last executing test programs: 3m22.509610158s ago: executing program 2 (id=4324): socket$kcm(0x29, 0x5, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 3m22.327495212s ago: executing program 2 (id=4326): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 3m22.160125105s ago: executing program 2 (id=4327): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r1, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40004) 3m22.086873157s ago: executing program 2 (id=4328): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 3m21.682502285s ago: executing program 2 (id=4333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0xfffffffc, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{@in=@local, @in=@dev, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x20, 0x32}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x16c}}, 0x0) 3m21.292132472s ago: executing program 2 (id=4337): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 3m21.096306816s ago: executing program 32 (id=4337): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 3m19.127181565s ago: executing program 3 (id=4364): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') pipe2$9p(&(0x7f0000000180), 0x4800) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000000740)={0x4bc, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0xe000}, 0x1, 0x2, 0x8000, 0x240, 0x5, 'syz0\x00', "30f1a7f1e7893f5a4c98a01e5c19704caff85e0efcbd7e74a4bf4d298db81a07", "e42a5a426a8ab3da02c7786c5ea6c0ce1d0388c328e5fa67e63bb15252453f34", [{0x0, 0x2, {0x3, 0xfffffff9}}, {0x4, 0x8, {0x2, 0x3be1ae29}}, {0x7f, 0xe, {0x1, 0xb4}}, {0x1, 0x8000, {0x0, 0x5}}, {0x81, 0x10, {0x2, 0x5}}, {0x1, 0x2, {0x1, 0x1000}}, {0x3ff, 0x8, {0x2, 0xffff7fff}}, {0x12, 0x25fd, {0xa078a12dd178018b, 0x10b}}, {0xff, 0x3, {0x2, 0x4}}, {0x6, 0x5, {0x0, 0x2}}, {0xfff, 0xe86, {0x1, 0x1}}, {0x2a73, 0x200, {0x3, 0x3}}, {0x4, 0x7f, {0x2, 0x101}}, {0x9, 0x9, {0x2, 0x9}}, {0x7, 0x80, {0x1, 0x1f}}, {0x4, 0x1, {0x2, 0x9}}, {0x16d, 0x6, {0x1, 0x2a3}}, {0x3, 0x9, {0x2, 0x5}}, {0xfffc, 0xa, {0x2, 0xb}}, {0xb7d, 0x8, {0x0, 0x10001}}, {0x4, 0x749e, {0x3, 0x9}}, {0x8, 0xfff9, {0x3, 0x1}}, {0x5, 0x0, {0x3, 0x2}}, {0x4, 0xec58, {0x24b6c1fde8171efa, 0x8}}, {0x4, 0x1, {0x3, 0x5}}, {0x2, 0xc0cd, {0x3, 0x125896ce}}, {0x55f, 0x4, {0x3, 0x6}}, {0x8, 0x1, {0x0, 0xffffffff}}, {0x400, 0x2, {0x3}}, {0x9e, 0x9, {0x2, 0xe211}}, {0x1, 0x6, {0x1, 0xffffffff}}, {0x3, 0xfffc, {0x3, 0x3}}, {0x8, 0x7, {0x2, 0x4}}, {0x2, 0x0, {0x3, 0x1ff}}, {0x859, 0x2, {0x1, 0xd21}}, {0x9, 0xffff, {0x0, 0xffffff43}}, {0x59, 0x8001, {0x0, 0x80000000}}, {0x3ff, 0x8d82, {0x3, 0x8}}, {0x3e6, 0x7, {0x0, 0x9}}, {0x0, 0x1000, {0x0, 0x75be}}]}}}, {{0x254, 0x1, {{0x0, 0x800}, 0x72, 0x2, 0x3, 0x2c75, 0xf, 'syz1\x00', "7abb81742d91f72562d9ce4aaae1c78250834b54768323fa3b1dab13c3249d7e", "cfb075a789a305ddcfa515eff117634abf180d63379911829b53c9c9d788df59", [{0x7ff, 0x3e0, {0x2, 0x81}}, {0xfffb, 0x200, {0x0, 0x9}}, {0x5, 0xfff7, {0x3, 0x6}}, {0xc, 0x1, {0x1, 0xfffffc00}}, {0x6000, 0x200, {0x2, 0x4}}, {0x6, 0x2, {0x1, 0xfffffff6}}, {0xb, 0x2, {0x2, 0x729}}, {0x1c, 0x9, {0x3, 0x7}}, {0x2, 0x1, {0x1, 0x3}}, {0x9, 0x5}, {0x0, 0x80, {0x1, 0x9}}, {0xd1f, 0x7, {0x1, 0xd2}}, {0x8, 0x2, {0x1, 0x8}}, {0x0, 0xa, {0x0, 0x7f}}, {0x10, 0x5234, {0x0, 0x8}}, {0xd4d7, 0x3ff, {0x0, 0x3003}}, {0x10, 0xfff3, {0x1, 0x8d0}}, {0xb, 0x99, {0x0, 0x7}}, {0xff, 0x3, {0x2, 0x9}}, {0xf, 0x1, {0x1, 0xfffffffe}}, {0xf1, 0x808, {0x2, 0xffffffff}}, {0x6, 0x8, {0x3, 0x889}}, {0x800, 0x0, {0x1, 0x4}}, {0x40, 0x2, {0x1, 0x8}}, {0x4, 0x8001, {0x2, 0x8000}}, {0x5e9b, 0x7ff, {0x1, 0xff}}, {0xa, 0x6, {0x3, 0x5}}, {0xffff, 0x31, {0x2, 0x1}}, {0x7d, 0x1, {0x0, 0x7ff}}, {0x8, 0x737, {0x1, 0x64}}, {0x1ff, 0xb, {0x0, 0xfff}}, {0x0, 0x3, {0x3, 0x7}}, {0xa7b, 0xdff, {0x3, 0xfffffff9}}, {0x18aa, 0x9, {0x0, 0x7f}}, {0x7, 0x1, {0x1, 0x1}}, {0x5, 0x81, {0x1, 0xc6}}, {0x8291, 0x7}, {0xd, 0xfffe, {0x1, 0x1}}, {0x10, 0xb3d, {0x1, 0x1}}, {0x7, 0x5db9, {0x0, 0x8}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000040000000000000000000000851000800500000085000000bb0000006d0000000000000018000000ffff00000000000000000000950000000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010000000000"], 0x24, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r4, r5, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 3m18.261246602s ago: executing program 3 (id=4373): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r2, 0x111, 0x4, 0x0, &(0x7f0000000080)) 3m18.238457912s ago: executing program 3 (id=4374): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000580)=[{0x16, 0x0, [0x400, 0x0, 0x3, 0x2, 0x8000, 0x3, 0x96, 0x0, 0x9, 0x7ff, 0x6, 0x81c, 0x4, 0x3, 0x8, 0x53c1]}, {0x0, 0x0, [0x6, 0x100, 0x5, 0x81, 0xb7d0, 0x7, 0xfff, 0x8, 0x4, 0x3, 0x2, 0x9, 0x6e5, 0x5, 0x6, 0x8]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) 3m18.182330723s ago: executing program 3 (id=4375): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 3m18.020002066s ago: executing program 3 (id=4380): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() sigaltstack(0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) write$binfmt_elf64(r4, 0x0, 0x78) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, r5, 0x0, 0x7ffff000) 3m17.513463636s ago: executing program 3 (id=4382): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800"/12, @ANYRES32=0x0, @ANYBLOB="115d5eb9"], 0x20) 3m17.478099117s ago: executing program 33 (id=4382): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800"/12, @ANYRES32=0x0, @ANYBLOB="115d5eb9"], 0x20) 2m49.912104205s ago: executing program 5 (id=4686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2m49.850116586s ago: executing program 5 (id=4687): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0xfffe) preadv(r7, &(0x7f0000000100), 0xa, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) 2m48.831293546s ago: executing program 5 (id=4701): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @remote}], 0x20) 2m48.656124279s ago: executing program 5 (id=4702): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) creat(0x0, 0xecf86c37d53049cc) 2m48.354737875s ago: executing program 5 (id=4714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m47.952027723s ago: executing program 5 (id=4719): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x6c}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m47.890481994s ago: executing program 34 (id=4719): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x6c}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m43.104171267s ago: executing program 1 (id=4782): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') preadv(r0, &(0x7f0000004300)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1, 0x78, 0xc) 2m43.103700287s ago: executing program 1 (id=4784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) sendmmsg$unix(r4, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 2m42.124449537s ago: executing program 1 (id=4789): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffff"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 2m42.003587609s ago: executing program 1 (id=4793): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x40015, 0x2, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee35e9a9000ff8ee09e7377660c5eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x1004]}) 2m41.855766192s ago: executing program 1 (id=4798): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) io_submit(0x0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0}]) 2m41.232434784s ago: executing program 1 (id=4799): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) sendmsg$nl_route_sched(r1, 0x0, 0x4000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000004, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 2m41.200113045s ago: executing program 35 (id=4799): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) sendmsg$nl_route_sched(r1, 0x0, 0x4000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000004, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 5.539511402s ago: executing program 6 (id=6436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 4.944101594s ago: executing program 7 (id=6445): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x1000) readlinkat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=""/5, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r6, &(0x7f0000000700), 0x0}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="796104000000000000007e0000001bfe03000a58525dfd7e5a894dee21871415c664e2196c", @ANYBLOB], 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a000000000000080000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 4.289139327s ago: executing program 8 (id=6447): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x813c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) symlinkat(&(0x7f0000000400)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='o']) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="0000000000000000000000000000001200"/28], 0x50) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x89901) mount_setattr(r5, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r6, 0x0, 0xff0f) pidfd_getfd(r1, r1, 0x0) 3.493815402s ago: executing program 6 (id=6452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 3.440501673s ago: executing program 6 (id=6453): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="8000000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414400c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000070000d801400080000000000000000000000000000000000080001007f0000012c00"], 0xd4}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0xfe4, 0x4, 0x11, 0xafb}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="d2", 0x1, 0x4054, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) dup(r2) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000180)={0x4, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) fdatasync(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) 3.214420307s ago: executing program 7 (id=6455): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="8000000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414400c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000070000d8014000800"/118], 0xd4}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0xfe4, 0x4, 0x11, 0xafb}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4054, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) dup(r2) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000180)={0x4, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) fdatasync(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) 2.988152032s ago: executing program 8 (id=6456): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000"], 0x90}, 0x1, 0x7}, 0x0) 2.987856372s ago: executing program 8 (id=6457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 1.955253252s ago: executing program 4 (id=6460): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 1.929833392s ago: executing program 4 (id=6461): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x8, 0x21, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x4, 0x4}, 0x2012, 0x4, 0x3, 0x4, 0x9b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x541a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) kexec_load(0x7, 0x4, &(0x7f0000000500)=[{&(0x7f00000000c0)="faac383b9116b44f59ef2b1005851a512dd903ee0e2dc122abfb8b2a850809f849a12476f684604eacce9513c5d87c0123e94097de013317f3d3a47be2b93d9f0635b772f30440897cb1908c3fb3c6de708540", 0x53, 0x4, 0x9}, {&(0x7f0000000200)="fe44817ce10ae6005b491418a20f92c8b07b809cbed734677a1443485fd2c5ff75828b75ba2fa4d76c66c3a93a15512c260ac5c43bc338354688767b11bd8a7fbdbb94ffd4d968", 0x47, 0x7fffffffffffffff, 0x80}, {&(0x7f0000000400)="37c9b0bbc2c455b6e3b0b1d1a8741553b4e7756f5232cf146b6270dc02c2bdd717fbdd005e95d94549fbf80b79a81e58bc1fd95b9936fbff246cb932d7fc652c7f8cc156d0148d4e67ad16f3892da0d8c3f0d422bac42c455cbf809daf9dd824351056fad4e7ae63fc5a1fcb370c6a4bad44c00c9b1e163b215645da963bca060569955382d106f8e1d1dc6acc80821c3270168e97c84ff877295dc5681b566f566d44e6a34acc6dfc960a7388ffd8c5a3997c6649243c1f3e50c11e6bfbc1c08f5e12a3255fcf85779122a3f598271662f79ef1ac754650d07a024486910e3b06f20df4359a6978", 0xe8, 0xffffffffffff7fff, 0x1}, {&(0x7f0000000300)="bfb4ba41eb144969f51dbb30c0e34821f494f5735304eafa149c9ed70da626f041bc4241565bb9e42b02d580dd8e9c869ddd2d75febf3be5548a495e2ad5036319391bea23d3fa28ba114e1a46eeedb2099a46621710f749f2716a266d545f113214a80a095cde9379ff2b4b482c821634d7212b8a637cddb51a670189f228deea97aedb0ad7f8dd53d09a84f9cd14bde670688db06725676bb819d83874ffd0782590c257", 0xa5, 0x6, 0x9}], 0x2a0000) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r0, 0x0, 0x3ffff) sendfile(r5, r0, 0x0, 0x7ffff000) 1.848253604s ago: executing program 0 (id=6462): io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000840)=[0x0]) 1.738021966s ago: executing program 0 (id=6463): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 1.731892836s ago: executing program 6 (id=6464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4044004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 1.684562777s ago: executing program 7 (id=6465): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2c0800, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$selinux_access(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6661696c6c6f675f743a7330202f7573722f7362696e2f6e747064203030303030303030303734d6362febebcf5bcc6873d0f9826bb0445cc9aa878e5391185702ee53d4a2d6d5251d0c17a88986db2831fcb8ae0baf2a63"], 0x43) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)="18", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x800000000000000}, 0x18) 1.666607547s ago: executing program 8 (id=6466): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x813c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) symlinkat(&(0x7f0000000400)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='o']) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="0000000000000000000000000000001200"/28], 0x50) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x89901) mount_setattr(r5, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r6, 0x0, 0xff0f) pidfd_getfd(r1, r1, 0x0) 1.612402318s ago: executing program 6 (id=6467): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000380)=[{0x0}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f00000003c0)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/45, 0x2d}, 0x8}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000600)=[{0x0}], 0x1, &(0x7f0000000640)=""/130, 0x82}, 0xe9a8}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f00000008c0)}, 0x6}], 0x6, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) 1.603873549s ago: executing program 4 (id=6468): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) 1.136176528s ago: executing program 0 (id=6469): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000"], 0x90}, 0x1, 0x7}, 0x0) 1.038676379s ago: executing program 7 (id=6470): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 840.481954ms ago: executing program 7 (id=6471): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') statx(r7, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080)) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x2, 0x0) 756.038055ms ago: executing program 0 (id=6472): pread64(0xffffffffffffffff, &(0x7f00000005c0)=""/254, 0xfe, 0xadd) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x5, 0x1, "cf14374bd0e1b9d1bd50158e156f5d786041eee657170ee65801000000507c830ea4078738f1ed7bb3443454126dac88af684dde00", "f67cdf2c84fbf8d12904010000e12cd0671165610100000000000000169865e5", [0xffffffffffff82c9, 