last executing test programs: 5m6.349389081s ago: executing program 32 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f00007ba000/0x3000)=nil, 0x3000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[], 0xc8) ptrace(0x10, 0x1) socket$inet(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) ioctl$PPPOEIOCDFWD(r1, 0x40047459, 0x1000000000000) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 4m51.234847065s ago: executing program 4 (id=553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 4m51.080541567s ago: executing program 4 (id=557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x1080, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) 4m51.004215128s ago: executing program 33 (id=556): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x4}}) syz_open_dev$sg(0x0, 0x2, 0x4ce681) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x5602, &(0x7f0000000000)={0x0, "96d3e9659db3f50cb3c4e683f4fae026a3b284dd56630882be4bc0f34042227a71f06b95d73e34c8ecf3325e43f75f16f13d8905d3bdce627dc6ae0b14840f4c8bebc40872293c61ddd293631a22c6d5c8c9b16b987f4326874ddc5e2610c5505cea115e51bf6feb3e93cf89b8f44394fa2ac7f6cf757a9416c7545c5e5caa34450f0397d179f2225b57f644ce8ad31b15547b9364daef8e784f2036a75c3c5cfd124cdd424a558ea90d054d36c0d1d0db92e5e7f668dadcbfaed92c7cf3204be0c4904d308feba3447d7f41a58bc2fd4682e306a592696e4de9427d87c008d3e172cf162cc35f00915fe9fc9ea84e28838940e4bb2fda4c55a34abdf6db63d547c91a17211a1ce43a2933f8227e8b6767ab70bc9223e62a2d3ad9b13f74e2000961e62eaea005088d6d74a19eb0c56ce314323143fcfe27e410e10bd21a2140783385bdb1a7d33038427e336829ccfb63c04e537ca51ddae5fdf29505fca04fc4b2a13d6dad7db2eace60e9589712719a49a2d2d44587465037851b1fe93a0ed46822294671098fd53e79fe428bf6ae3846299ab1d238ad07be6cc01b5fcaacfce829c209e67d5548a38b637f3b44905b8be24dfba30e1b6d074b43e53fcded14a4190a585949baa43fef6c70ce7b1612299d734c07feed23252886a1317358cf5ecaf0186d2dbdb3eab8a9c3c21d4828ef8a9dd89207f2884a57679fcd495a"}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x2002, &(0x7f0000000040)=0xa, 0x89) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) 4m49.113766997s ago: executing program 34 (id=583): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$urandom(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) pipe(0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 4m48.011032832s ago: executing program 4 (id=600): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 4m47.897366674s ago: executing program 4 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m47.863514845s ago: executing program 4 (id=604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 4m47.626299699s ago: executing program 4 (id=609): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000240)=0x9, 0x4) 4m47.603297169s ago: executing program 35 (id=609): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000240)=0x9, 0x4) 4m46.356447727s ago: executing program 1 (id=635): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xfffffd80, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0}}, 0x10) 4m46.333384157s ago: executing program 1 (id=636): personality(0x8) ioperm(0x7, 0x449, 0x7ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4m46.137992731s ago: executing program 1 (id=638): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101501, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8924, 0x0) 4m45.944036094s ago: executing program 1 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m45.899792234s ago: executing program 7 (id=641): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='&', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000008400)=[{&(0x7f0000006f80)="d6e7", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 4m45.873973934s ago: executing program 7 (id=642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 4m45.867165054s ago: executing program 1 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x1e103568964919ec, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="8f9f02000000000000000400ec4504000180"], 0x18}}, 0x2000c090) 4m45.814362925s ago: executing program 7 (id=646): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_io_uring_setup(0xb32, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 4m45.782327865s ago: executing program 7 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 4m45.700714857s ago: executing program 7 (id=648): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m45.686762017s ago: executing program 7 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x70bd30, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x200040b4) accept(r6, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 4m45.612530828s ago: executing program 1 (id=651): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x2010000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) 4m45.457026981s ago: executing program 36 (id=651): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x2010000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) 4m30.135590138s ago: executing program 37 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x70bd30, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x200040b4) accept(r6, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 