to 512 [ 312.964573][T18953] EXT4-fs: Ignoring removed orlov option [ 312.984072][T18953] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 313.015461][T18953] EXT4-fs (loop0): 1 truncate cleaned up [ 313.021649][T18953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.042855][T18957] netlink: 'syz.3.3751': attribute type 10 has an invalid length. [ 313.050936][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3751'. [ 313.097568][T18953] ext4: Unknown parameter 'UؾLHd2Ȟz}o2FG%QA\*TZ918’EܭG [ 313.097568][T18953]  "|kW#B0yYb)A7' [ 313.159462][T18953] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 4: comm syz.0.3749: path /163/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 313.218553][T18953] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 313.258081][ T992] hid-generic 0000:0000:0000.007B: unknown main item tag 0x7 [ 313.265543][ T992] hid-generic 0000:0000:0000.007B: ignoring exceeding usage max [ 313.267092][T18953] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 313.276543][ T992] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 313.293666][ T992] hid-generic 0000:0000:0000.007B: collection stack underflow [ 313.301197][ T992] hid-generic 0000:0000:0000.007B: item 0 0 0 12 parsing failed [ 313.355867][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.365150][ T992] hid-generic 0000:0000:0000.007B: probe with driver hid-generic failed with error -22 [ 313.425557][T18969] xt_CT: No such helper "pptp" [ 313.458232][T18975] loop3: detected capacity change from 0 to 512 [ 313.478679][T18975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.497549][T18975] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 313.505561][T18975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 313.541313][T18975] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 313.550885][T18975] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 313.605517][T18975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 313.619092][T18966] loop2: detected capacity change from 0 to 512 [ 313.637206][T18975] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3758: dx entry: limit 65535 != root limit 120 [ 313.649380][T18975] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3758: Corrupt directory, running e2fsck is recommended [ 313.689175][T18966] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 313.703890][T18966] System zones: 0-2, 18-18, 34-34 [ 313.710923][T18966] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3755: bg 0: block 248: padding at end of block bitmap is not set [ 313.727073][T18966] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.3755: Failed to acquire dquot type 1 [ 313.738998][T18966] EXT4-fs (loop2): 1 truncate cleaned up [ 313.745144][T18966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.758943][T18988] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 313.760417][T18966] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.792628][T18966] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz.2.3755: deleted inode referenced: 12 [ 313.796362][T18997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3764'. [ 313.823220][T18988] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 314.050977][ T3394] hid-generic 0000:0000:0000.007C: unknown main item tag 0x7 [ 314.058518][ T3394] hid-generic 0000:0000:0000.007C: ignoring exceeding usage max [ 314.069882][ T3394] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 314.077307][ T3394] hid-generic 0000:0000:0000.007C: collection stack underflow [ 314.084787][ T3394] hid-generic 0000:0000:0000.007C: item 0 0 0 12 parsing failed [ 314.110611][ T3394] hid-generic 0000:0000:0000.007C: probe with driver hid-generic failed with error -22 [ 314.192311][T19014] loop0: detected capacity change from 0 to 1024 [ 314.204778][T19014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 314.224259][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.225409][T19014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.296249][T16897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.338625][T19019] bond1: entered promiscuous mode [ 314.343732][T19019] bond1: entered allmulticast mode [ 314.391469][T19019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.438427][T19019] bond1 (unregistering): Released all slaves [ 314.581118][T19029] loop2: detected capacity change from 0 to 512 [ 314.595344][T19029] EXT4-fs: Ignoring removed orlov option [ 314.656400][T19029] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 314.686339][T19029] EXT4-fs (loop2): 1 truncate cleaned up [ 314.692406][T19029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.748425][T19029] ext4: Unknown parameter 'UؾLHd2Ȟz}o2FG%QA\*TZ918’EܭG [ 314.748425][T19029]  "|kW#B0yYb)A7' [ 314.804342][T19029] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 4: comm syz.2.3778: path /46/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 314.855878][T19029] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 314.875742][T19029] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 314.906719][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.136653][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.239322][ T3394] hid-generic 0000:0000:0000.007D: unknown main item tag 0x7 [ 315.246861][ T3394] hid-generic 0000:0000:0000.007D: ignoring exceeding usage max [ 315.257740][ T3394] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 315.265240][ T3394] hid-generic 0000:0000:0000.007D: collection stack underflow [ 315.272716][ T3394] hid-generic 0000:0000:0000.007D: item 0 0 0 12 parsing failed [ 315.288821][ T3394] hid-generic 0000:0000:0000.007D: probe with driver hid-generic failed with error -22 [ 315.356987][T19054] loop2: detected capacity change from 0 to 512 [ 315.364548][T19053] netlink: 'syz.0.3789': attribute type 10 has an invalid length. [ 315.375308][T19054] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3787: couldn't read orphan inode 17 (err -116) [ 315.398723][T19053] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.405952][T19053] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.428422][T19054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.459939][T19053] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.467027][T19053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.474373][T19053] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.481418][T19053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.498590][T19049] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3787: bg 0: block 7: invalid block bitmap [ 315.529179][T19053] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 315.537957][T19060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 315.555114][T19060] bridge_slave_1: left allmulticast mode [ 315.560844][T19060] bridge_slave_1: left promiscuous mode [ 315.566603][T19060] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.604727][T19060] bridge_slave_0: left allmulticast mode [ 315.610432][T19060] bridge_slave_0: left promiscuous mode [ 315.616322][T19060] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.663144][T19060] bond0: (slave bridge0): Releasing backup interface [ 315.724258][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.760567][T19064] loop2: detected capacity change from 0 to 1024 [ 315.785646][T19064] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 315.796894][T19064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.852986][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.014405][T19079] netlink: 'syz.0.3798': attribute type 10 has an invalid length. [ 316.036514][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 316.185900][T19086] loop2: detected capacity change from 0 to 1024 [ 316.202008][T19086] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 316.222570][T19084] loop0: detected capacity change from 0 to 2048 [ 316.230450][T19086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.256970][T19084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.300574][T19084] netlink: 'syz.0.3800': attribute type 21 has an invalid length. [ 316.360717][T19093] loop3: detected capacity change from 0 to 512 [ 316.398597][T19093] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3802: couldn't read orphan inode 17 (err -116) [ 316.424585][T19093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.462543][T19093] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3802: bg 0: block 7: invalid block bitmap [ 316.492344][ T35] hid-generic 0000:0000:0000.007E: unknown main item tag 0x7 [ 316.499840][ T35] hid-generic 0000:0000:0000.007E: ignoring exceeding usage max [ 316.511110][ T35] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 316.528452][ T35] hid-generic 0000:0000:0000.007E: unknown main item tag 0x6 [ 316.535910][ T35] hid-generic 0000:0000:0000.007E: unknown main item tag 0xd [ 316.554143][ T35] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 316.563829][ T3394] hid-generic 0000:0000:0000.007F: unknown main item tag 0x7 [ 316.571312][ T3394] hid-generic 0000:0000:0000.007F: ignoring exceeding usage max [ 316.582463][ T3394] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 316.598044][T16897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.609312][ T3394] hid-generic 0000:0000:0000.007F: unknown main item tag 0x6 [ 316.616787][ T3394] hid-generic 0000:0000:0000.007F: unknown main item tag 0xd [ 316.634264][ T3394] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 316.670971][T19101] netlink: 'syz.3.3805': attribute type 10 has an invalid length. [ 316.694101][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3805'. [ 316.801433][T19108] bond1: entered promiscuous mode [ 316.806580][T19108] bond1: entered allmulticast mode [ 316.826287][T19108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.842079][T19108] bond1 (unregistering): Released all slaves [ 316.960584][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 316.960597][ T29] audit: type=1326 audit(2000000040.479:7284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 316.990769][ T29] audit: type=1326 audit(2000000040.479:7285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.037685][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.041326][T19121] loop3: detected capacity change from 0 to 512 [ 317.070552][T18025] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 317.075940][T19118] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3813'. [ 317.096805][ T29] audit: type=1326 audit(2000000040.539:7286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.096996][T19121] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3815: couldn't read orphan inode 17 (err -116) [ 317.120325][ T29] audit: type=1326 audit(2000000040.539:7287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.120377][ T29] audit: type=1326 audit(2000000040.539:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.120397][ T29] audit: type=1326 audit(2000000040.539:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.195209][T18025] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 317.202816][ T29] audit: type=1326 audit(2000000040.539:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.242236][T19121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.242889][ T29] audit: type=1326 audit(2000000040.539:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.278544][ T29] audit: type=1326 audit(2000000040.539:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.302029][ T29] audit: type=1326 audit(2000000040.539:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.3.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd25edef9 code=0x7ffc0000 [ 317.338832][T19121] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3815: bg 0: block 7: invalid block bitmap [ 317.397094][T16897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.425530][T19137] netlink: 'syz.3.3821': attribute type 10 has an invalid length. [ 317.466398][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3821'. [ 317.490278][T19127] loop0: detected capacity change from 0 to 512 [ 317.516618][T19127] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 317.526185][T18025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.542162][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.567046][T19151] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 317.576268][T19127] System zones: 0-2, 18-18, 34-34 [ 317.587304][T19127] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3817: bg 0: block 248: padding at end of block bitmap is not set [ 317.624197][ T35] hid-generic 0000:0000:0000.0080: unknown main item tag 0x7 [ 317.631708][ T35] hid-generic 0000:0000:0000.0080: ignoring exceeding usage max [ 317.643081][ T35] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 317.667122][T19154] loop3: detected capacity change from 0 to 1024 [ 317.674818][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.689169][ T35] hid-generic 0000:0000:0000.0080: unknown main item tag 0x6 [ 317.689175][T19127] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.3817: Failed to acquire dquot type 1 [ 317.696723][ T35] hid-generic 0000:0000:0000.0080: unknown main item tag 0xd [ 317.717144][ T35] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz0] on syz0 [ 317.727252][T19154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 317.735378][T19127] EXT4-fs (loop0): 1 truncate cleaned up [ 317.741925][T19127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.764687][T19154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.775334][T19127] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.790286][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.840135][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.902270][T19135] chnl_net:caif_netlink_parms(): no params data found [ 317.924525][T19127] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz.0.3817: deleted inode referenced: 12 [ 317.987431][T19130] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz.0.3817: deleted inode referenced: 12 [ 