0x5]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="6d3c1f332d465c6c2e7b69ab27a73896a6b80ced4dcbe8f90e343c3ee5e1e94541ca08bde78b17e25fbbf10cdf6b5fdf141ca607931cb155eb545ad6c905d23cbdf404db319e7ce34aae844ee86462e2175219e9133fc3e3301ba3d862293508fef0d505c8ea6e539b3a61d1df5c", @ANYRESHEX], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresuid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000400)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c983}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x483a}], &(0x7f0000000900)='GPL\x00', 0x9, 0xff, &(0x7f0000000a00)=""/255, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x10, 0x4, 0x7ff}, 0x10, 0x28474, 0xffffffffffffffff, 0x7, &(0x7f0000000dc0)=[r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f0000000e00)=[{0x1, 0x1, 0x4, 0x7}, {0x2, 0x5, 0x2, 0x7}, {0x2, 0x5, 0xa, 0x7}, {0x3, 0xffff27d3, 0x9, 0x6}, {0x1, 0x2, 0x8, 0xb}, {0x3, 0x4, 0xa, 0xc}, {0x1, 0x5, 0xc, 0x2}], 0x10, 0x5}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3, 0x0, 0x7}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 719.143136ms ago: executing program 6 (id=6473): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0xfffe) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) 711.768526ms ago: executing program 4 (id=6474): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) 639.938407ms ago: executing program 8 (id=6475): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x5, 0x8, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, 0x4, 0x0, 0x2000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000140)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8041, 0x1c3) pwrite64(r10, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r11 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r11, 0x0, 0xbf5, 0x2000402) r12 = getegid() statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x4000, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={{}, {0x1, 0x4}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}, {}, {0x2, 0x5}], {}, [{0x8, 0x1, r12}, {0x8, 0x1}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000001600)={r7, 0x4009a1f7, 0x200, 0x9}) r14 = openat$cgroup_devices(r11, &(0x7f0000001640)='devices.allow\x00', 0x2, 0x0) r15 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) sendmmsg$unix(r10, &(0x7f0000001d80)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000003c0)="db279b8a4e2dfb41d159173d1880afeb30a6968172a2292a7ea006af57030a3c9156c5c2093d9bd884888be63521cae6a759e58e748f10f1c1f092b4a4d4fd305bc8a4f3c486", 0x46}, {&(0x7f00000012c0)="7f7b99bf41577a97a75be530bd220a10322a5bf7ebb41598f0697439ab4bbff7aea9af81", 0x24}, {&(0x7f0000000580)="0735a5f359c80e0109c1880f5aff09f03ea9cc1cdf48613e3fd4e1feb868fa4ec67949ee58a8e7c74c53cda57fbc2e67a95968c035b61da1105b6f5337b61ecd4ac32feaa3fea5057fc41db9daedc6a4027a2d2d734a06a0e7627cf17cb566ac1a8be20fb14a851c92de310a316094097df729c433d2f790491c61774dfe86", 0x7f}, {&(0x7f0000000600)="bff5f64d1e0c94a09e15c4fe64677a6a641d2e10d29478e1ff31ba5c461e10", 0x1f}, {&(0x7f0000000640)="36c83f6d8106a84690fc7851acaee5c6a3a964ede78e88ac80bca6ec29da8edd6ac75f369dff8c06156b35381f1f97b62f021369e2d2affc619a40e6738b0655d0d2eeeefc37dd59d0f4b0c638fa65", 0x4f}, {&(0x7f00000008c0)="d0b010aa8452ad7ff839915f2cd2c9db3c0207dd42564b8e5edcdff43c5c43c495cea904056987e5e7dd52139f650aef5276ea375b8c9d1c2183de3267a80822400f606c54e439ebd33d59230504db12248b6a013365530a34fc2783fa2a48fcd41fd1e635609ea1036b2892720a160167f8cdbdae3be12b5941f46e33164129f59ec08c528434092cfe7846c7672b57dd2f855ffcd937f600ccf1594c1aab94b7ae4585d6e06c32cde249cc59f1bae9ea17", 0xb2}], 0x6, &(0x7f0000001300)=ANY=[@ANYBLOB="1620000000000000000100000001000000cf00972d062bf757edb9f32ecc7ad9d66268ab5adda019b72fce09898fa71b5e7c5baf7044dd26f0c8440830c69f7bd4b7e2d5d95c9599b6b91d64a819978a4cf34ef278888f2c2c43b00abcd4831644914b4ab471bf840eecd981bb", @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0], 0x20, 0x1}}, {{&(0x7f0000000a80)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000001000)="f9e21f84aef9850fcb2260b5ad87246445992ab93ab5efdda16b1b815fdc558ce11b0d0e155582cb13c0471475f6da7fdfe06ccf7cd771e9dd4f501759dc56b7bc8a905722361064b3c18b93c4787715750635c583b0eb54b557bf3bb8aa3e841542a6f60663eb2f4a77f566d11acef497b82a391798662a2c50418ac84bd0ee016b2dc2973eb026d20b3913b1b5651f8a3c32cd7753f256fddee059f5905fa8924214f4af5152783fa7cdaebb66a3db7920bb3d5c8cbf29", 0xb8}, {&(0x7f00000011c0)="8d31d1406270d558e006fd1e49f8ee8af5b2348f56c44a8f2043ef18519a3672623fb0cd32d6d05c77f9cd3bc189d17abe1ef97ff65add8a56608a44f5eb52bc47654bcf5045a4e5e9d64ce1f85c86108c9659961427d502de79a447a41b60c3fecb728589cbbf048fd768c5c271194d1bb21a399caaf1469d5d4c1dc23894c7ef5b05f253d18b8f52952081d5d6c4ded9c3da99fda4e6641e358dfd6f9b51c1189ad9e3ad4e9525cd7bb2b2febe982a6f3719447e6a88ceac4cd635da1d47aed2bfa10f7fbbd0b39008d74b37da3cfac6dd75cbc82893cb5a95601aec29d9e97c69fc43c4fb69306e29ba178824a6e2e6", 0xf1}, {&(0x7f00000010c0)="4685e455b45ab941a5ee29df283b5983c45e585222e564aeff3851ae46726bbd139fc9f95de5e11042d462f0be5a053ec352ecce8a4a8cebed706c1da8c3de52d19dfe62cf810fcea3b9578f28f9ff24d9374f4bbe6da2b43a94acdf0ecc9955fc4fbdeaad5102a3be27e1e50d65cd5096e0182e4e", 0x75}], 0x3, &(0x7f0000001440)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [r13, r8, r3, r6, 0xffffffffffffffff, r10, r2]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r6, r7, r8, r1]}}, @rights={{0x1c, 0x1, 0x1, [r6, r2, r2]}}, @rights={{0x38, 0x1, 0x1, [r4, r14, r1, r2, r3, r15, r1, r1, r8, r9]}}, @rights={{0x18, 0x1, 0x1, [r6, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001900)=[{&(0x7f00000018c0)="761b5114be3099b77501cef3ae2cf9e11de7284313ea0c2b6ea31164359c4f3813b0ebf7f2476beefb89b9cf9b9d7c", 0x2f}], 0x1}}, {{&(0x7f0000001940)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c23a1221ec37e86b4e5260f049d0bb30b2427555d153f9ea385e6f4f92a629cbe91e487dfe6a1c4dd6ab6e2ef21ae8", 0x2f}], 0x1, &(0x7f0000001a80)=[@rights={{0x28, 0x1, 0x1, [r7, r1, r5, r9, r8, 0xffffffffffffffff]}}], 0x28, 0x20000008}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40), 0x0, 0x44}}], 0x5, 0x40050) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) 535.952259ms ago: executing program 4 (id=6476): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) syz_open_procfs(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x813c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) symlinkat(&(0x7f0000000400)='./file0/file0\x00', 0xffffffffffffff9c, 0x0) removexattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='o']) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="0000000000000000000000000000001200"/28], 0x50) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x89901) mount_setattr(r4, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r5, 0x0, 0xff0f) pidfd_getfd(r1, r1, 0x0) 362.091733ms ago: executing program 0 (id=6477): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 328.113973ms ago: executing program 7 (id=6478): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x8, 0x21, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x4, 0x4}, 0x2012, 0x4, 0x3, 0x4, 0x9b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x541a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) kexec_load(0x7, 0x4, &(0x7f0000000500)=[{&(0x7f00000000c0)="faac383b9116b44f59ef2b1005851a512dd903ee0e2dc122abfb8b2a850809f849a12476f684604eacce9513c5d87c0123e94097de013317f3d3a47be2b93d9f0635b772f30440897cb1908c3fb3c6de708540", 0x53, 0x4, 0x9}, {&(0x7f0000000200)="fe44817ce10ae6005b491418a20f92c8b07b809cbed734677a1443485fd2c5ff75828b75ba2fa4d76c66c3a93a15512c260ac5c43bc338354688767b11bd8a7fbdbb94ffd4d968", 0x47, 0x7fffffffffffffff, 0x80}, {&(0x7f0000000400)="37c9b0bbc2c455b6e3b0b1d1a8741553b4e7756f5232cf146b6270dc02c2bdd717fbdd005e95d94549fbf80b79a81e58bc1fd95b9936fbff246cb932d7fc652c7f8cc156d0148d4e67ad16f3892da0d8c3f0d422bac42c455cbf809daf9dd824351056fad4e7ae63fc5a1fcb370c6a4bad44c00c9b1e163b215645da963bca060569955382d106f8e1d1dc6acc80821c3270168e97c84ff877295dc5681b566f566d44e6a34acc6dfc960a7388ffd8c5a3997c6649243c1f3e50c11e6bfbc1c08f5e12a3255fcf85779122a3f598271662f79ef1ac754650d07a024486910e3b06f20df4359a6978", 0xe8, 0xffffffffffff7fff, 0x1}, {&(0x7f0000000300)="bfb4ba41eb144969f51dbb30c0e34821f494f5735304eafa149c9ed70da626f041bc4241565bb9e42b02d580dd8e9c869ddd2d75febf3be5548a495e2ad5036319391bea23d3fa28ba114e1a46eeedb2099a46621710f749f2716a266d545f113214a80a095cde9379ff2b4b482c821634d7212b8a637cddb51a670189f228deea97aedb0ad7f8dd53d09a84f9cd14bde670688db06725676bb819d83874ffd0782590c257", 0xa5, 0x6, 0x9}], 0x2a0000) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r0, 0x0, 0x3ffff) sendfile(r5, r0, 0x0, 0x7ffff000) 301.795934ms ago: executing program 0 (id=6479): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 495.96µs ago: executing program 4 (id=6480): pread64(0xffffffffffffffff, &(0x7f00000005c0)=""/254, 0xfe, 0xadd) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x5, 0x1, "cf14374bd0e1b9d1bd50158e156f5d786041eee657170ee65801000000507c830ea4078738f1ed7bb3443454126dac88af684dde00", "f67cdf2c84fbf8d12904010000e12cd0671165610100000000000000169865e5", [0xffffffffffff82c9, 0x5]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="6d3c1f332d465c6c2e7b69ab27a73896a6b80ced4dcbe8f90e343c3ee5e1e94541ca08bde78b17e25fbbf10cdf6b5fdf141ca607931cb155eb545ad6c905d23cbdf404db319e7ce34aae844ee86462e2175219e9133fc3e3301ba3d862293508fef0d505c8ea6e539b3a61d1df5c", @ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x4, 0xffffffffffffffa3, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffeb6, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresuid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000400)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c983}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x483a}], &(0x7f0000000900)='GPL\x00', 0x9, 0xff, &(0x7f0000000a00)=""/255, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x10, 0x4, 0x7ff}, 0x10, 0x28474, 0xffffffffffffffff, 0x7, &(0x7f0000000dc0)=[r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f0000000e00)=[{0x1, 0x1, 0x4, 0x7}, {0x2, 0x5, 0x2, 0x7}, {0x2, 0x5, 0xa, 0x7}, {0x3, 0xffff27d3, 0x9, 0x6}, {0x1, 0x2, 0x8, 0xb}, {0x3, 0x4, 0xa, 0xc}, {0x1, 0x5, 0xc, 0x2}], 0x10, 0x5}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x80047441, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 0s ago: executing program 8 (id=6481): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): .7.5914'. [ 571.319990][T23378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5914'. [ 572.120984][T23396] loop6: detected capacity change from 0 to 512 [ 572.220900][T23402] loop8: detected capacity change from 0 to 128 [ 572.274801][T23396] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 572.597441][T23396] EXT4-fs (loop6): orphan cleanup on readonly fs [ 572.891798][T23412] loop4: detected capacity change from 0 to 764 [ 572.928489][T23412] Symlink component flag not implemented [ 572.934210][T23412] Symlink component flag not implemented [ 572.948779][ T29] audit: type=1326 audit(589.651:13686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23417 comm="syz.0.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 572.984122][T23412] Symlink component flag not implemented (129) [ 572.990562][T23412] Symlink component flag not implemented (6) [ 572.999483][T23396] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.5921: corrupted inode contents [ 573.012608][T23412] rock: directory entry would overflow storage [ 573.015320][T23396] EXT4-fs (loop6): Remounting filesystem read-only [ 573.018843][T23412] rock: sig=0x4f50, size=4, remaining=3 [ 573.018864][T23412] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 573.045570][T23396] EXT4-fs (loop6): 1 truncate cleaned up [ 573.052440][ T3887] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.063151][ T3887] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.075147][ T3887] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 573.167953][T23396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 573.205367][T23427] netlink: 464 bytes leftover after parsing attributes in process `syz.8.5934'. [ 573.237932][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.430457][T23438] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5938'. [ 573.587429][T23450] loop6: detected capacity change from 0 to 512 [ 573.640326][T23450] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5944: bad orphan inode 11862016 [ 573.663928][T23459] loop7: detected capacity change from 0 to 512 [ 573.672783][T23450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 573.787076][T23470] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.5944: corrupted inode contents [ 573.800053][T23470] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #20: comm syz.6.5944: mark_inode_dirty error [ 573.819540][T23470] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.5944: corrupted inode contents [ 573.832945][T23470] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #20: comm syz.6.5944: mark_inode_dirty error [ 573.846144][T23459] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 573.859006][T23459] EXT4-fs (loop7): orphan cleanup on readonly fs [ 573.873756][T23470] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #20: comm syz.6.5944: mark inode dirty (error -117) [ 573.901616][T23459] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.5947: corrupted inode contents [ 573.902760][T23476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5951'. [ 573.924862][T23470] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 573.926793][T23459] EXT4-fs (loop7): Remounting filesystem read-only [ 573.947258][T23459] EXT4-fs (loop7): 1 truncate cleaned up [ 573.954040][ T3887] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.964724][ T3887] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 573.975364][ T3887] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 573.988339][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 574.011352][T23459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 574.126976][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.148964][T23489] loop4: detected capacity change from 0 to 512 [ 574.205330][T23489] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.5956: bad orphan inode 11862016 [ 574.227379][T23497] 9pnet_fd: Insufficient options for proto=fd [ 574.240705][T23491] loop8: detected capacity change from 0 to 512 [ 574.250987][T23489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 574.456431][T23491] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 574.530905][T13879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 574.545666][T23491] EXT4-fs (loop8): orphan cleanup on readonly fs [ 574.666310][T23491] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.5958: corrupted inode contents [ 574.683987][T23491] EXT4-fs (loop8): Remounting filesystem read-only [ 574.692100][T23491] EXT4-fs (loop8): 1 truncate cleaned up [ 574.698259][ T3923] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 574.708837][ T3923] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 574.730162][T23507] bond_slave_0: entered promiscuous mode [ 574.735862][T23507] bond_slave_1: entered promiscuous mode [ 574.741809][ T3923] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 574.752275][T23507] vlan2: entered promiscuous mode [ 574.757365][T23507] bond0: entered promiscuous mode [ 574.807181][T23491] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 574.850841][T23512] loop7: detected capacity change from 0 to 512 [ 574.892922][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.941409][T23512] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5963: bad orphan inode 11862016 [ 574.942465][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 574.942483][ T29] audit: type=1326 audit(591.740:13915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.4.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2f3eec9 code=0x7ffc0000 [ 574.982045][ T29] audit: type=1326 audit(591.782:13916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.4.