4m23.221661749s ago: executing program 6 (id=851): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 4m23.112363991s ago: executing program 6 (id=853): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)="6cbbf40f4633f38b4e44952d4fe896939009c5cc855f7d14eb586fea049b50d789df4d08c281923ffe4e89febbaea67653ebb8aae596062b4b", 0x39}], 0x1) 4m22.997151303s ago: executing program 6 (id=856): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) 4m22.932220374s ago: executing program 6 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m22.834760276s ago: executing program 6 (id=860): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 4m22.438863911s ago: executing program 6 (id=865): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() membarrier(0x2, 0x0) 4m22.320850723s ago: executing program 38 (id=865): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() membarrier(0x2, 0x0) 4m4.160847932s ago: executing program 0 (id=1133): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) 4m3.218389666s ago: executing program 0 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000640)={0xffffffffffffffff, r0}, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000700)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xbc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m2.866474641s ago: executing program 0 (id=1146): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = dup(r0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 4m2.819838502s ago: executing program 0 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m2.799186012s ago: executing program 0 (id=1150): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvfrom$l2tp(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x28, 0x0, "e9255bb992"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 4m2.592775126s ago: executing program 0 (id=1151): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) 4m2.592540986s ago: executing program 39 (id=1151): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) 3.175729442s ago: executing program 8 (id=3714): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x7d9a, &(0x7f0000000240)={0x0, 0xdf07, 0x2, 0x3, 0xcd}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 3.168868932s ago: executing program 3 (id=3716): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1018ed8, &(0x7f0000000280), 0x6, 0x664, &(0x7f0000002000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='devices.list\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, 0x3, 0x7ec, 0x2000000000, 0x8, 0x3, 0x100000000004, 0x5}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.077075564s ago: executing program 2 (id=3717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.823625907s ago: executing program 8 (id=3718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) name_to_handle_at(r4, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000da0000ffffffff0200"/32], &(0x7f0000000380), 0x0) close(r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80023001300111537dc68581fb152aae99900000000ffdbdf25fe80000000000000000000000000003bff0200000000000000000000000000010000bb60000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000370900000000000000000000000000000101000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c", @ANYRES16, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r9, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x6}}}}, [""]}, 0x28}}, 0xc000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRES16=r6, @ANYRES16=0x0, @ANYRES32=r10, @ANYRESDEC], 0x58}, 0x1, 0x0, 0x0, 0x44040008}, 0x4004008) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="04000090", @ANYRES64=r1, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYBLOB="0c009900040000003c00000008001400", @ANYRES32=r10, @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x7fffff}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000002ed1887d4459fc1729de00"/29, @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf252000000008000300", @ANYRES16=0x0, @ANYBLOB="0c009900080000007e000000"], 0x28}, 0x1, 0x0, 0x0, 0x24044814}, 0x5880) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r12 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r12, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x4, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r12, &(0x7f0000000040)="e2", 0x2250) 2.710740489s ago: executing program 3 (id=3719): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="987a5e000095b1555d000000000100b79e39352d5e9e94d62ade55000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1018ed8, &(0x7f0000000280), 0x6, 0x664, &(0x7f0000002000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='devices.list\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000480)={0x0, 0x2, 0x3, 0x7ec, 0x2000000000, 0x8, 0x3, 0x100000000004, 0x5}) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_mreqn(r2, 0x0, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r10, 0x3, 0x1}, &(0x7f0000000440)=0xc) close_range(r1, 0xffffffffffffffff, 0x0) 2.706511029s ago: executing