318.216714][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.273505][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.288041][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.302286][ T40] bond0 (unregistering): Released all slaves [ 318.328867][T19135] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.335984][T19135] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.353598][T19135] bridge_slave_0: entered allmulticast mode [ 318.366957][T19135] bridge_slave_0: entered promiscuous mode [ 318.392293][ T40] hsr_slave_0: left promiscuous mode [ 318.400957][ T40] hsr_slave_1: left promiscuous mode [ 318.418869][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.426326][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.450244][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.457871][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.481175][T19179] loop0: detected capacity change from 0 to 512 [ 318.503199][ T40] veth1_macvtap: left promiscuous mode [ 318.508780][ T40] veth0_macvtap: left promiscuous mode [ 318.514304][ T40] veth1_vlan: left promiscuous mode [ 318.519547][ T40] veth0_vlan: left promiscuous mode [ 318.537234][T16897] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 318.565762][T19179] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3830: couldn't read orphan inode 17 (err -116) [ 318.587116][T19179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.619730][T16897] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 318.703815][ T35] hid-generic 0000:0000:0000.0081: unknown main item tag 0x7 [ 318.711265][ T35] hid-generic 0000:0000:0000.0081: ignoring exceeding usage max [ 318.722170][ T35] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 318.734095][ T40] team0 (unregistering): Port device team_slave_1 removed [ 318.755096][ T35] hid-generic 0000:0000:0000.0081: unknown main item tag 0x6 [ 318.762506][ T35] hid-generic 0000:0000:0000.0081: unknown main item tag 0xd [ 318.770444][ T40] team0 (unregistering): Port device team_slave_0 removed [ 318.785332][ T35] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz0] on syz0 [ 318.838770][T19135] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.845916][T19135] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.865268][T19135] bridge_slave_1: entered allmulticast mode [ 318.872344][T19135] bridge_slave_1: entered promiscuous mode [ 318.897957][T19179] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 318.915143][T19179] macvtap1: entered promiscuous mode [ 318.920632][T19179] macvtap1: entered allmulticast mode [ 318.930965][T19179] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 318.957028][T19179] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 318.964329][T19179] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 319.023063][T19135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.043119][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.078066][T19135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.107395][T19155] chnl_net:caif_netlink_parms(): no params data found [ 319.120100][T19184] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3832'. [ 319.150830][T19135] team0: Port device team_slave_0 added [ 319.159255][T19191] loop0: detected capacity change from 0 to 512 [ 319.183879][T19184] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.193660][T16897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.206986][T19135] team0: Port device team_slave_1 added [ 319.234276][T19191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.245310][T19184] vhci_hcd: invalid port number 23 [ 319.289339][T19135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.296323][T19135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.322351][T19135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.345823][T19184] xt_CT: No such helper "pptp" [ 319.355096][T19191] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 319.363017][T19191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 319.389887][T19135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.397017][T19135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.423082][T19135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.445168][T19191] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 319.454727][T19191] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 319.479575][T19155] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.486673][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.494214][T19191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 319.515176][T19155] bridge_slave_0: entered allmulticast mode [ 319.521727][T19155] bridge_slave_0: entered promiscuous mode [ 319.532130][T19191] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3834: dx entry: limit 65535 != root limit 120 [ 319.536850][T19155] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.544309][T19191] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3834: Corrupt directory, running e2fsck is recommended [ 319.551394][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.642582][T19155] bridge_slave_1: entered allmulticast mode [ 319.655158][T19155] bridge_slave_1: entered promiscuous mode [ 319.662740][ T40] IPVS: stop unused estimator thread 0... [ 319.675041][T19209] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 319.695463][T19209] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 319.718572][T19155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.753304][T19135] hsr_slave_0: entered promiscuous mode [ 319.765367][T19135] hsr_slave_1: entered promiscuous mode [ 319.772688][T19135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.780271][T19135] Cannot create hsr debugfs directory [ 319.787131][T19155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.800786][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.843800][T19155] team0: Port device team_slave_0 added [ 319.864859][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.896564][T19155] team0: Port device team_slave_1 added [ 319.939927][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.953834][T19155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.961059][T19155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.987052][T19155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.045711][T19155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.052793][T19155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.078818][T19155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.111377][T16549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.122270][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.159367][T19219] loop0: detected capacity change from 0 to 512 [ 320.171034][T19219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.197547][T19219] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 320.205602][T19219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 320.222985][T19219] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 320.224701][T19155] hsr_slave_0: entered