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2f3eec9 code=0x7ffc0000 [ 575.023729][T23512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 575.062391][T23526] loop6: detected capacity change from 0 to 512 [ 575.075576][T23534] loop8: detected capacity change from 0 to 512 [ 575.118045][T23534] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.5966: bad orphan inode 11862016 [ 575.142854][T23512] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.5963: corrupted inode contents [ 575.161938][T23543] loop4: detected capacity change from 0 to 512 [ 575.169831][T23534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 575.183609][T23512] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.5963: mark_inode_dirty error [ 575.211463][T23512] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.5963: corrupted inode contents [ 575.226336][T23526] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 575.244489][T23543] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.5970: bad orphan inode 11862016 [ 575.263927][T23526] EXT4-fs (loop6): orphan cleanup on readonly fs [ 575.281654][T23512] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.5963: mark_inode_dirty error [ 575.294233][T23543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 575.308053][T23534] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.5966: corrupted inode contents [ 575.322172][T23512] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.5963: mark inode dirty (error -117) [ 575.344149][T23526] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.5968: corrupted inode contents [ 575.359980][T23512] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 575.367134][T23534] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #20: comm syz.8.5966: mark_inode_dirty error [ 575.394721][T23534] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.5966: corrupted inode contents [ 575.407285][T23526] EXT4-fs (loop6): Remounting filesystem read-only [ 575.417537][T23526] EXT4-fs (loop6): 1 truncate cleaned up [ 575.418080][ T3923] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 575.425582][T23534] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #20: comm syz.8.5966: mark_inode_dirty error [ 575.434238][ T3923] Quota error (device loop6): write_blk: dquota write failed [ 575.448193][T23534] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #20: comm syz.8.5966: mark inode dirty (error -117) [ 575.453582][ T3923] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 575.453605][ T3923] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 575.486787][ T3923] Quota error (device loop6): write_blk: dquota write failed [ 575.494236][ T3923] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 575.504386][ T3923] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 575.514496][ T3923] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 575.529268][T23543] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.5970: corrupted inode contents [ 575.541270][ T3923] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 575.554469][T23534] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 575.563735][T23543] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.5970: mark_inode_dirty error [ 575.615438][T23543] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.5970: corrupted inode contents [ 575.627906][T23543] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.5970: mark_inode_dirty error [ 575.641072][T23543] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.5970: mark inode dirty (error -117) [ 575.657120][T23543] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 575.710091][T23556] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5974'. [ 575.855415][T23560] bond_slave_0: entered promiscuous mode [ 575.861153][T23560] bond_slave_1: entered promiscuous mode [ 575.922805][T23560] vlan2: entered promiscuous mode [ 575.928073][T23560] bond0: entered promiscuous mode [ 576.039131][T23568] loop8: detected capacity change from 0 to 512 [ 576.063214][T23574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5980'. [ 576.401169][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5982'. [ 576.435049][T23589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=23589 comm=syz.4.5982 [ 576.479676][T23587] loop7: detected capacity change from 0 to 512 [ 576.517188][T23568] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 576.557801][T23568] EXT4-fs (loop8): orphan cleanup on readonly fs [ 576.635537][T23587] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5983: bad orphan inode 11862016 [ 576.690342][T23568] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.5977: corrupted inode contents [ 576.814664][T23568] EXT4-fs (loop8): Remounting filesystem read-only [ 576.865848][T23582] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.5983: corrupted inode contents [ 576.903054][T23568] EXT4-fs (loop8): 1 truncate cleaned up [ 577.009697][T23582] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.5983: mark_inode_dirty error [ 577.035811][T23582] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.5983: corrupted inode contents [ 577.060703][T23582] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.5983: mark_inode_dirty error [ 577.095063][T23582] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.5983: mark inode dirty (error -117) [ 577.108799][T23582] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 577.250998][ T3926] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 577.261590][ T3926] Quota error (device loop8): write_blk: dquota write failed [ 577.269060][ T3926] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 577.279098][ T3926] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 577.325067][ T3926] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 577.572958][T23608] netlink: 'syz.8.5986': attribute type 10 has an invalid length. [ 577.580722][T23609] netlink: 'syz.7.5987': attribute type 10 has an invalid length. [ 577.581264][T23608] team0: Device hsr_slave_0 failed to register rx_handler [ 577.683608][T23609] team0: Device hsr_slave_0 failed to register rx_handler [ 577.743569][T23612] wg2: entered promiscuous mode [ 577.749421][T23612] wg2: entered allmulticast mode [ 577.935483][T23617] loop6: detected capacity change from 0 to 512 [ 578.088569][T23614] loop4: detected capacity change from 0 to 128 [ 578.131746][T23614] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 578.139776][T23614] FAT-fs (loop4): Filesystem has been set read-only [ 578.397588][T23629] loop4: detected capacity change from 0 to 764 [ 578.435932][T23629] Symlink component flag not implemented [ 578.441623][T23629] Symlink component flag not implemented [ 578.487458][T23629] Symlink component flag not implemented (129) [ 578.493784][T23629] Symlink component flag not implemented (6) [ 578.528670][T23629] rock: directory entry would overflow storage [ 578.534927][T23629] rock: sig=0x4f50, size=4, remaining=3 [ 578.540527][T23629] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 578.548460][T23636] loop8: detected capacity change from 0 to 512 [ 578.556677][T23636] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 578.583105][T23636] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 578.599598][T23636] EXT4-fs (loop8): 1 truncate cleaned up [ 578.721441][T23631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=23631 comm=syz.7.5994 [ 579.015188][T23663] netlink: 464 bytes leftover after parsing attributes in process `syz.6.6005'. [ 579.296778][T23669] vlan2: entered promiscuous mode [ 579.324522][T23672] loop8: detected capacity change from 0 to 2048 [ 579.331757][T23672] EXT4-fs: Ignoring removed mblk_io_submit option [ 579.394431][T23679] wg2: left promiscuous mode [ 579.399223][T23679] wg2: left allmulticast mode [ 579.414602][T23679] wg2: entered promiscuous mode [ 579.419518][T23679] wg2: entered allmulticast mode [ 579.793216][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6012'. [ 579.827278][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6012'. [ 580.440713][T23691] vcan0 speed is unknown, defaulting to 1000 [ 580.602211][T23703] loop8: detected capacity change from 0 to 2048 [ 580.630312][T23703] EXT4-fs: Ignoring removed mblk_io_submit option [ 580.925631][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 580.925647][ T29] audit: type=1326 audit(598.028:13980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 580.992487][T23714] 9pnet_fd: Insufficient options for proto=fd [ 581.030609][ T29] audit: type=1326 audit(598.060:13981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.053880][ T29] audit: type=1326 audit(598.060:13982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.076990][ T29] audit: type=1326 audit(598.060:13983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.099983][ T29] audit: type=1326 audit(598.060:13984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.122986][ T29] audit: type=1326 audit(598.060:13985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.146132][ T29] audit: type=1326 audit(598.060:13986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.169145][ T29] audit: type=1326 audit(598.060:13987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.192255][ T29] audit: type=1326 audit(598.070:13988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.215440][ T29] audit: type=1326 audit(598.070:13989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 581.259315][T23718] loop4: detected capacity change from 0 to 2048 [ 581.267178][T23718] EXT4-fs: Ignoring removed mblk_io_submit option [ 581.388825][T23729] loop4: detected capacity change from 0 to 1024 [ 581.405959][T23729] EXT4-fs: Ignoring removed orlov option [ 581.730884][T23750] vcan0 speed is unknown, defaulting to 1000 [ 581.746813][T23752] loop8: detected capacity change from 0 to 2048 [ 581.775773][T23754] loop6: detected capacity change from 0 to 512 [ 581.779317][T23752] EXT4-fs: Ignoring removed mblk_io_submit option [ 581.831985][T23754] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6033: bad orphan inode 11862016 [ 581.903187][T23766] 9pnet_fd: Insufficient options for proto=fd [ 582.028820][T23754] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.6033: corrupted inode contents [ 582.040996][T23754] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #20: comm syz.6.6033: mark_inode_dirty error [ 582.062356][T23754] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.6033: corrupted inode contents [ 582.086091][T23754] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #20: comm syz.6.6033: mark_inode_dirty error [ 582.098649][T23754] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #20: comm syz.6.6033: mark inode dirty (error -117) [ 582.141328][T23754] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 582.150814][T23777] loop8: detected capacity change from 0 to 512 [ 582.174179][T23777] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.6039: bad orphan inode 11862016 [ 582.293760][T23777] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6039: corrupted inode contents [ 582.402706][T23777] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #20: comm syz.8.6039: mark_inode_dirty error [ 582.450268][T23777] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6039: corrupted inode contents [ 582.471989][T23777] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #20: comm syz.8.6039: mark_inode_dirty error [ 582.524097][T23802] loop4: detected capacity change from 0 to 2048 [ 582.541457][T23802] EXT4-fs: Ignoring removed mblk_io_submit option [ 582.570222][T23777] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #20: comm syz.8.6039: mark inode dirty (error -117) [ 582.605076][T23777] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 582.875342][T23810] vcan0 speed is unknown, defaulting to 1000 [ 582.901670][T23817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=23817 comm=syz.8.6050 [ 583.571703][T23839] loop4: detected capacity change from 0 to 2048 [ 583.641070][T23839] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.695134][T23839] EXT4-fs mount: 29 callbacks suppressed [ 583.695149][T23839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.769519][T13879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.796607][T23854] loop4: detected capacity change from 0 to 512 [ 583.826532][T23855] vcan0 speed is unknown, defaulting to 1000 [ 583.850757][T23854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.964856][T23861] bond_slave_0: entered promiscuous mode [ 583.970575][T23861] bond_slave_1: entered promiscuous mode [ 583.977034][T23861] vlan2: entered promiscuous mode [ 583.982098][T23861] bond0: entered promiscuous mode [ 584.044766][T13879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.462613][T23869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=23869 comm=syz.4.6067 [ 584.934991][ T3897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.960490][T23919] vcan0 speed is unknown, defaulting to 1000 [ 584.990069][ T3897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.013196][T23932] loop7: detected capacity change from 0 to 512 [ 585.063539][ T3897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.074523][T23932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.114107][T23939] 9pnet_fd: Insufficient options for proto=fd [ 585.141882][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.156082][ T3897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.270174][T23919] chnl_net:caif_netlink_parms(): no params data found [ 585.348506][ T3897] gretap0: left allmulticast mode [ 585.353593][ T3897] gretap0: left promiscuous mode [ 585.358724][ T3897] bridge0: port 3(gretap0) entered disabled state [ 585.382917][ T3897] bridge_slave_1: left allmulticast mode [ 585.388688][ T3897] bridge_slave_1: left promiscuous mode [ 585.394434][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.409049][ T3897] bridge_slave_0: left allmulticast mode [ 585.414768][ T3897] bridge_slave_0: left promiscuous mode [ 585.420636][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.431562][T23953] loop6: detected capacity change from 0 to 1024 [ 585.449860][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6083'. [ 585.459410][T23953] EXT4-fs: Ignoring removed orlov option [ 585.491605][T23953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.610146][ T3897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.620161][ T3897] bond_slave_0: left promiscuous mode [ 585.627139][ T3897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.636338][ T3897] bond_slave_1: left promiscuous mode [ 585.642556][ T3897] bond0 (unregistering): Released all slaves [ 585.661919][T23953] wg2: left promiscuous mode [ 585.666642][T23953] wg2: left allmulticast mode [ 585.691955][T23959] wg2: entered promiscuous mode [ 585.696875][T23959] wg2: entered allmulticast mode [ 585.710424][ T3897] tipc: Disabling bearer [ 585.715584][ T3897] tipc: Left network mode [ 585.727106][T23919] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.734273][T23919] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.741785][T23919] bridge_slave_0: entered allmulticast mode [ 585.748482][T23919] bridge_slave_0: entered promiscuous mode [ 585.758489][T23919] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.765639][T23919] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.786876][T23919] bridge_slave_1: entered allmulticast mode [ 585.795800][T23919] bridge_slave_1: entered promiscuous mode [ 585.804890][ T3897] hsr_slave_0: left promiscuous mode [ 585.818137][ T3897] hsr_slave_1: left promiscuous mode [ 585.834337][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.841775][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.856036][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.863514][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.885996][ T3897] veth1_macvtap: left promiscuous mode [ 585.893143][ T3897] veth0_macvtap: left promiscuous mode [ 585.898814][ T3897] veth1_vlan: left promiscuous mode [ 585.904696][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 585.904710][ T29] audit: type=1326 audit(603.256:14180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 585.905581][ T3897] veth0_vlan: left promiscuous mode [ 585.914453][ T29] audit: type=1326 audit(603.267:14181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 585.962340][ T29] audit: type=1326 audit(603.267:14182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 585.985541][ T29] audit: type=1326 audit(603.267:14183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 586.008661][ T29] audit: type=1326 audit(603.267:14184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 586.031748][ T29] audit: type=1326 audit(603.267:14185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 586.054773][ T29] audit: type=1326 audit(603.267:14186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 586.077999][ T29] audit: type=1326 audit(603.267:14187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 586.101053][ T29] audit: type=1326 audit(603.267:14188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 586.124395][ T29] audit: type=1326 audit(603.267:14189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23976 comm="syz.7.6087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 586.142775][T23984] 9pnet_fd: Insufficient options for proto=fd [ 586.153700][T23986] loop8: detected capacity change from 0 to 512 [ 586.161049][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.183616][T23986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.236899][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.265041][T23994] loop8: detected capacity change from 0 to 512 [ 586.284516][T23994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.309052][ T3897] team0 (unregistering): Port device team_slave_1 removed [ 586.322982][ T3897] team0 (unregistering): Port device team_slave_0 removed [ 586.343369][T23998] loop6: detected capacity change from 0 to 512 [ 586.352883][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.379021][T23998] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6092: bad orphan inode 11862016 [ 586.401193][ T3897] team0 (unregistering): Port device dummy0 removed [ 586.428319][ T3923] smc: removing ib device syz1 [ 586.449230][T23919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.460136][T23919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.481488][T23919] team0: Port device team_slave_0 added [ 586.488370][T23998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 586.505840][T19847] vcan0 speed is unknown, defaulting to 1000 [ 586.511991][T19847] syz1: Port: 1 Link DOWN [ 586.517840][T23919] team0: Port device team_slave_1 added [ 586.528698][T23998] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.6092: corrupted inode contents [ 586.541489][T23998] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #20: comm syz.6.6092: mark_inode_dirty error [ 586.565548][T23998] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.6092: corrupted inode contents [ 586.579638][T23919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.586775][T23919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.612797][T23919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.626525][T23998] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #20: comm syz.6.6092: mark_inode_dirty error [ 586.672661][T23919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.679727][T23919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.705856][T23919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.722419][T23998] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #20: comm syz.6.6092: mark inode dirty (error -117) [ 586.761857][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6094'. [ 586.790635][T23998] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 586.879884][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 586.929072][T23919] hsr_slave_0: entered promiscuous mode [ 586.949414][T23919] hsr_slave_1: entered promiscuous mode [ 586.963712][T23919] debugfs: 'hsr0' already exists in 'hsr' [ 586.969600][T23919] Cannot create hsr debugfs directory [ 587.020302][T24030] loop6: detected capacity change from 0 to 2048 [ 587.046886][T24030] EXT4-fs: Ignoring removed mblk_io_submit option [ 587.098039][T24030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.363268][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.411050][T24063] loop8: detected capacity change from 0 to 512 [ 587.418891][T24063] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 587.455819][T24063] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 587.484203][T23919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 587.514591][T23919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 587.524950][T24063] EXT4-fs (loop8): 1 truncate cleaned up [ 587.532925][T23919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 587.537838][T24063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.554550][T23919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 587.624451][T23919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.645098][T23919] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.654806][ T3887] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.661937][ T3887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.723186][ T3926] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.730830][ T3926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.776332][T23919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.783350][T24091] loop7: detected capacity change from 0 to 764 [ 587.828277][T24091] Symlink component flag not implemented [ 587.833972][T24091] Symlink component flag not implemented [ 587.863830][T24091] Symlink component flag not implemented (129) [ 587.870076][T24091] Symlink component flag not implemented (6) [ 587.888087][T24091] rock: directory entry would overflow storage [ 587.894365][T24091] rock: sig=0x4f50, size=4, remaining=3 [ 587.899960][T24091] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 587.921218][T23919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.037526][T24118] loop7: detected capacity change from 0 to 512 [ 588.072545][T24118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.156594][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.176506][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.185459][T23919] veth0_vlan: entered promiscuous mode [ 588.188865][T23919] veth1_vlan: entered promiscuous mode [ 588.204377][T23919] veth0_macvtap: entered promiscuous mode [ 588.212786][T23919] veth1_macvtap: entered promiscuous mode [ 588.255817][T23919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.370230][T24139] loop7: detected capacity change from 0 to 512 [ 588.405581][T23919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.417080][ T3887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.444796][T24139] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6108: bad orphan inode 11862016 [ 588.480966][ T3887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.512603][T24139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 588.513074][ T3894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.566359][T24168] loop4: detected capacity change from 0 to 2048 [ 588.584992][ T3894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.614215][T24168] EXT4-fs: Ignoring removed mblk_io_submit option [ 588.653616][T24168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.710985][T24139] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6108: corrupted inode contents [ 588.723654][T24139] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.6108: mark_inode_dirty error [ 588.752966][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.767623][T24139] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6108: corrupted inode contents [ 588.799957][T24139] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.6108: mark_inode_dirty error [ 588.817557][T24139] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.6108: mark inode dirty (error -117) [ 588.860258][T24139] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 588.930860][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 588.969273][T24183] loop7: detected capacity change from 0 to 512 [ 588.996184][T24183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.027484][T24181] vlan2: entered promiscuous mode [ 589.069630][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.348948][T24203] loop7: detected capacity change from 0 to 512 [ 589.514511][T24203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.706390][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.795087][T24210] loop4: detected capacity change from 0 to 512 [ 589.946772][T24210] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 589.956338][T24210] EXT4-fs (loop4): orphan cleanup on readonly fs [ 589.970797][T24210] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6124: corrupted inode contents [ 589.984087][T24210] EXT4-fs (loop4): Remounting filesystem read-only [ 589.994615][T24210] EXT4-fs (loop4): 1 truncate cleaned up [ 590.004070][ T3894] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 590.014647][ T3894] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 590.072942][ T3894] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 590.085513][T24210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.151305][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.384483][T24240] loop6: detected capacity change from 0 to 512 [ 590.418638][T24240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.469982][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.820078][T24247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6136'. [ 590.868860][T24247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6136'. [ 591.217761][T24238] loop4: detected capacity change from 0 to 128 [ 591.694481][T24238] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 591.702434][T24238] FAT-fs (loop4): Filesystem has been set read-only [ 591.828347][T24238] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 592.223403][T24266] loop4: detected capacity change from 0 to 512 [ 592.349593][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 592.349624][ T29] audit: type=1326 audit(610.017:14350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.399510][ T29] audit: type=1326 audit(610.059:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.422680][ T29] audit: type=1326 audit(610.059:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.445798][ T29] audit: type=1326 audit(610.059:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.468836][ T29] audit: type=1326 audit(610.059:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.491883][ T29] audit: type=1326 audit(610.059:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.495423][T24275] 9pnet_fd: Insufficient options for proto=fd [ 592.514923][ T29] audit: type=1326 audit(610.059:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.514957][ T29] audit: type=1326 audit(610.059:14357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.567172][ T29] audit: type=1326 audit(610.059:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.590482][ T29] audit: type=1326 audit(610.059:14359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.8.6145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 592.622113][T24266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.644803][T24266] netlink: 'syz.4.6142': attribute type 6 has an invalid length. [ 592.673560][T24281] loop6: detected capacity change from 0 to 512 [ 592.734795][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.753172][T24281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.848761][T24295] netlink: 464 bytes leftover after parsing attributes in process `syz.4.6150'. [ 592.869826][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.305103][T24309] loop7: detected capacity change from 0 to 2048 [ 593.339162][T24309] EXT4-fs: Ignoring removed mblk_io_submit option [ 593.362469][T24309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.435132][T24300] loop6: detected capacity change from 0 to 128 [ 593.474757][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.484080][T24300] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 593.491969][T24300] FAT-fs (loop6): Filesystem has been set read-only [ 593.501592][T24300] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 593.548624][T24323] loop4: detected capacity change from 0 to 512 [ 593.582636][T24323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.788640][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.814571][T24330] loop6: detected capacity change from 0 to 512 [ 593.839739][T24332] loop4: detected capacity change from 0 to 512 [ 593.869923][T24332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.886691][T24330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.925350][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.954079][T24332] netlink: 'syz.4.6161': attribute type 6 has an invalid length. [ 593.995178][T24339] netlink: 464 bytes leftover after parsing attributes in process `syz.6.6164'. [ 594.049268][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.135955][T24345] loop8: detected capacity change from 0 to 512 [ 594.155779][T24345] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.6167: bad orphan inode 11862016 [ 594.191635][T24345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 594.232422][T24355] loop4: detected capacity change from 0 to 2048 [ 594.244285][T24357] wg2: left promiscuous mode [ 594.248990][T24357] wg2: left allmulticast mode [ 594.254272][T24355] EXT4-fs: Ignoring removed mblk_io_submit option [ 594.270945][T24357] wg2: entered promiscuous mode [ 594.275915][T24357] wg2: entered allmulticast mode [ 594.306802][T24355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.380949][T24366] loop7: detected capacity change from 0 to 512 [ 594.390942][T24345] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6167: corrupted inode contents [ 594.406979][T24345] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #20: comm syz.8.6167: mark_inode_dirty error [ 594.429746][T24345] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6167: corrupted inode contents [ 594.443029][T24345] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #20: comm syz.8.6167: mark_inode_dirty error [ 594.458892][T24366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.466063][T24345] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #20: comm syz.8.6167: mark inode dirty (error -117) [ 594.489737][T24345] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 594.500414][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.519902][T24371] loop7: detected capacity change from 0 to 512 [ 594.541381][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.552664][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 594.743243][T24371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.787419][T24379] loop4: detected capacity change from 0 to 512 [ 594.943586][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.963877][T24379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.995211][T24379] netlink: 'syz.4.6175': attribute type 6 has an invalid length. [ 595.025752][T24386] bond_slave_0: entered promiscuous mode [ 595.031686][T24386] bond_slave_1: entered promiscuous mode [ 595.041672][T24386] vlan2: entered promiscuous mode [ 595.046757][T24386] bond0: entered promiscuous mode [ 595.078167][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.227645][T24393] loop6: detected capacity change from 0 to 1024 [ 595.227670][T24391] loop4: detected capacity change from 0 to 512 [ 595.250624][T24393] EXT4-fs: Ignoring removed orlov option [ 