program 8 (id=3720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000440)}], 0x2) 2.507321022s ago: executing program 3 (id=3721): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create(0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe2(&(0x7f0000000580), 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002a86da000da356f0efcfe37258c0", @ANYBLOB="765671e1422b8d9ab3a61b6e0d25fbba7de837c916543e7333b7bccfc0f3ad49fef05d01064338bfe2467c4dc4ab9f6c7f23555eae3d6149e3367de4ebb001abd1f915b707808cdcc648288834944d8aaa2352bc65728cbae17f7d95ffcecb287758fa8f0cad4c78007ab1909d1dfd01538b15ad53edfa5a7514a03a838e03a7b37afa979db824df0232f60f66eadd1e53f1612e7f1bcea6f83a1ce2c63c6d5061e9ecbd26add334b367a24669efbb8ac280c736578f38158e7f5e10332a9029f6338fb15453fb03752b95f2dbb9b48fe65905e57b624d8c98ddc1fae5", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) 2.475813033s ago: executing program 3 (id=3722): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioprio_set$pid(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) io_uring_setup(0x7d9a, &(0x7f0000000240)={0x0, 0xdf07, 0x2, 0x3, 0xcd}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 2.377892274s ago: executing program 3 (id=3723): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) socket$inet(0x2, 0x2, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd']) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) semget(0x2, 0x4, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 2.265133876s ago: executing program 5 (id=3724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x120, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 2.161529357s ago: executing program 2 (id=3726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=f']) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_DISALLOCATE(r6, 0x5608) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x800) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.160972267s ago: executing program 5 (id=3727): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file2\x00', 0x4a0c, &(0x7f0000003240)=ANY=[], 0x6, 0x36b, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 2.090892288s ago: executing program 5 (id=3729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r2, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x6}, 0x18) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) 2.090006698s ago: executing program 2 (id=3739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r2) 2.074060059s ago: executing program 3 (id=3730): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1018ed8, &(0x7f0000000280), 0x6, 0x664, &(0x7f0000002000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='devices.list\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, 0x3, 0x7ec, 0x2000000000, 0x8, 0x3, 0x100000000004, 0x5}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.061503019s ago: executing program 2 (id=3731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003a40)=""/4105, 0x1009}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000480)=""/74, 0x4a}], 0x5}, 0x1801}], 0x1, 0x120, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.952365s ago: executing program 5 (id=3732): r0 = socket(0x1, 0x803, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r2 = dup2(r1, r0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x4008700c, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@gettaction={0x1c, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@private0, 0x0}, &(0x7f0000000240)=0x14) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10a, 0x10a, 0x9, [@enum64={0x10, 0x5, 0x0, 0x13, 0x1, 0x8, [{0x7, 0x6, 0x6}, {0x5, 0x5810bd05, 0xb9a9}, {0xa, 0x1ff, 0x5}, {0xa, 0x7f, 0xff}, {0x10, 0x1, 0x10}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0xa, 0x4}, {0x3, 0x8}, {0x5, 0x1}, {0xb, 0x1}]}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x73, 0x4}, @var={0x2, 0x0, 0x0, 0xe, 0x4}, @datasec={0x5, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x5e5f, 0x6}, {0x3, 0x81, 0x84}], 'de'}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @union={0xe, 0x3, 0x0, 0x5, 0x0, 0x8, [{0x9, 0x1, 0x138a}, {0x10, 0x0, 0x80000001}, {0x4, 0x5, 0x7}]}]}, {0x0, [0x2e, 0x30, 0x61, 0xd, 0x30, 0x0, 0x0]}}, &(0x7f0000000280)=""/123, 0x12d, 0x7b, 0x0, 0x1, 0x10000, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x76}, @jmp={0x5, 0x1, 0xd, 0xb, 0x3, 0x4, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x60000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x4, 0xd, &(0x7f00000001c0)=""/13, 0x41000, 0x50, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000540)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x6, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000005c0)=[{0x4, 0x2, 0xb, 0xb}, {0x3, 0x5, 0xd, 0x9}, {0x2, 0x3, 0x3, 0x2}, {0x4, 0x3, 0x2, 0x2}, {0x4, 0x5, 0xb}, {0x2, 0x5, 0x10, 0xc}, {0x0, 0x4, 0xa, 0xa}], 0x10, 0x9, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000640)={r10, r8}, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000700)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xbc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@noblock_validity}]}, 