promiscuous mode [ 320.232486][T19219] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 320.247417][T19219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 320.276884][T19219] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3840: dx entry: limit 65535 != root limit 120 [ 320.289355][T19219] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3840: Corrupt directory, running e2fsck is recommended [ 320.316601][T19155] hsr_slave_1: entered promiscuous mode [ 320.336522][T19155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.344073][T19155] Cannot create hsr debugfs directory [ 320.361746][T19135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.436187][T19222] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 320.452015][T19201] chnl_net:caif_netlink_parms(): no params data found [ 320.466587][T19222] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 320.483778][T19135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.587025][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.609605][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.625409][ T40] bond0 (unregistering): Released all slaves [ 320.643953][T19135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.677610][ T40] tipc: Left network mode [ 320.708356][ T40] hsr_slave_0: left promiscuous mode [ 320.714347][ T40] hsr_slave_1: left promiscuous mode [ 320.721317][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.728787][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.743992][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.751461][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.765116][ T40] veth1_macvtap: left promiscuous mode [ 320.770692][ T40] veth0_macvtap: left promiscuous mode [ 320.776227][ T40] veth1_vlan: left promiscuous mode [ 320.781477][ T40] veth0_vlan: left promiscuous mode [ 320.928640][ T40] team0 (unregistering): Port device team_slave_1 removed [ 320.951124][ T40] team0 (unregistering): Port device team_slave_0 removed [ 321.030867][T19135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.084670][T19201] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.092044][T19201] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.125187][T19201] bridge_slave_0: entered allmulticast mode [ 321.133334][T19201] bridge_slave_0: entered promiscuous mode [ 321.141619][T19201] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.148707][T19201] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.157153][T19201] bridge_slave_1: entered allmulticast mode [ 321.163576][T19201] bridge_slave_1: entered promiscuous mode [ 321.183061][T19201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.207580][T19201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.265581][T19135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.274241][T19135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.292775][T19233] loop0: detected capacity change from 0 to 512 [ 321.303314][T19135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.317165][T19233] EXT4-fs: Ignoring removed orlov option [ 321.337785][T19135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.345459][T19233] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 321.364997][T19201] team0: Port device team_slave_0 added [ 321.371478][T19201] team0: Port device team_slave_1 added [ 321.386117][T19233] EXT4-fs (loop0): 1 truncate cleaned up [ 321.409210][T19233] ext4: Unknown parameter 'UؾLHd2Ȟz}o2FG%QA\*TZ918’EܭG [ 321.409210][T19233]  "|kW#B0yYb)A7' [ 321.440710][T19201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.447721][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.473697][T19201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.496066][T19233] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 4: comm syz.0.3843: path /193/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 321.556059][T19201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.557612][T19233] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 321.563062][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.571623][T19233] block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 321.606247][T19201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.627071][T19233] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 321.628626][ T40] IPVS: stop unused estimator thread 0... [ 321.671873][T19201] hsr_slave_0: entered promiscuous mode [ 321.685644][T19201] hsr_slave_1: entered promiscuous mode [ 321.696353][T19201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.714044][T19201] Cannot create hsr debugfs directory [ 321.740905][T19155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.754869][T19135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.772501][T19155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.784803][T19155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.821308][T19135] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.835549][T19155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.889342][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.896457][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.916009][ T3355] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.923077][ T3355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.059046][T19155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.101144][T19155] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.129349][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.136435][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.179645][T19135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.218361][ T2888] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.225543][ T2888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.351438][T19201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 322.377193][T19201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 322.405403][T19201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 322.443947][T19201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 322.478940][T19135] veth0_vlan: entered promiscuous mode [ 322.517304][T19155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.549241][T19135] veth1_vlan: entered promiscuous mode [ 322.573486][T19201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.597194][T19201] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.645953][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 322.646001][ T29] audit: type=1326 audit(2000000046.169:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.678055][T19135] veth0_macvtap: entered promiscuous mode [ 322.698921][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.706237][ T5472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.725181][ T29] audit: type=1326 audit(2000000046.199:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.748784][ T29] audit: type=1326 audit(2000000046.209:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.772448][ T29] audit: type=1326 audit(2000000046.209:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.795963][ T29] audit: type=1326 audit(2000000046.209:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.804712][T19135] veth1_macvtap: entered promiscuous mode [ 322.819431][ T29] audit: type=1326 audit(2000000046.209:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.848933][ T29] audit: type=1326 audit(2000000046.209:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.860754][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.872598][ T29] audit: type=1326 audit(2000000046.209:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.882976][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.906443][ T29] audit: type=1326 audit(2000000046.209:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.916213][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.916229][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.939671][ T29] audit: type=1326 audit(2000000046.209:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.4.