595.266239][T24395] loop7: detected capacity change from 0 to 512 [ 595.293488][T24393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.353172][T24395] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6183: bad orphan inode 11862016 [ 595.366257][T24391] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 595.377870][T24391] EXT4-fs (loop4): orphan cleanup on readonly fs [ 595.385341][T24395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 595.506533][T24391] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6181: corrupted inode contents [ 595.543399][T24391] EXT4-fs (loop4): Remounting filesystem read-only [ 595.550933][T24393] wg2: left promiscuous mode [ 595.555714][T24393] wg2: left allmulticast mode [ 595.571602][T24391] EXT4-fs (loop4): 1 truncate cleaned up [ 595.578291][ T292] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 595.588902][ T292] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 595.599975][T24393] wg2: entered promiscuous mode [ 595.604933][T24393] wg2: entered allmulticast mode [ 595.639504][ T292] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 595.658027][T24395] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6183: corrupted inode contents [ 595.672198][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.674155][T24391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 595.703099][T24395] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.6183: mark_inode_dirty error [ 595.739561][T24395] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6183: corrupted inode contents [ 595.767350][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.798027][T24395] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.6183: mark_inode_dirty error [ 595.814321][T24395] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.6183: mark inode dirty (error -117) [ 595.840503][T24418] loop6: detected capacity change from 0 to 512 [ 595.867915][T24395] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 595.907765][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 595.933987][T24418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.981602][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.373414][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6190'. [ 596.404617][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6190'. [ 597.178522][T24446] loop4: detected capacity change from 0 to 512 [ 597.192383][T24448] loop8: detected capacity change from 0 to 512 [ 597.236068][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6195'. [ 597.277681][T24448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.305286][T24446] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 597.325866][T24455] loop6: detected capacity change from 0 to 512 [ 597.343263][T24446] EXT4-fs (loop4): orphan cleanup on readonly fs [ 597.356924][T24448] netlink: 'syz.8.6200': attribute type 6 has an invalid length. [ 597.377391][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 597.377405][ T29] audit: type=1326 audit(615.276:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.406852][ T29] audit: type=1326 audit(615.276:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.429948][ T29] audit: type=1326 audit(615.276:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.453048][ T29] audit: type=1326 audit(615.276:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.459723][T24446] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6199: corrupted inode contents [ 597.476059][ T29] audit: type=1326 audit(615.276:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.476099][ T29] audit: type=1326 audit(615.276:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.476127][ T29] audit: type=1326 audit(615.276:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.476171][ T29] audit: type=1326 audit(615.276:14636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.476205][ T29] audit: type=1326 audit(615.276:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.476282][ T29] audit: type=1326 audit(615.276:14638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24447 comm="syz.8.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25d314eec9 code=0x7ffc0000 [ 597.797467][T24455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.830660][T24446] EXT4-fs (loop4): Remounting filesystem read-only [ 598.072644][T24446] EXT4-fs (loop4): 1 truncate cleaned up [ 598.088103][ T292] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 598.098702][ T292] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 598.129915][ T292] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 598.180116][T24467] loop6: detected capacity change from 0 to 512 [ 598.215238][T24467] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6204: bad orphan inode 11862016 [ 598.228171][T24477] wg1: entered promiscuous mode [ 598.233089][T24477] wg1: entered allmulticast mode [ 598.328550][T24467] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.6204: corrupted inode contents [ 598.342819][T24482] loop4: detected capacity change from 0 to 512 [ 598.365228][T24467] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #20: comm syz.6.6204: mark_inode_dirty error [ 598.380141][T24467] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.6204: corrupted inode contents [ 598.381920][T24482] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.6209: bad orphan inode 11862016 [ 598.393895][T24467] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #20: comm syz.6.6204: mark_inode_dirty error [ 598.424959][T24467] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #20: comm syz.6.6204: mark inode dirty (error -117) [ 598.438892][T24467] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 598.516737][T24489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6209: corrupted inode contents [ 598.549404][T24489] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.6209: mark_inode_dirty error [ 598.569874][T24489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6209: corrupted inode contents [ 598.583695][T24489] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.6209: mark_inode_dirty error [ 598.596002][T24489] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.6209: mark inode dirty (error -117) [ 598.610448][T24489] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 598.754417][T24493] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6212'. [ 598.775340][T24504] loop4: detected capacity change from 0 to 512 [ 598.949685][T24512] loop7: detected capacity change from 0 to 512 [ 599.009946][T24512] netlink: 'syz.7.6217': attribute type 6 has an invalid length. [ 599.111392][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6216'. [ 599.147597][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6216'. [ 599.258163][T24515] loop4: detected capacity change from 0 to 512 [ 599.760436][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6221'. [ 600.002919][T24515] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 600.054319][T24529] netlink: 464 bytes leftover after parsing attributes in process `syz.7.6223'. [ 600.064583][T24515] EXT4-fs (loop4): orphan cleanup on readonly fs [ 600.144473][T24515] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6218: corrupted inode contents [ 600.236714][T24532] loop7: detected capacity change from 0 to 512 [ 600.264436][T24515] EXT4-fs (loop4): Remounting filesystem read-only [ 600.288787][T24515] EXT4-fs (loop4): 1 truncate cleaned up [ 600.295564][ T3894] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 600.306178][ T3894] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 600.448551][T24532] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6224: bad orphan inode 11862016 [ 600.562565][T24543] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6224: corrupted inode contents [ 600.618187][T24543] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.6224: mark_inode_dirty error [ 600.652763][T24543] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6224: corrupted inode contents [ 600.676055][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6226'. [ 600.694958][T24543] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.6224: mark_inode_dirty error [ 600.732559][T24543] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.6224: mark inode dirty (error -117) [ 600.770938][T24543] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 600.847517][ T3894] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 600.935656][T24551] loop6: detected capacity change from 0 to 2048 [ 600.942654][T24551] EXT4-fs: Ignoring removed mblk_io_submit option [ 601.277794][T24565] bond_slave_0: entered promiscuous mode [ 601.283590][T24565] bond_slave_1: entered promiscuous mode [ 601.315716][T24565] vlan2: entered promiscuous mode [ 601.320930][T24565] bond0: entered promiscuous mode [ 601.663603][T24578] loop6: detected capacity change from 0 to 512 [ 601.720598][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6238'. [ 601.755400][T24578] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 601.767609][T24581] loop8: detected capacity change from 0 to 2048 [ 601.775486][T24578] EXT4-fs (loop6): orphan cleanup on readonly fs [ 601.783256][T24581] EXT4-fs: Ignoring removed mblk_io_submit option [ 601.885780][T24589] netlink: 'syz.0.6244': attribute type 6 has an invalid length. [ 601.917823][T24595] vlan2: entered promiscuous mode [ 601.920073][T24578] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6239: corrupted inode contents [ 601.957070][T24578] EXT4-fs (loop6): Remounting filesystem read-only [ 601.974422][T24589] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.979292][T24578] EXT4-fs (loop6): 1 truncate cleaned up [ 601.984500][T24589] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.017884][ T3900] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 602.028613][ T3900] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 602.040641][ T3900] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 602.073816][T24589] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.083644][T24589] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.137414][T24606] loop4: detected capacity change from 0 to 1024 [ 602.144486][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 602.144503][ T29] audit: type=1326 audit(620.294:14833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.173809][ T29] audit: type=1326 audit(620.294:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.190957][T24606] EXT4-fs: Ignoring removed orlov option [ 602.196873][ T29] audit: type=1326 audit(620.294:14835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.225539][ T29] audit: type=1326 audit(620.294:14836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.248544][ T29] audit: type=1326 audit(620.294:14837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.271541][ T29] audit: type=1326 audit(620.294:14838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.294598][ T29] audit: type=1326 audit(620.294:14839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.317620][ T29] audit: type=1326 audit(620.294:14840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.340696][ T29] audit: type=1326 audit(620.294:14841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.363712][ T29] audit: type=1326 audit(620.294:14842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24607 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 602.391282][T24589] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.401422][T24589] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.423753][T24606] wg2: entered promiscuous mode [ 602.428853][T24606] wg2: entered allmulticast mode [ 602.459327][T24589] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.469231][T24589] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.522563][ T3887] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.531103][ T3887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.542982][ T3887] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.551388][ T3887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.572557][ T3887] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.581144][ T3887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.593746][ T3887] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.602203][ T3887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.755019][T24626] loop4: detected capacity change from 0 to 512 [ 602.807062][T24633] vlan2: entered promiscuous mode [ 602.831297][T24635] 9pnet_fd: Insufficient options for proto=fd [ 602.920693][T24641] loop7: detected capacity change from 0 to 2048 [ 602.952262][ T3288] loop7: p1 < > p4 [ 602.957081][ T3288] loop7: p4 size 8388608 extends beyond EOD, truncated [ 602.967772][T24641] loop7: p1 < > p4 [ 602.975725][T24641] loop7: p4 size 8388608 extends beyond EOD, truncated [ 603.050064][T24645] loop7: detected capacity change from 0 to 512 [ 603.083080][T24645] netlink: 'syz.7.6264': attribute type 6 has an invalid length. [ 603.107202][T24645] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.145757][T24645] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.193729][T24645] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.221594][T24648] loop4: detected capacity change from 0 to 128 [ 603.237281][T24645] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.237360][T24648] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 603.255766][T24648] FAT-fs (loop4): Filesystem has been set read-only [ 603.286341][T24652] loop8: detected capacity change from 0 to 1024 [ 603.294632][T24652] EXT4-fs: Ignoring removed orlov option [ 603.321743][ T3894] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.332944][T24652] wg2: entered promiscuous mode [ 603.337941][T24652] wg2: entered allmulticast mode [ 603.367934][ T3894] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.388951][ T3894] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.397480][ T3894] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.426208][T24660] loop6: detected capacity change from 0 to 512 [ 603.605912][T24665] loop7: detected capacity change from 0 to 512 [ 603.652986][T24665] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 603.687183][T24665] EXT4-fs (loop7): orphan cleanup on readonly fs [ 603.706802][T24673] 9pnet_fd: Insufficient options for proto=fd [ 603.726738][T24665] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6270: corrupted inode contents [ 603.745002][T24665] EXT4-fs (loop7): Remounting filesystem read-only [ 603.756887][T24665] EXT4-fs (loop7): 1 truncate cleaned up [ 603.765987][ T3894] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 603.776607][ T3894] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 603.787486][ T3894] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 604.356851][T24691] netlink: 464 bytes leftover after parsing attributes in process `syz.8.6278'. [ 604.545624][T24694] loop8: detected capacity change from 0 to 128 [ 604.550971][T24699] loop6: detected capacity change from 0 to 512 [ 604.558291][T24694] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 604.566424][T24694] FAT-fs (loop8): Filesystem has been set read-only [ 604.617425][T24699] netlink: 'syz.6.6281': attribute type 6 has an invalid length. [ 604.645149][T24699] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.680076][T24709] vlan2: entered promiscuous mode [ 604.697810][T24699] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.764918][T24699] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.813717][T24699] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.894584][ T3926] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.917697][ T3926] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.928159][ T3926] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.940711][ T3926] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.053779][T24724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6289'. [ 