0x1, 0x511, &(0x7f0000000a80)="$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") 1.900385951s ago: executing program 2 (id=3734): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000f0095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x67, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_getevents(0x0, 0xffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4) write(r4, 0x0, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.684661914s ago: executing program 8 (id=3736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.28755594s ago: executing program 2 (id=3737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.28662609s ago: executing program 5 (id=3738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.210253171s ago: executing program 9 (id=3740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}}, 0x8, 0xffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1040f8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x80) 1.023873264s ago: executing program 9 (id=3741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=f']) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_DISALLOCATE(r6, 0x5608) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x800) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 718.348239ms ago: executing program 8 (id=3742): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) socket$inet(0x2, 0x2, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd']) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) semget(0x2, 0x4, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 717.674209ms ago: executing program 9 (id=3743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r2) 520.801132ms ago: executing program 9 (id=3744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x120, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) 440.489343ms ago: executing program 9 (id=3745): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioprio_set$pid(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x7d9a, &(0x7f0000000240)={0x0, 0xdf07, 0x2, 0x3, 0xcd}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 202.076636ms ago: executing program 9 (id=3746): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000280)=[{}, {&(0x7f0000000440)}], 0x2) 200.641046ms ago: executing program 5 (id=3747): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000ed030000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xffffffffffffff0a, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRES64=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x19}, {@empty, 0x4e22, 0x3, 0x10001, 0x400fc1a, 0x8}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) 0s ago: executing program 8 (id=3748): syz_io_uring_setup(0x3559, &(0x7f00000000c0)={0x0, 0x301, 0x0, 0x3, 0x4e}, &(0x7f0000000180)=0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/126, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r3, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x67, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000005c0)={[], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xb2\xd9\\|]+'}}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, '*:\x13+-:\',*]'}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8080c61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x0, 0x8000c62) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) kernel console output (not intermixed with test programs): 0000100) [ 325.783948][T13263] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 325.803061][T13270] loop3: detected capacity change from 0 to 1024 [ 325.812980][T13270] EXT4-fs: Ignoring removed orlov option [ 325.821458][T13270] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 325.864171][T13275] loop9: detected capacity change from 0 to 164 [ 325.881154][T13270] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.2985: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 325.912709][T13275] rock: directory entry would overflow storage [ 325.918975][T13275] rock: sig=0x4f50, size=4, remaining=3 [ 325.924634][T13275] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 325.962510][T13279] pim6reg1: entered promiscuous mode [ 325.967960][T13279] pim6reg1: entered allmulticast mode [ 326.066569][T13288] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2991'. [ 326.081729][T13288] loop5: detected capacity change from 0 to 1024 [ 326.102417][T13288] ext4: Unknown parameter 'func' [ 326.135205][T13292] 9pnet_fd: Insufficient options for proto=fd [ 326.256045][T13299] pim6reg1: entered promiscuous mode [ 326.261386][T13299] pim6reg1: entered allmulticast mode [ 326.566836][T13305] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2996'. [ 326.626946][T13307] loop2: detected capacity change from 0 to 1024 [ 326.657986][T13313] loop8: detected capacity change from 0 to 1024 [ 326.668093][T13315] 9pnet_fd: Insufficient options for proto=fd [ 326.676745][ T29] audit: type=1326 audit(1748661961.418:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 326.694504][ T3392] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 326.703429][T13313] EXT4-fs: Ignoring