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8274def9 code=0x7ffc0000 [ 322.950068][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.950083][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.003842][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.014308][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.061548][T19135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.078442][T19201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.088913][T19201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.131150][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.138253][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.175907][T19269] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3847'. [ 323.209395][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.219981][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.229873][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.240326][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.250212][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.260645][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.270485][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.280957][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.296707][T19135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.305288][T19155] veth0_vlan: entered promiscuous mode [ 323.316230][T19135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.324939][T19135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.333952][T19135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.342710][T19135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.370621][T19155] veth1_vlan: entered promiscuous mode [ 323.393625][T19201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.428919][T19155] veth0_macvtap: entered promiscuous mode [ 323.448804][T19155] veth1_macvtap: entered promiscuous mode [ 323.487928][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.488292][T19275] loop0: detected capacity change from 0 to 512 [ 323.498409][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.498426][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.524901][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.534741][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.545265][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.555089][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.565582][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.575396][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.585864][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.600976][T19275] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 323.601001][T19155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.605730][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.625383][T19275] System zones: 0-2 [ 323.626651][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.626668][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.630444][T19275] , 18-18 [ 323.640316][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.640335][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.640350][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.640364][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.650820][T19275] , 34-34 [ 323.653716][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.653732][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.663529][T19275] [ 323.719828][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.766097][T19275] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3848: bg 0: block 248: padding at end of block bitmap is not set [ 323.780768][T19275] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.3848: Failed to acquire dquot type 1 [ 323.806652][T19275] EXT4-fs (loop0): 1 truncate cleaned up [ 323.812626][T19275] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.836969][T19155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.854510][T19155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.863327][T19155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.872276][T19155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.881057][T19155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.900931][T19275] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz.0.3848: deleted inode referenced: 12 [ 323.912979][T19275] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz.0.3848: deleted inode referenced: 12 [ 323.970463][T19201] veth0_vlan: entered promiscuous mode [ 324.008548][T19201] veth1_vlan: entered promiscuous mode [ 324.028811][T19299] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 324.051649][T19201] veth0_macvtap: entered promiscuous mode [ 324.066433][T19201] veth1_macvtap: entered promiscuous mode [ 324.093035][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.103559][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.113398][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.123918][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.133838][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.144340][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.154161][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.164582][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.174599][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.185053][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.194956][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.205476][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.218781][T19201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.227296][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.237839][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.247777][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.258362][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.268318][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.278763][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.288669][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.299241][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.309059][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.319544][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.329376][T19201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.340088][T19201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.408189][T19201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.426584][T19201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.435336][T19201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.444104][T19201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.452863][T19201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.513420][T19307] netlink: 