605.077476][T24723] loop7: detected capacity change from 0 to 512 [ 605.097745][T24723] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6290: bad orphan inode 11862016 [ 605.172849][T24732] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6290: corrupted inode contents [ 605.264624][T24732] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.6290: mark_inode_dirty error [ 605.281360][T24732] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6290: corrupted inode contents [ 605.302287][T24732] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.6290: mark_inode_dirty error [ 605.315837][T24732] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.6290: mark inode dirty (error -117) [ 605.328836][T24732] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 605.434772][T24736] loop7: detected capacity change from 0 to 512 [ 605.459235][T24736] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6292: bad orphan inode 11862016 [ 605.625011][T24743] loop8: detected capacity change from 0 to 128 [ 605.666515][T24743] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 605.674875][T24743] FAT-fs (loop8): Filesystem has been set read-only [ 605.760931][T24747] loop7: detected capacity change from 0 to 512 [ 605.850727][T24757] loop8: detected capacity change from 0 to 512 [ 605.913817][T24757] netlink: 'syz.8.6298': attribute type 6 has an invalid length. [ 605.971396][T24721] syz.6.6289 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 605.982614][T24721] CPU: 1 UID: 0 PID: 24721 Comm: syz.6.6289 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 605.982655][T24721] Tainted: [W]=WARN [ 605.982664][T24721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 605.982680][T24721] Call Trace: [ 605.982688][T24721] [ 605.982696][T24721] __dump_stack+0x1d/0x30 [ 605.982717][T24721] dump_stack_lvl+0xe8/0x140 [ 605.982740][T24721] dump_stack+0x15/0x1b [ 605.982758][T24721] dump_header+0x81/0x220 [ 605.982795][T24721] oom_kill_process+0x342/0x400 [ 605.982877][T24721] out_of_memory+0x979/0xb80 [ 605.982913][T24721] try_charge_memcg+0x5e6/0x9e0 [ 605.982955][T24721] charge_memcg+0x51/0xc0 [ 605.982989][T24721] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 605.983037][T24721] __read_swap_cache_async+0x1df/0x350 [ 605.983076][T24721] swap_cluster_readahead+0x376/0x3e0 [ 605.983150][T24721] swapin_readahead+0xde/0x6f0 [ 605.983184][T24721] ? __filemap_get_folio+0x4f7/0x6b0 [ 605.983217][T24721] ? __rcu_read_unlock+0x34/0x70 [ 605.983248][T24721] ? swap_cache_get_folio+0x77/0x200 [ 605.983289][T24721] do_swap_page+0x301/0x2430 [ 605.983336][T24721] ? css_rstat_updated+0xb7/0x240 [ 605.983415][T24721] ? __pfx_default_wake_function+0x10/0x10 [ 605.983441][T24721] handle_mm_fault+0x9a5/0x2c20 [ 605.983516][T24721] do_user_addr_fault+0x630/0x1080 [ 605.983548][T24721] exc_page_fault+0x62/0xa0 [ 605.983629][T24721] asm_exc_page_fault+0x26/0x30 [ 605.983648][T24721] RIP: 0033:0x7f4e3d09edab [ 605.983664][T24721] Code: 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 89 e8 c1 e8 0f 31 c5 81 e5 ff 0f 00 00 48 31 d5 <80> 3d 96 32 37 00 00 0f 84 a8 00 00 00 4c 89 f6 48 8b 0d 76 32 37 [ 605.983724][T24721] RSP: 002b:00007ffdc2f44e90 EFLAGS: 00010286 [ 605.983799][T24721] RAX: 000000000000fbe1 RBX: 00007f4e3df45720 RCX: 000000000004c200 [ 605.983811][T24721] RDX: ffffffff818653c7 RSI: ffffffff8186583e RDI: 000000000000001a [ 605.983823][T24721] RBP: ffffffff818657b4 R08: 00007f4e3d416038 R09: 00007f4e3d402000 [ 605.983837][T24721] R10: 00007f4e3cc27008 R11: 000000000000001a R12: 000000000000001a [ 605.983852][T24721] R13: 0000000000000a8e R14: ffffffff818653c7 R15: 000000000004c200 [ 605.983869][T24721] ? __vunmap_range_noflush+0x5c7/0x800 [ 605.983942][T24721] ? __vmap_pages_range_noflush+0x114/0xcf0 [ 605.983974][T24721] ? __vunmap_range_noflush+0x5c7/0x800 [ 605.984011][T24721] ? __vmap_pages_range_noflush+0x19e/0xcf0 [ 605.984043][T24721] [ 605.984052][T24721] memory: usage 307200kB, limit 307200kB, failcnt 284 [ 606.227912][T24721] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 606.227948][T24721] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 606.227965][T24721] Memory cgroup stats for /syz6: [ 606.275139][T24721] cache 0 [ 606.275150][T24721] rss 0 [ 606.275159][T24721] shmem 0 [ 606.275167][T24721] mapped_file 0 [ 606.275176][T24721] dirty 0 [ 606.275184][T24721] writeback 0 [ 606.275193][T24721] workingset_refault_anon 134 [ 606.275258][T24721] workingset_refault_file 0 [ 606.275288][T24721] swap 192512 [ 606.275295][T24721] swapcached 0 [ 606.275304][T24721] pgpgin 284951 [ 606.275313][T24721] pgpgout 284951 [ 606.275322][T24721] pgfault 298408 [ 606.275331][T24721] pgmajfault 71 [ 606.275344][T24721] inactive_anon 0 [ 606.275354][T24721] active_anon 0 [ 606.275363][T24721] inactive_file 0 [ 606.275372][T24721] active_file 0 [ 606.275381][T24721] unevictable 0 [ 606.275391][T24721] hierarchical_memory_limit 314572800 [ 606.275402][T24721] hierarchical_memsw_limit 9223372036854771712 [ 606.275414][T24721] total_cache 0 [ 606.275423][T24721] total_rss 0 [ 606.275430][T24721] total_shmem 0 [ 606.275437][T24721] total_mapped_file 0 [ 606.275478][T24721] total_dirty 0 [ 606.275488][T24721] total_writeback 0 [ 606.275497][T24721] total_workingset_refault_anon 134 [ 606.275508][T24721] total_workingset_refault_file 0 [ 606.275598][T24721] total_swap 192512 [ 606.275605][T24721] total_swapcached 0 [ 606.275612][T24721] total_pgpgin 284951 [ 606.275633][T24721] total_pgpgout 284951 [ 606.275641][T24721] total_pgfault 298408 [ 606.275648][T24721] total_pgmajfault 71 [ 606.275655][T24721] total_inactive_anon 0 [ 606.275662][T24721] total_active_anon 0 [ 606.275671][T24721] total_inactive_file 0 [ 606.275680][T24721] total_active_file 0 [ 606.275690][T24721] total_unevictable 0 [ 606.275700][T24721] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.6289,pid=24721,uid=0 [ 606.275912][T24721] Memory cgroup out of memory: Killed process 24721 (syz.6.6289) total-vm:96004kB, anon-rss:1116kB, file-rss:22456kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 606.365538][T24757] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.414043][T24769] loop7: detected capacity change from 0 to 128 [ 606.416797][T24769] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 606.416816][T24769] FAT-fs (loop7): Filesystem has been set read-only [ 606.459531][T24757] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.736498][T24757] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.793861][T24757] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.837514][ T3926] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.858909][ T3926] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.874002][ T3926] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.882701][ T3926] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.006979][T24789] loop7: detected capacity change from 0 to 512 [ 607.053927][T24789] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6306: bad orphan inode 11862016 [ 607.146909][T24783] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6306: corrupted inode contents [ 607.160138][T24783] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.6306: mark_inode_dirty error [ 607.184921][T24783] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6306: corrupted inode contents [ 607.215633][T24783] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.6306: mark_inode_dirty error [ 607.246333][T24783] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.6306: mark inode dirty (error -117) [ 607.260555][T24783] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 607.280439][T24788] loop4: detected capacity change from 0 to 128 [ 607.298074][T24788] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 607.306020][T24788] FAT-fs (loop4): Filesystem has been set read-only [ 607.349557][T24796] loop7: detected capacity change from 0 to 512 [ 607.368183][T24796] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6308: bad orphan inode 11862016 [ 607.405910][T24803] loop4: detected capacity change from 0 to 512 [ 607.465438][T24796] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6308: corrupted inode contents [ 607.477616][T24796] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.6308: mark_inode_dirty error [ 607.491316][T24796] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6308: corrupted inode contents [ 607.503556][T24796] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.6308: mark_inode_dirty error [ 607.532786][T24810] netlink: 464 bytes leftover after parsing attributes in process `syz.6.6311'. [ 607.538651][T24796] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.6308: mark inode dirty (error -117) [ 607.556936][T24796] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 607.757129][T24824] loop7: detected capacity change from 0 to 512 [ 607.780499][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 607.780517][ T29] audit: type=1326 audit(626.215:15123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 607.811395][ T29] audit: type=1326 audit(626.215:15124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 607.834566][ T29] audit: type=1326 audit(626.215:15125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 607.857585][ T29] audit: type=1326 audit(626.215:15126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 607.880909][ T29] audit: type=1326 audit(626.215:15127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 607.901861][T24824] netlink: 'syz.7.6315': attribute type 6 has an invalid length. [ 607.904014][ T29] audit: type=1326 audit(626.215:15128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 607.904056][ T29] audit: type=1326 audit(626.215:15129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 607.904093][ T29] audit: type=1326 audit(626.215:15130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 607.981124][ T29] audit: type=1326 audit(626.215:15131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 608.004874][ T29] audit: type=1326 audit(626.310:15132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24823 comm="syz.7.6315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 608.061131][T24824] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.118160][T24824] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.131366][T24833] loop8: detected capacity change from 0 to 128 [ 608.141062][T24833] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 608.149065][T24833] FAT-fs (loop8): Filesystem has been set read-only [ 608.176722][T24824] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.240539][T24824] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.259877][T24839] loop8: detected capacity change from 0 to 512 [ 608.291676][ T3926] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.314193][ T3926] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.333497][T24839] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 608.356494][ T3926] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.373767][T24839] EXT4-fs (loop8): orphan cleanup on readonly fs [ 608.382119][ T3926] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.421828][T24845] netlink: 464 bytes leftover after parsing attributes in process `syz.7.6324'. [ 608.448046][T24839] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.6322: corrupted inode contents [ 608.470678][T24839] EXT4-fs (loop8): Remounting filesystem read-only [ 608.481599][T24839] EXT4-fs (loop8): 1 truncate cleaned up [ 608.492015][ T3923] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 608.502675][ T3923] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 608.502982][T24848] loop7: detected capacity change from 0 to 512 [ 608.513697][ T3923] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 608.577098][T24853] loop6: detected capacity change from 0 to 2048 [ 608.586469][T24848] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6325: bad orphan inode 11862016 [ 608.597759][T24853] EXT4-fs: Ignoring removed mblk_io_submit option [ 608.700119][T24860] loop8: detected capacity change from 0 to 512 [ 608.733635][T24848] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6325: corrupted inode contents [ 608.759458][T24860] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.6327: bad orphan inode 11862016 [ 608.802449][T24848] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.6325: mark_inode_dirty error [ 608.815389][T24848] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6325: corrupted inode contents [ 608.827711][T24848] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.6325: mark_inode_dirty error [ 608.851565][T24848] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.6325: mark inode dirty (error -117) [ 608.886876][T24848] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 608.924697][T24860] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6327: corrupted inode contents [ 608.941924][T24860] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #20: comm syz.8.6327: mark_inode_dirty error [ 608.969265][T24860] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6327: corrupted inode contents [ 608.981766][T24860] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #20: comm syz.8.6327: mark_inode_dirty error [ 608.994137][T24860] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #20: comm syz.8.6327: mark inode dirty (error -117) [ 609.017110][T24860] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 609.048418][T24879] loop7: detected capacity change from 0 to 512 [ 609.103935][T24883] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6334'. [ 609.664187][T24895] loop8: detected capacity change from 0 to 512 [ 609.684908][T24897] loop6: detected capacity change from 0 to 2048 [ 609.692232][T24897] EXT4-fs: Ignoring removed mblk_io_submit option [ 609.728800][T24895] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 609.742966][T24895] EXT4-fs (loop8): orphan cleanup on readonly fs [ 609.776574][T24882] syz.7.6334 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 609.787710][T24882] CPU: 0 UID: 0 PID: 24882 Comm: syz.7.6334 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 609.787751][T24882] Tainted: [W]=WARN [ 609.787758][T24882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.787780][T24882] Call Trace: [ 609.787786][T24882] [ 609.787795][T24882] __dump_stack+0x1d/0x30 [ 609.787821][T24882] dump_stack_lvl+0xe8/0x140 [ 609.787847][T24882] dump_stack+0x15/0x1b [ 609.787931][T24882] dump_header+0x81/0x220 [ 609.787993][T24882] oom_kill_process+0x342/0x400 [ 609.788041][T24882] out_of_memory+0x979/0xb80 [ 609.788079][T24882] try_charge_memcg+0x5e6/0x9e0 [ 609.788132][T24882] charge_memcg+0x51/0xc0 [ 609.788184][T24882] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 609.788227][T24882] __read_swap_cache_async+0x1df/0x350 [ 609.788289][T24882] swap_cluster_readahead+0x277/0x3e0 [ 609.788330][T24882] swapin_readahead+0xde/0x6f0 [ 609.788443][T24882] ? __filemap_get_folio+0x4f7/0x6b0 [ 609.788501][T24882] ? __rcu_read_unlock+0x34/0x70 [ 609.788534][T24882] ? swap_cache_get_folio+0x77/0x200 [ 609.788570][T24882] do_swap_page+0x301/0x2430 [ 609.788672][T24882] ? css_rstat_updated+0xb7/0x240 [ 609.788709][T24882] ? __pfx_default_wake_function+0x10/0x10 [ 609.788824][T24882] handle_mm_fault+0x9a5/0x2c20 [ 609.788877][T24882] do_user_addr_fault+0x630/0x1080 [ 609.788962][T24882] exc_page_fault+0x62/0xa0 [ 609.789034][T24882] asm_exc_page_fault+0x26/0x30 [ 609.789056][T24882] RIP: 0033:0x7f1d0e4757cc [ 609.789073][T24882] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 609.789096][T24882] RSP: 002b:00007ffc3b097220 EFLAGS: 00010287 [ 609.789131][T24882] RAX: 0000000000000000 RBX: 00007f1d0e7f6090 RCX: 0000000000000000 [ 609.789148][T24882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555594d0c808 [ 