removed orlov option [ 326.727755][ T3392] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 326.761480][T13313] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 326.778678][ T29] audit: type=1326 audit(1748661961.418:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 326.802323][ T29] audit: type=1326 audit(1748661961.418:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 326.825943][ T29] audit: type=1326 audit(1748661961.418:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 326.849451][ T29] audit: type=1326 audit(1748661961.418:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 326.851100][T13321] loop5: detected capacity change from 0 to 164 [ 326.872803][ T29] audit: type=1326 audit(1748661961.418:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 326.902625][ T29] audit: type=1326 audit(1748661961.418:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 326.937693][T13313] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.3000: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 327.003034][T13321] rock: directory entry would overflow storage [ 327.006089][ T29] audit: type=1326 audit(1748661961.568:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.2.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 327.009262][T13321] rock: sig=0x4f50, size=4, remaining=3 [ 327.009283][T13321] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 327.075676][T13328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3003'. [ 327.089138][T13328] loop2: detected capacity change from 0 to 1024 [ 327.095925][T13328] ext4: Unknown parameter 'func' [ 327.160429][T13339] 9pnet_fd: Insufficient options for proto=fd [ 327.160711][T13336] pim6reg1: entered promiscuous mode [ 327.171954][T13336] pim6reg1: entered allmulticast mode [ 327.254503][T13343] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3011'. [ 327.317693][T13348] loop2: detected capacity change from 0 to 1024 [ 327.357829][ T3392] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 327.383891][ T3392] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.456302][T13357] loop5: detected capacity change from 0 to 1024 [ 327.504080][T13357] EXT4-fs: Ignoring removed orlov option [ 327.514102][T13357] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 327.562507][T13357] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.3015: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 327.663087][T13364] loop3: detected capacity change from 0 to 1024 [ 327.699437][T13364] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.822925][T13364] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3016: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 327.857564][T13364] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3016: couldn't read orphan inode 11 (err -117) [ 327.909335][T13364] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3016: Invalid block bitmap block 0 in block_group 0 [ 327.924191][T13371] loop2: detected capacity change from 0 to 164 [ 327.975149][T13371] rock: directory entry would overflow storage [ 327.981404][T13371] rock: sig=0x4f50, size=4, remaining=3 [ 327.987021][T13371] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 328.006214][T13364] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3016: Failed to acquire dquot type 0 [ 328.158122][T13374] 9pnet_fd: Insufficient options for proto=fd [ 328.317765][T13376] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3018'. [ 328.340974][T13384] pim6reg1: entered promiscuous mode [ 328.346361][T13384] pim6reg1: entered allmulticast mode [ 328.379689][T13376] loop5: detected capacity change from 0 to 1024 [ 328.435146][T13376] ext4: Unknown parameter 'func' [ 328.487291][T13396] loop3: detected capacity change from 0 to 1024 [ 328.505695][T13396] EXT4-fs: Ignoring removed orlov option [ 328.610885][T13396] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 328.648996][T13396] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3028: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 328.772388][T13414] pim6reg1: entered promiscuous mode [ 328.777880][T13414] pim6reg1: entered allmulticast mode [ 329.121522][T13427] 9pnet: Could not find request transport: f [ 329.128559][T13427] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 329.179292][T13432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3042'. [ 329.204644][T13436] 9pnet_fd: Insufficient options for proto=fd [ 329.219075][T13432] loop3: detected capacity change from 0 to 1024 [ 329.244617][T13432] ext4: Unknown parameter 'func' [ 329.362352][T13444] loop3: detected capacity change from 0 to 1024 [ 329.384318][T13444] EXT4-fs: Ignoring removed orlov option [ 329.465920][T13444] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 329.542232][T13444] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3046: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 329.584290][T13462] 9pnet: Could not find request transport: f [ 329.591362][T13462] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 329.632754][T13471] loop9: detected capacity change from 0 to 1024 [ 