'syz.2.3852': attribute type 10 has an invalid length. [ 324.525447][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.532741][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.542797][T19307] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.549953][T19307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.557561][T19307] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.564682][T19307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.586719][T19307] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 324.601305][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 324.630042][T19306] bridge_slave_1: left allmulticast mode [ 324.635894][T19306] bridge_slave_1: left promiscuous mode [ 324.641607][T19306] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.656633][T19306] bridge_slave_0: left allmulticast mode [ 324.662325][T19306] bridge_slave_0: left promiscuous mode [ 324.668006][T19306] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.695898][T19306] bond0: (slave bridge0): Releasing backup interface [ 324.764726][T19317] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3855'. [ 324.810688][T19325] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.840658][T19325] vhci_hcd: invalid port number 23 [ 324.859969][T19327] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 324.882011][T19317] xt_CT: No such helper "pptp" [ 324.965517][T19334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 325.274604][T19340] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3861'. [ 325.365408][T19341] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.402051][T19341] vhci_hcd: invalid port number 23 [ 325.434884][T19340] xt_CT: No such helper "pptp" [ 325.441780][T19345] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 325.505885][T19350] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3865'. [ 325.807545][T19361] loop2: detected capacity change from 0 to 2048 [ 325.861250][T19361] netlink: 'syz.2.3869': attribute type 21 has an invalid length. [ 325.888852][T19372] loop3: detected capacity change from 0 to 1024 [ 325.911338][T19372] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 326.672844][T19385] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3875'. [ 326.701853][T19385] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 326.739598][T19385] vhci_hcd: invalid port number 23 [ 326.774220][T19385] xt_CT: No such helper "pptp" [ 326.835671][T19392] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3877'. [ 326.865637][T19392] xt_CT: No such helper "pptp" [ 326.897219][T19396] bond1: entered promiscuous mode [ 326.902363][T19396] bond1: entered allmulticast mode [ 326.925377][T19396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.946570][T19396] bond1 (unregistering): Released all slaves [ 327.016982][T19401] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 327.306876][T19419] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 327.462254][T19431] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 327.486987][T19421] loop3: detected capacity change from 0 to 512 [ 327.537547][T19421] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 327.563080][T19421] System zones: 0-2, 18-18, 34-34 [ 327.580152][T19421] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3886: bg 0: block 248: padding at end of block bitmap is not set [ 327.650794][T19421] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.3886: Failed to acquire dquot type 1 [ 327.664635][T19453] netlink: 'syz.0.3899': attribute type 10 has an invalid length. [ 327.691952][T19457] loop2: detected capacity change from 0 to 512 [ 327.700266][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3899'. [ 327.715801][T19421] EXT4-fs (loop3): 1 truncate cleaned up [ 327.727198][T19421] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.742171][T19457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.765320][T19421] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz.3.3886: deleted inode referenced: 12 [ 327.778137][T19457] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 327.786104][T19457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 327.810361][T19421] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz.3.3886: deleted inode referenced: 12 [ 327.836409][T19457] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 327.846019][T19457] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 327.856887][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 327.856901][ T29] audit: type=1400 audit(2000000051.379:7515): avc: denied { ioctl } for pid=19463 comm="syz.4.3905" path="socket:[88332]" dev="sockfs" ino=88332 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.863971][T19466] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3904'. [ 327.915644][ C1] ------------[ cut here ]------------ [ 327.921248][ C1] refcount_t: underflow; use-after-free. [ 327.927108][ C1] WARNING: CPU: 1 PID: 3355 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 327.936578][ C1] Modules linked in: [ 327.940612][ C1] CPU: 1 UID: 0 PID: 3355 Comm: kworker/u8:6 Not tainted 6.11.0-syzkaller-04557-g2f27fce67173 #0 [ 327.948178][T19468] tipc: Started in network mode [ 327.951225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.956107][T19468] tipc: Node identity 1, cluster identity 4711 [ 327.966144][ C1] Workqueue: bat_events batadv_nc_worker [ 327.966172][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 327.966207][ C1] Code: 72 ff ff ff e8 7b a0 72 ff 48 c7 c7 69 da b2 86 e8 5f 07 8b ff c6 05 31 8d f5 04 01 90 48 c7 c7 0a cf 1a 86 e8 5b aa 54 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 4c a0 72 ff 48 c7 c7 66 da b2 86 e8 [ 327.966224][ C1] RSP: 0000:ffffc900000e4b50 EFLAGS: 00010246 [ 327.966246][ C1] RAX: e58d219b26bc8800 RBX: ffff88810ec9b8e4 RCX: ffff888102cac200 [ 327.966261][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.966276][ C1] RBP: 0000000000000003 R08: ffffffff8111f907 R09: 0000000000000000 [ 327.966290][ C1] R10: 0001ffffffffffff R11: ffff888102cac200 R12: 0000000000000001 [ 327.966305][ C1] R13: ffff888111ef6800 R14: ffff88810ec9b8e4 R15: 0000000000000000 [ 327.966318][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 327.966338][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.966353][ C1] CR2: 00007f4e827336e0 CR3: 00000001155f0000 CR4: 00000000003506f0 [ 