609.789164][T24882] RBP: 00007f1d0e7f7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 609.789181][T24882] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000097f9a [ 609.789221][T24882] R13: 00007f1d0e7f6090 R14: ffffffffffffffff R15: 00007ffc3b097330 [ 609.789247][T24882] [ 609.789256][T24882] memory: usage 307200kB, limit 307200kB, failcnt 213 [ 609.800425][T24895] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.6338: corrupted inode contents [ 609.800682][T24882] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 609.800736][T24882] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 609.800778][T24882] Memory cgroup stats for /syz7: [ 609.813703][T24882] cache 0 [ 609.818378][T24895] EXT4-fs (loop8): Remounting filesystem read-only [ 609.818923][T24882] rss 0 [ 609.818934][T24882] shmem 0 [ 609.818943][T24882] mapped_file 0 [ 609.818952][T24882] dirty 0 [ 609.818961][T24882] writeback 0 [ 609.818970][T24882] workingset_refault_anon 23 [ 609.818980][T24882] workingset_refault_file 0 [ 609.818990][T24882] swap 192512 [ 609.818999][T24882] swapcached 0 [ 609.819008][T24882] pgpgin 203522 [ 609.819044][T24882] pgpgout 203522 [ 609.819053][T24882] pgfault 228716 [ 609.819135][T24882] pgmajfault 12 [ 609.819144][T24882] inactive_anon 0 [ 609.819176][T24882] active_anon 0 [ 609.819254][T24882] inactive_file 0 [ 609.819264][T24882] active_file 0 [ 609.819273][T24882] unevictable 0 [ 609.819349][T24882] hierarchical_memory_limit 314572800 [ 609.837654][T24895] EXT4-fs (loop8): 1 truncate cleaned up [ 609.839803][T24882] hierarchical_memsw_limit 9223372036854771712 [ 609.839825][T24882] total_cache 0 [ 609.839903][T24882] total_rss 0 [ 609.839913][T24882] total_shmem 0 [ 609.839922][T24882] total_mapped_file 0 [ 609.839930][T24882] total_dirty 0 [ 609.839937][T24882] total_writeback 0 [ 609.839945][T24882] total_workingset_refault_anon 23 [ 609.839956][T24882] total_workingset_refault_file 0 [ 609.839963][T24882] total_swap 192512 [ 609.839973][T24882] total_swapcached 0 [ 609.839982][T24882] total_pgpgin 203522 [ 609.839992][T24882] total_pgpgout 203522 [ 609.840036][T24882] total_pgfault 228716 [ 610.184052][T24882] total_pgmajfault 12 [ 610.188064][T24882] total_inactive_anon 0 [ 610.192241][T24882] total_active_anon 0 [ 610.196238][T24882] total_inactive_file 0 [ 610.200409][T24882] total_active_file 0 [ 610.204409][T24882] total_unevictable 0 [ 610.208452][T24882] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.6334,pid=24882,uid=0 [ 610.223159][T24882] Memory cgroup out of memory: Killed process 24882 (syz.7.6334) total-vm:93956kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 610.241473][ T3894] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 610.252080][ T3894] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 610.265016][ T3894] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 610.341668][T24908] loop6: detected capacity change from 0 to 512 [ 610.354891][T24915] loop8: detected capacity change from 0 to 512 [ 610.395509][T24908] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6341: bad orphan inode 11862016 [ 610.410139][T24919] loop4: detected capacity change from 0 to 512 [ 610.463090][T24919] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.6343: bad orphan inode 11862016 [ 610.604168][T24931] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.6341: corrupted inode contents [ 610.625332][T24913] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6343: corrupted inode contents [ 610.637612][T24913] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.6343: mark_inode_dirty error [ 610.659386][T24931] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #19: comm syz.6.6341: mark_inode_dirty error [ 610.668165][T24913] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6343: corrupted inode contents [ 610.697173][T24913] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.6343: mark_inode_dirty error [ 610.725443][T24931] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.6341: corrupted inode contents [ 610.738808][T24913] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.6343: mark inode dirty (error -117) [ 610.752311][T24931] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.6341: mark_inode_dirty error [ 610.765908][T24913] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 610.775521][T24931] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.6341: mark inode dirty (error -117) [ 610.789558][T24931] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 610.954539][T24940] loop6: detected capacity change from 0 to 512 [ 611.006920][T24950] loop4: detected capacity change from 0 to 512 [ 611.014178][T24940] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6349: bad orphan inode 11862016 [ 611.051656][T24950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 611.110217][T24950] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 611.130969][T24950] EXT4-fs (loop4): 1 truncate cleaned up [ 611.241660][T24940] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.6349: corrupted inode contents [ 611.259762][T24940] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #20: comm syz.6.6349: mark_inode_dirty error [ 611.272623][T24940] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.6349: corrupted inode contents [ 611.285488][T24940] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #20: comm syz.6.6349: mark_inode_dirty error [ 611.299779][T24940] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #20: comm syz.6.6349: mark inode dirty (error -117) [ 611.312978][T24940] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 611.510527][T24964] loop6: detected capacity change from 0 to 512 [ 612.338337][T24975] loop4: detected capacity change from 0 to 512 [ 612.365464][T24975] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.6359: bad orphan inode 11862016 [ 612.387035][T24975] EXT4-fs mount: 78 callbacks suppressed [ 612.387055][T24975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 612.431816][T24987] loop7: detected capacity change from 0 to 512 [ 612.504945][T24987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.545009][T24975] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6359: corrupted inode contents [ 612.644013][T24975] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.6359: mark_inode_dirty error [ 612.657382][T24975] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6359: corrupted inode contents [ 612.669702][T24975] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.6359: mark_inode_dirty error [ 612.671123][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 612.671142][ T29] audit: type=1326 audit(631.338:15168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.710938][ T29] audit: type=1326 audit(631.338:15169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.712778][T24975] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.6359: mark inode dirty (error -117) [ 612.734011][ T29] audit: type=1326 audit(631.338:15170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.770288][ T29] audit: type=1326 audit(631.338:15171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.793281][ T29] audit: type=1326 audit(631.338:15172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.816288][ T29] audit: type=1326 audit(631.338:15173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.837717][T24987] netlink: 'syz.7.6360': attribute type 6 has an invalid length. [ 612.839425][ T29] audit: type=1326 audit(631.338:15174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.839453][ T29] audit: type=1326 audit(631.338:15175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.893116][ T29] audit: type=1326 audit(631.338:15176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.916282][ T29] audit: type=1326 audit(631.359:15177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.7.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0e59eec9 code=0x7ffc0000 [ 612.935258][T24975] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 612.986943][T24987] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.998279][T24999] netlink: 464 bytes leftover after parsing attributes in process `syz.8.6364'. [ 613.060457][T24987] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.091043][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 613.108702][T25002] loop8: detected capacity change from 0 to 1024 [ 613.117574][T25002] EXT4-fs: Ignoring removed orlov option [ 613.137030][T24987] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.145989][T25004] loop4: detected capacity change from 0 to 512 [ 613.170438][T25002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.190427][T25004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.205669][T24987] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.242589][T25002] wg2: left promiscuous mode [ 613.247217][T25002] wg2: left allmulticast mode [ 613.269561][T25002] wg2: entered promiscuous mode [ 613.274483][T25002] wg2: entered allmulticast mode [ 613.312426][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.343207][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.356704][ T3900] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.415499][ T3900] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.441147][ T3900] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.449486][ T3900] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.473805][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.539095][T25017] loop8: detected capacity change from 0 to 128 [ 613.557513][T25017] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 613.565632][T25017] FAT-fs (loop8): Filesystem has been set read-only [ 613.653649][T25024] loop4: detected capacity change from 0 to 512 [ 613.690732][T25024] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 613.702012][T25023] loop7: detected capacity change from 0 to 128 [ 613.711205][T25023] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 613.719145][T25023] FAT-fs (loop7): Filesystem has been set read-only [ 613.751157][T25024] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 613.783096][T25024] EXT4-fs (loop4): 1 truncate cleaned up [ 613.789436][T25024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.816050][T25031] 9pnet_fd: Insufficient options for proto=fd [ 613.893809][T25035] netlink: 464 bytes leftover after parsing attributes in process `syz.8.6376'. [ 613.928906][T25037] loop8: detected capacity change from 0 to 512 [ 613.941477][T25041] loop6: detected capacity change from 0 to 512 [ 613.950181][T25041] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 613.950415][T25037] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.6377: bad orphan inode 11862016 [ 613.972561][T25037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 613.987616][T25041] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 614.003776][T25041] EXT4-fs (loop6): 1 truncate cleaned up [ 614.009953][T25041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.064309][T25037] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6377: corrupted inode contents [ 614.076459][T25037] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #20: comm syz.8.6377: mark_inode_dirty error [ 614.088297][T25037] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6377: corrupted inode contents [ 614.100347][T25037] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #20: comm syz.8.6377: mark_inode_dirty error [ 614.112950][T25037] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #20: comm syz.8.6377: mark inode dirty (error -117) [ 614.126911][T25037] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 614.158414][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 614.350801][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.432506][T25058] loop7: detected capacity change from 0 to 512 [ 614.455262][T25065] 9pnet_fd: Insufficient options for proto=fd [ 614.493733][T25058] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6385: bad orphan inode 11862016 [ 614.514584][T25058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 614.603755][T25058] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6385: corrupted inode contents [ 614.631903][T25058] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #20: comm syz.7.6385: mark_inode_dirty error [ 614.663049][T25058] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #20: comm syz.7.6385: corrupted inode contents [ 614.701459][T25058] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #20: comm syz.7.6385: mark_inode_dirty error [ 614.726195][T25058] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #20: comm syz.7.6385: mark inode dirty (error -117) [ 614.739631][T25058] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 614.761730][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.776300][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 614.987679][T25080] loop4: detected capacity change from 0 to 512 [ 615.033351][T25080] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.6390: bad orphan inode 11862016 [ 615.069201][T25080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 615.256761][T25081] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6390: corrupted inode contents [ 615.270008][T25081] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.6390: mark_inode_dirty error [ 615.322737][T25081] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6390: corrupted inode contents [ 615.360541][T25081] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.6390: mark_inode_dirty error [ 615.529133][T25100] loop8: detected capacity change from 0 to 512 [ 615.532684][T25081] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.6390: mark inode dirty (error -117) [ 615.548356][T25081] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 615.567629][T25100] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 615.612914][T25100] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 615.618688][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 615.638681][T25100] EXT4-fs (loop8): 1 truncate cleaned up [ 615.666749][T25100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.698091][T25104] loop4: detected capacity change from 0 to 512 [ 615.728587][T25104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.738502][T25108] 9pnet_fd: Insufficient options for proto=fd [ 615.760278][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.874250][T25115] loop4: detected capacity change from 0 to 512 [ 615.903647][T25117] loop6: detected capacity change from 0 to 512 [ 615.926496][T25115] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 615.937225][T25115] EXT4-fs (loop4): orphan cleanup on readonly fs [ 615.953178][T25115] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6399: corrupted inode contents [ 615.966211][T25115] EXT4-fs (loop4): Remounting filesystem read-only [ 615.975383][T25115] EXT4-fs (loop4): 1 truncate cleaned up [ 615.981825][ T3894] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 615.992432][ T3894] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 615.993766][T25117] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 616.008302][ T3894] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 616.017657][T25115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 616.031023][T25117] EXT4-fs (loop6): orphan cleanup on readonly fs [ 616.069652][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.072751][T25117] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6400: corrupted inode contents [ 616.092095][T25117] EXT4-fs (loop6): Remounting filesystem read-only [ 616.106132][T25117] EXT4-fs (loop6): 1 truncate cleaned up [ 616.112938][ T3894] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 616.123618][ T3894] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 616.135910][ T3894] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 616.158964][T25117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 616.190682][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.213291][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.427436][T25133] loop8: detected capacity change from 0 to 128 [ 616.440209][T25133] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 616.448147][T25133] FAT-fs (loop8): Filesystem has been set read-only [ 616.596549][T25144] loop6: detected capacity change from 0 to 512 [ 616.642920][T25144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.676086][T18321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.722194][T25151] loop8: detected capacity change from 0 to 512 [ 616.731175][T25152] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6410'. [ 616.790961][T25151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.829708][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.564456][T25165] loop4: detected capacity change from 0 to 512 [ 617.764774][T25165] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 617.822496][T25165] EXT4-fs (loop4): orphan cleanup on readonly fs [ 617.992548][T25165] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6413: corrupted inode contents [ 618.421941][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 618.421960][ T29] audit: type=1326 audit(637.385:15417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.458703][T25165] EXT4-fs (loop4): Remounting filesystem read-only [ 618.461168][ T29] audit: type=1326 audit(637.427:15418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.483422][T25165] EXT4-fs (loop4): 1 truncate cleaned up [ 618.488446][ T29] audit: type=1326 audit(637.427:15419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.488544][ T29] audit: type=1326 audit(637.427:15420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.488578][ T29] audit: type=1326 audit(637.427:15421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.488663][ T29] audit: type=1326 audit(637.427:15422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.488696][ T29] audit: type=1326 audit(637.427:15423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.488730][ T29] audit: type=1326 audit(637.427:15424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.488821][ T29] audit: type=1326 audit(637.427:15425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.488855][ T29] audit: type=1326 audit(637.427:15426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25185 comm="syz.6.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3d1beec9 code=0x7ffc0000 [ 618.545664][ T3887] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 618.691605][ T3887] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 618.724057][ T3887] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 618.744400][T25165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.788353][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.144952][T25209] loop8: detected capacity change from 0 to 2048 [ 619.159419][T25209] EXT4-fs: Ignoring removed mblk_io_submit option [ 619.188712][T25209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.262002][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.199679][T25253] loop4: detected capacity change from 0 to 512 [ 620.394737][T25253] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.6443: bad orphan inode 11862016 [ 620.418142][T25253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 620.596120][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6445'. [ 620.646495][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6445'. [ 621.335652][T25253] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6443: corrupted inode contents [ 621.368514][T25253] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.6443: mark_inode_dirty error [ 621.410079][T25253] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.6443: corrupted inode contents [ 621.464145][T25253] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.6443: mark_inode_dirty error [ 621.516807][T25253] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.6443: mark inode dirty (error -117) [ 621.572304][T25253] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 621.638984][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 621.846454][T25291] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6453'. [ 622.053306][T25298] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6455'. [ 622.805176][T18321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 622.816124][T18321] CPU: 1 UID: 0 PID: 18321 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 622.816160][T18321] Tainted: [W]=WARN [ 622.816167][T18321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 622.816204][T18321] Call Trace: [ 622.816212][T18321] [ 622.816221][T18321] __dump_stack+0x1d/0x30 [ 622.816242][T18321] dump_stack_lvl+0xe8/0x140 [ 622.816261][T18321] dump_stack+0x15/0x1b [ 622.816277][T18321] dump_header+0x81/0x220 [ 622.816319][T18321] oom_kill_process+0x342/0x400 [ 622.816412][T18321] out_of_memory+0x979/0xb80 [ 622.816500][T18321] try_charge_memcg+0x5e6/0x9e0 [ 622.816618][T18321] charge_memcg+0x51/0xc0 [ 622.816695][T18321] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 622.816729][T18321] __read_swap_cache_async+0x1df/0x350 [ 622.816793][T18321] swap_cluster_readahead+0x376/0x3e0 [ 622.816832][T18321] swapin_readahead+0xde/0x6f0 [ 622.816905][T18321] ? __filemap_get_folio+0x4f7/0x6b0 [ 622.816992][T18321] ? read_tsc+0x9/0x20 [ 622.817010][T18321] ? swap_cache_get_folio+0x77/0x200 [ 622.817099][T18321] do_swap_page+0x301/0x2430 [ 622.817203][T18321] ? finish_task_switch+0xad/0x2b0 [ 622.817234][T18321] ? __pfx_default_wake_function+0x10/0x10 [ 622.817341][T18321] handle_mm_fault+0x9a5/0x2c20 [ 622.817383][T18321] do_user_addr_fault+0x630/0x1080 [ 622.817403][T18321] ? fpregs_restore_userregs+0xe2/0x1d0 [ 622.817432][T18321] ? switch_fpu_return+0xe/0x20 [ 622.817517][T18321] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 622.817549][T18321] exc_page_fault+0x62/0xa0 [ 622.817574][T18321] asm_exc_page_fault+0x26/0x30 [ 622.817593][T18321] RIP: 0033:0x7f4e3d1f1745 [ 622.817608][T18321] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 622.817631][T18321] RSP: 002b:00007ffdc2f45148 EFLAGS: 00010246 [ 622.817711][T18321] RAX: 0000000000000000 RBX: 000000000000040c RCX: 00007f4e3d1f1743 [ 622.817727][T18321] RDX: 00007ffdc2f45160 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.817739][T18321] RBP: 00007ffdc2f451cc R08: 000000003b4fadec R09: 0000000000000000 [ 622.817751][T18321] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 622.817825][T18321] R13: 00000000000927c0 R14: 000000000009b135 R15: 00007ffdc2f45220 [ 622.817848][T18321] [ 622.817854][T18321] memory: usage 307200kB, limit 307200kB, failcnt 678 [ 623.053924][T18321] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 623.061978][T18321] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 623.069275][T18321] Memory cgroup stats for /syz6: [ 623.099374][T18321] cache 0 [ 623.107279][T18321] rss 0 [ 623.110216][T18321] shmem 0 [ 623.113191][T18321] mapped_file 0 [ 623.116664][T18321] dirty 0 [ 623.119664][T18321] writeback 0 [ 623.122967][T18321] workingset_refault_anon 223 [ 623.127676][T18321] workingset_refault_file 0 [ 623.132190][T18321] swap 196608 [ 623.135485][T18321] swapcached 4096 [ 623.139140][T18321] pgpgin 304558 [ 623.142647][T18321] pgpgout 304557 [ 623.146268][T18321] pgfault 319559 [ 623.149895][T18321] pgmajfault 132 [ 623.153576][T18321] inactive_anon 0 [ 623.157274][T18321] active_anon 4096 [ 623.161007][T18321] inactive_file 0 [ 623.164644][T18321] active_file 0 [ 623.168133][T18321] unevictable 0 [ 623.171600][T18321] hierarchical_memory_limit 314572800 [ 623.177099][T18321] hierarchical_memsw_limit 9223372036854771712 [ 623.183344][T18321] total_cache 0 [ 623.186917][T18321] total_rss 0 [ 623.190281][T18321] total_shmem 0 [ 623.193750][T18321] total_mapped_file 0 [ 623.197771][T18321] total_dirty 0 [ 623.201239][T18321] total_writeback 0 [ 623.205080][T18321] total_workingset_refault_anon 223 [ 623.210279][T18321] total_workingset_refault_file 0 [ 623.215327][T18321] total_swap 196608 [ 623.219142][T18321] total_swapcached 4096 [ 623.223339][T18321] total_pgpgin 304558 [ 623.227329][T18321] total_pgpgout 304557 [ 623.231476][T18321] total_pgfault 319559 [ 623.235594][T18321] total_pgmajfault 132 [ 623.239668][T18321] total_inactive_anon 0 [ 623.243919][T18321] total_active_anon 4096 [ 623.248271][T18321] total_inactive_file 0 [ 623.252472][T18321] total_active_file 0 [ 623.256457][T18321] total_unevictable 0 [ 623.260570][T18321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.6453,pid=25290,uid=0 [ 623.275506][T18321] Memory cgroup out of memory: Killed process 25290 (syz.6.6453) total-vm:96004kB, anon-rss:1136kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 623.341930][T25318] loop4: detected capacity change from 0 to 1024 [ 623.365827][T25318] EXT4-fs: Ignoring removed orlov option [ 623.373738][T25318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.402177][T25318] wg2: left promiscuous mode [ 623.406962][T25318] wg2: left allmulticast mode [ 623.415846][T25318] wg2: entered promiscuous mode [ 623.420753][T25318] wg2: entered allmulticast mode [ 623.656767][T23919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.299151][T25344] loop7: detected capacity change from 0 to 512 [ 624.329529][T25344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.421198][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.548765][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 624.548779][ T29] audit: type=1326 audit(643.820:15543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.579200][ T29] audit: type=1326 audit(643.820:15544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.602440][ T29] audit: type=1326 audit(643.820:15545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.625519][ T29] audit: type=1326 audit(643.820:15546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.648541][ T29] audit: type=1326 audit(643.820:15547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.671621][ T29] audit: type=1326 audit(643.820:15548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.694634][ T29] audit: type=1326 audit(643.820:15549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.717639][ T29] audit: type=1326 audit(643.820:15550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.740656][ T29] audit: type=1326 audit(643.820:15551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.763847][ T29] audit: type=1326 audit(643.820:15552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25351 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0f8eec9 code=0x7ffc0000 [ 624.807589][T25371] loop8: detected capacity change from 0 to 512 [ 624.873578][T25371] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.6475: bad orphan inode 11862016 [ 624.900397][T25371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 624.982482][T25378] loop7: detected capacity change from 0 to 1024 [ 624.997531][T25371] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6475: corrupted inode contents [ 625.020614][T25371] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #20: comm syz.8.6475: mark_inode_dirty error [ 625.034744][T25378] EXT4-fs: Ignoring removed orlov option [ 625.057576][T25371] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #20: comm syz.8.6475: corrupted inode contents [ 625.060425][T25378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.111834][T25378] wg2: entered promiscuous mode [ 625.114395][T25371] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #20: comm syz.8.6475: mark_inode_dirty error [ 625.116757][T25378] wg2: entered allmulticast mode [ 625.215569][T25371] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #20: comm syz.8.6475: mark inode dirty (error -117) [ 625.229307][T25371] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 625.269047][T19775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 625.307947][T25384] ================================================================== [ 625.316083][T25384] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 625.324350][T25384] [ 625.326684][T25384] write to 0xffff888119aa28b8 of 4 bytes by task 25378 on cpu 0: [ 625.334408][T25384] writeback_single_inode+0x150/0x3f0 [ 625.339795][T25384] sync_inode_metadata+0x5b/0x90 [ 625.344757][T25384] generic_buffers_fsync_noflush+0xd9/0x120 [ 625.350673][T25384] ext4_sync_file+0x1ab/0x690 [ 625.355367][T25384] vfs_fsync_range+0x10d/0x130 [ 625.360147][T25384] ext4_buffered_write_iter+0x34f/0x3c0 [ 625.365708][T25384] ext4_file_write_iter+0x383/0xf00 [ 625.370923][T25384] iter_file_splice_write+0x663/0xa60 [ 625.376335][T25384] direct_splice_actor+0x156/0x2a0 [ 625.381466][T25384] splice_direct_to_actor+0x312/0x680 [ 625.386853][T25384] do_splice_direct+0xda/0x150 [ 625.391635][T25384] do_sendfile+0x380/0x650 [ 625.396065][T25384] __x64_sys_sendfile64+0x105/0x150 [ 625.401304][T25384] x64_sys_call+0x2bb4/0x3000 [ 625.405989][T25384] do_syscall_64+0xd2/0x200 [ 625.410512][T25384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.416415][T25384] [ 625.418737][T25384] read to 0xffff888119aa28b8 of 4 bytes by task 25384 on cpu 1: [ 625.426456][T25384] __mark_inode_dirty+0x191/0x750 [ 625.431498][T25384] ext4_write_inline_data_end+0x3e5/0x5f0 [ 625.437227][T25384] ext4_write_end+0x3d7/0x730 [ 625.441913][T25384] generic_perform_write+0x30f/0x490 [ 625.447229][T25384] ext4_buffered_write_iter+0x1ee/0x3c0 [ 625.452787][T25384] ext4_file_write_iter+0x383/0xf00 [ 625.458000][T25384] iter_file_splice_write+0x663/0xa60 [ 625.463390][T25384] direct_splice_actor+0x156/0x2a0 [ 625.468540][T25384] splice_direct_to_actor+0x312/0x680 [ 625.473938][T25384] do_splice_direct+0xda/0x150 [ 625.478727][T25384] do_sendfile+0x380/0x650 [ 625.483156][T25384] __x64_sys_sendfile64+0x105/0x150 [ 625.488466][T25384] x64_sys_call+0x2bb4/0x3000 [ 625.493158][T25384] do_syscall_64+0xd2/0x200 [ 625.497686][T25384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.503613][T25384] [ 625.505937][T25384] value changed: 0x00000070 -> 0x00000002 [ 625.511655][T25384] [ 625.513978][T25384] Reported by Kernel Concurrency Sanitizer on: [ 625.520134][T25384] CPU: 1 UID: 0 PID: 25384 Comm: syz.7.6478 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 625.531515][T25384] Tainted: [W]=WARN [ 625.535320][T25384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 625.545379][T25384] ================================================================== [ 625.604377][T25386] 9pnet_fd: Insufficient options for proto=fd [ 625.693720][T25391] netlink: 'syz.0.6482': attribute type 6 has an invalid length. [ 625.728556][T25391] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.738489][T25391] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.764300][T19475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.781247][T25391] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.791171][T25391] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.844076][T25391] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.854124][T25391] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.901376][T25391] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.911330][T25391] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.964550][ T292] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.972812][ T292] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.985370][ T292] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.993636][ T292] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.007614][ T3887] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.016065][ T3887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.027968][ T3887] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.036250][ T3887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0