327.966368][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.966391][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.966406][ C1] Call Trace: [ 327.966412][ C1] [ 327.966421][ C1] ? __warn+0x141/0x350 [ 327.966454][ C1] ? report_bug+0x315/0x420 [ 327.966490][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 327.966527][ C1] ? handle_bug+0x60/0x90 [ 327.966551][ C1] ? exc_invalid_op+0x1a/0x50 [ 327.966589][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 327.966625][ C1] ? __warn_printk+0x167/0x1b0 [ 327.966661][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 327.966723][ C1] sk_skb_reason_drop+0xe9/0x290 [ 327.966759][ C1] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 327.966795][ C1] j1939_tp_recv+0x699/0xa80 [ 327.966861][ C1] j1939_can_recv+0x45f/0x550 [ 327.966891][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 327.966919][ C1] can_rcv_filter+0x225/0x4c0 [ 327.966949][ C1] can_receive+0x182/0x1f0 [ 327.966983][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 327.967030][ C1] can_rcv+0xe7/0x180 [ 327.967061][ C1] ? __pfx_can_rcv+0x10/0x10 [ 327.967097][ C1] __netif_receive_skb+0x123/0x280 [ 327.967122][ C1] process_backlog+0x22e/0x440 [ 327.967152][ C1] __napi_poll+0x63/0x3c0 [ 327.967172][ C1] ? net_rx_action+0x376/0x7f0 [ 327.967212][ C1] net_rx_action+0x3a1/0x7f0 [ 327.967247][ C1] handle_softirqs+0xbf/0x280 [ 327.967273][ C1] irq_exit_rcu+0x3e/0x90 [ 327.967294][ C1] sysvec_call_function_single+0x6b/0x80 [ 327.967333][ C1] [ 327.967340][ C1] [ 327.967347][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 327.967396][ C1] RIP: 0010:kcsan_setup_watchpoint+0x404/0x410 [ 327.967423][ C1] Code: 49 c7 01 00 00 00 00 f0 48 ff 0d e7 e3 72 07 0f b6 5c 24 07 4c 8b 4c 24 30 84 db 75 0a 41 81 e1 00 02 00 00 74 01 fb ff 4d 04 9c fc ff ff 31 db e9 0a ff ff ff 90 90 90 90 90 90 90 90 90 90 [ 327.967442][ C1] RSP: 0000:ffffc900015f7c70 EFLAGS: 00000246 [ 327.967468][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff851120b0 [ 327.967481][ C1] RDX: 0011888114697960 RSI: ffff88811f230000 RDI: 0000000000000000 [ 327.967493][ C1] RBP: ffff888102cacc80 R08: 0000000000000001 R09: 0000000000000200 [ 327.967507][ C1] R10: 0000000000000000 R11: ffff88811f230000 R12: 0000000000000008 [ 327.967521][ C1] R13: 0000000000000282 R14: ffff888114697960 R15: 0000000000000000 [ 327.967537][ C1] ? batadv_nc_worker+0x80/0xad0 [ 327.967561][ C1] ? batadv_nc_worker+0x80/0xad0 [ 327.967601][ C1] ? kvfree+0x39/0x40 [ 327.967628][ C1] batadv_nc_worker+0x80/0xad0 [ 327.967657][ C1] ? __perf_event_task_sched_out+0x111/0xfe0 [ 327.967691][ C1] ? sized_strscpy+0x13a/0x170 [ 327.967780][ C1] ? kick_pool+0xd1/0x2c0 [ 327.967824][ C1] process_scheduled_works+0x483/0x9a0 [ 327.967862][ C1] worker_thread+0x51d/0x6f0 [ 327.967884][ C1] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 327.967913][ C1] ? __pfx_worker_thread+0x10/0x10 [ 327.967959][ C1] kthread+0x1d1/0x210 [ 327.967983][ C1] ? __pfx_kthread+0x10/0x10 [ 327.968009][ C1] ret_from_fork+0x4b/0x60 [ 327.968048][ C1] ? __pfx_kthread+0x10/0x10 [ 327.968073][ C1] ret_from_fork_asm+0x1a/0x30 [ 327.968113][ C1] [ 327.968119][ C1] ---[ end trace 0000000000000000 ]--- [ 328.227096][ T29] audit: type=1400 audit(2000000051.379:7516): avc: denied { bind } for pid=19463 comm="syz.4.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.227334][T19468] tipc: Node number set to 1 [ 328.233250][ T29] audit: type=1400 audit(2000000051.379:7517): avc: denied { write } for pid=19463 comm="syz.4.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.452911][T19457] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3901: dx entry: limit 65535 != root limit 120 [ 328.465137][T19457] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3901: Corrupt directory, running e2fsck is recommended [ 328.505724][ T29] audit: type=1326 audit(2000000052.029:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19471 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 328.529493][ T29] audit: type=1326 audit(2000000052.029:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19471 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 328.564179][ T29] audit: type=1326 audit(2000000052.029:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19471 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 328.587830][ T29] audit: type=1326 audit(2000000052.029:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19471 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 328.611450][ T29] audit: type=1326 audit(2000000052.029:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19471 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 328.635298][ T29] audit: type=1326 audit(2000000052.029:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19471 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 328.659069][ T29] audit: type=1326 audit(2000000052.029:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19471 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192fd3def9 code=0x7ffc0000 [ 328.687086][T19470] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 328.698089][T19470] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 328.953429][T19501] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3919'. [ 329.033287][T19505] loop3: detected capacity change from 0 to 512 [ 329.053935][T19505] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3921: couldn't read orphan inode 17 (err -116) [ 329.077417][T19505] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3921: bg 0: block 7: invalid block bitmap [ 329.086847][T19511] loop2: detected capacity change from 0 to 2048 [ 329.110705][T19505] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 329.145152][T19505] macvtap1: entered promiscuous mode [ 329.150665][T19505] macvtap1: entered allmulticast mode [ 329.156139][T19505] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 329.172222][ C1] vcan0: j1939_tp_rxtimer: 0xffff888111ef6800: rx timeout, send abort [ 329.180445][ C1] vcan0: j1939_tp_rxtimer: 0xffff888114ad9600: rx timeout, send abort [ 329.189658][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888111ef6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.204032][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888114ad9600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.252354][T19505] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 329.259780][T19505] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 329.327061][ T3394] hid-generic 0000:0000:0000.0082: unknown main item tag 0x7 [ 329.334611][ T3394] hid-generic 0000:0000:0000.0082: ignoring exceeding usage max [ 329.345924][ T3394] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 329.356816][T19511] netlink: 'syz.2.3923': attribute type 21 has an invalid length. [ 329.705811][ T3394] hid-generic 0000:0000:0000.0082: unknown main item tag 0x6 [ 329.713245][ T3394] hid-generic 0000:0000:0000.0082: unknown main item tag 0xd [ 329.725142][ T3394] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz0] on syz0 [ 329.764665][T19528] FAULT_INJECTION: forcing a failure. [ 329.764665][T19528] name failslab, interval 1, probability 0, space 0, times 0 [ 329.777437][T19528] CPU: 0 UID: 0 PID: 19528 Comm: syz.3.3929 Tainted: G W 6.11.0-syzkaller-04557-g2f27fce67173 #0 [ 329.789369][T19528] Tainted: [W]=WARN [ 329.793230][T19528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 329.803278][T19528] Call Trace: [ 329.806593][T19528] [ 329.809520][T19528] dump_stack_lvl+0xf2/0x150 [ 329.814161][T19528] dump_stack+0x15/0x20 [ 329.818344][T19528] should_fail_ex+0x229/0x230 [ 329.823026][T19528] ? mas_alloc_nodes+0x1d3/0x4a0 [ 329.827955][T19528] should_failslab+0x8f/0xb0 [ 329.832536][T19528] kmem_cache_alloc_noprof+0x4c/0x290 [ 329.837990][T19528] mas_alloc_nodes+0x1d3/0x4a0 [ 329.842778][T19528] mas_preallocate+0x773/0xc30 [ 329.847538][T19528] __split_vma+0x244/0x690 [ 329.851998][T19528] do_vmi_align_munmap+0x1a5/0xa60 [ 329.857110][T19528] do_vmi_munmap+0x1fb/0x250 [ 329.861699][T19528] mmap_region+0x52a/0x1600 [ 329.866268][T19528] ? _parse_integer_limit+0x167/0x180 [ 329.871651][T19528] ? security_mmap_addr+0x5a/0x70 [ 329.876725][T19528] ? __get_unmapped_area+0x2cb/0x300 [ 329.882012][T19528] do_mmap+0x718/0xb60 [ 329.886080][T19528] __se_sys_remap_file_pages+0x3b1/0x610 [ 329.891736][T19528] ? fput+0x14e/0x190 [ 329.895851][T19528] ? ksys_write+0x178/0x1b0 [ 329.900398][T19528] __x64_sys_remap_file_pages+0x67/0x80 [ 329.905947][T19528] x64_sys_call+0x22c4/0x2d60 [ 329.910626][T19528] do_syscall_64+0xc9/0x1c0 [ 329.915266][T19528] ? clear_bhb_loop+0x55/0xb0 [ 329.919944][T19528] ? clear_bhb_loop+0x55/0xb0 [ 329.924651][T19528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.930601][T19528] RIP: 0033:0x7fe51e7cdef9 [ 329.935012][T19528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.954652][T19528] RSP: 002b:00007fe51d441038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 329.963054][T19528] RAX: ffffffffffffffda RBX: 00007fe51e985f80 RCX: 00007fe51e7cdef9 [ 329.971014][T19528] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 329.979478][T19528] RBP: 00007fe51d441090 R08: 0000000000000000 R09: 0000000000000000 [ 329.987443][T19528] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 329.995486][T19528] R13: 0000000000000000 R14: 00007fe51e985f80 R15: 00007fff152903d8 [ 330.003534][T19528] [ 330.168260][T19539] bond1: entered promiscuous mode [ 330.173395][T19539] bond1: entered allmulticast mode [ 330.218919][T19539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.248453][T19539] bond1 (unregistering): Released all slaves [ 330.286741][T19556] tipc: Started in network mode [ 330.291637][T19556] tipc: Node identity 1, cluster identity 4711 [ 330.297948][T19556] tipc: Node number set to 1 [ 330.351966][T19560] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 330.458081][T19558] netlink: 'syz.4.3942': attribute type 10 has an invalid length. [ 330.485245][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3942'. [ 330.637819][T19572] loop3: detected capacity change from 0 to 512 [ 330.816771][T19572] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3948: couldn't read orphan inode 17 (err -116) [ 330.837494][T19572] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3948: bg 0: block 7: invalid block bitmap [ 330.868007][T19572] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 330.878991][T19572] macvtap1: entered promiscuous mode [ 330.884568][T19572] macvtap1: entered allmulticast mode [ 330.889997][T19572] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 330.907957][T19572] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 330.915277][T19572] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 330.939845][ T3340] hid-generic 0000:0000:0000.0083: unknown main item tag 0x7 [ 330.947380][ T3340] hid-generic 0000:0000:0000.0083: ignoring exceeding usage max [ 330.957772][T19578] loop0: detected capacity change from 0 to 512 [ 330.958434][ T3340] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 330.999227][ T3340] hid-generic 0000:0000:0000.0083: unknown main item tag 0x6 [ 331.006700][ T3340] hid-generic 0000:0000:0000.0083: unknown main item tag 0xd [ 331.034923][T19578] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 331.049718][ T3340] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz0] on syz0 [ 331.066547][T19578] System zones: 0-2, 18-18, 34-34 [ 331.101044][T19578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3949: bg 0: block 248: padding at end of block bitmap is not set [ 331.125859][T19567] ================================================================== [ 331.133966][T19567] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 331.142297][T19567] [ 331.144620][T19567] write to 0xffff888114a73dfc of 4 bytes by task 19554 on cpu 1: [ 331.152327][T19567] inode_update_timestamps+0x166/0x280 [ 331.157777][T19567] file_update_time+0x220/0x2b0 [ 331.162626][T19567] shmem_file_write_iter+0x99/0xe0 [ 331.167910][T19567] iter_file_splice_write+0x5f1/0x980 [ 331.173365][T19567] direct_splice_actor+0x160/0x2c0 [ 331.178479][T19567] splice_direct_to_actor+0x302/0x670 [ 331.183865][T19567] do_splice_direct+0xd7/0x150 [ 331.188638][T19567] do_sendfile+0x39b/0x970 [ 331.193063][T19567] __x64_sys_sendfile64+0x110/0x150 [ 331.198288][T19567] x64_sys_call+0xed5/0x2d60 [ 331.202882][T19567] do_syscall_64+0xc9/0x1c0 [ 331.207387][T19567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.213304][T19567] [ 331.215628][T19567] read to 0xffff888114a73dfc of 4 bytes by task 19567 on cpu 0: [ 331.223260][T19567] atime_needs_update+0x2aa/0x3e0 [ 331.228297][T19567] touch_atime+0x4a/0x350 [ 331.232639][T19567] shmem_file_splice_read+0x561/0x5c0 [ 331.238023][T19567] splice_direct_to_actor+0x269/0x670 [ 331.243490][T19567] do_splice_direct+0xd7/0x150 [ 331.248265][T19567] do_sendfile+0x39b/0x970 [ 331.252693][T19567] __x64_sys_sendfile64+0x110/0x150 [ 331.257903][T19567] x64_sys_call+0xed5/0x2d60 [ 331.262501][T19567] do_syscall_64+0xc9/0x1c0 [ 331.267016][T19567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.272932][T19567] [ 331.275253][T19567] value changed: 0x26259c56 -> 0x26be32d5 [ 331.277417][T19578] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.3949: Failed to acquire dquot type 1 [ 331.280955][T19567] [ 331.280960][T19567] Reported by Kernel Concurrency Sanitizer on: [ 331.280971][T19567] CPU: 0 UID: 0 PID: 19567 Comm: syz.1.3940 Tainted: G W 6.11.0-syzkaller-04557-g2f27fce67173 #0 [ 331.312454][T19567] Tainted: [W]=WARN [ 331.312462][T19567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 331.312473][T19567] ================================================================== [ 331.375285][T19578] EXT4-fs (loop0): 1 truncate cleaned up [ 331.381423][T19578] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.409584][T19578] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz.0.3949: deleted inode referenced: 12 [ 331.428911][T19578] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz.0.3949: deleted inode referenced: 12