329.666165][T13471] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.764003][T13471] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3057: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 329.792304][T13480] 9pnet_fd: Insufficient options for proto=fd [ 329.804905][T13471] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3057: couldn't read orphan inode 11 (err -117) [ 329.856601][T13471] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3057: Invalid block bitmap block 0 in block_group 0 [ 329.902010][T13489] loop5: detected capacity change from 0 to 1024 [ 329.912617][T13489] ext4: Unknown parameter 'func' [ 329.936336][T13471] __quota_error: 29 callbacks suppressed [ 329.936351][T13471] Quota error (device loop9): write_blk: dquota write failed [ 329.949515][T13471] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 329.961599][T13495] loop5: detected capacity change from 0 to 128 [ 329.972132][T13471] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3057: Failed to acquire dquot type 0 [ 330.002148][T13493] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 330.010107][T13493] FAT-fs (loop5): Filesystem has been set read-only [ 330.025315][T13493] syz.5.3066: attempt to access beyond end of device [ 330.025315][T13493] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 330.039729][T13493] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 330.047733][T13493] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 330.135907][T13503] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 330.172155][T13499] 9pnet: Could not find request transport: f [ 330.233524][T13508] loop9: detected capacity change from 0 to 164 [ 330.314334][T13512] pim6reg1: entered promiscuous mode [ 330.319689][T13512] pim6reg1: entered allmulticast mode [ 330.332265][T13508] rock: directory entry would overflow storage [ 330.338662][T13508] rock: sig=0x4f50, size=4, remaining=3 [ 330.344671][T13508] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 330.486404][T13522] loop3: detected capacity change from 0 to 1024 [ 330.493460][T13522] ext4: Unknown parameter 'func' [ 330.504081][T13517] pim6reg1: entered promiscuous mode [ 330.509501][T13517] pim6reg1: entered allmulticast mode [ 330.539722][T13525] loop9: detected capacity change from 0 to 128 [ 330.558575][T13526] loop5: detected capacity change from 0 to 1024 [ 330.566796][T13528] 9pnet_fd: Insufficient options for proto=fd [ 330.577160][T13526] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 330.588895][T13523] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 330.596795][T13523] FAT-fs (loop9): Filesystem has been set read-only [ 330.613157][T13526] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.3079: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 330.639447][T13523] syz.9.3078: attempt to access beyond end of device [ 330.639447][T13523] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 330.664153][T13523] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 330.672025][T13523] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 330.687376][T13526] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3079: couldn't read orphan inode 11 (err -117) [ 330.714008][T13526] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3079: Invalid block bitmap block 0 in block_group 0 [ 330.739008][T13534] 9pnet: Could not find request transport: f [ 330.748286][T13534] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 330.770208][T13526] Quota error (device loop5): write_blk: dquota write failed [ 330.777680][T13526] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 330.793665][T13526] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3079: Failed to acquire dquot type 0 [ 330.970086][T13548] pim6reg1: entered promiscuous mode [ 330.975438][T13548] pim6reg1: entered allmulticast mode [ 330.996195][T13550] loop5: detected capacity change from 0 to 164 [ 331.008456][T13550] rock: directory entry would overflow storage [ 331.014730][T13550] rock: sig=0x4f50, size=4, remaining=3 [ 331.020296][T13550] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 331.087776][T13559] pim6reg1: entered promiscuous mode [ 331.091582][T13558] loop9: detected capacity change from 0 to 1024 [ 331.093137][T13559] pim6reg1: entered allmulticast mode [ 331.110556][T13558] ext4: Unknown parameter 'func' [ 331.231538][T13567] 9pnet: Could not find request transport: f [ 331.240558][T13567] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 331.289797][T13574] loop5: detected capacity change from 0 to 1024 [ 331.298520][T13570] loop8: detected capacity change from 0 to 128 [ 331.318178][ T29] audit: type=1326 audit(1748661966.058:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.5.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc164e969 code=0x7ffc0000 [ 331.320436][ T3469] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 331.350532][ T29] audit: type=1326 audit(1748661966.058:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.5.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc164e969 code=0x7ffc0000 [ 331.374135][ T29] audit: type=1326 audit(1748661966.058:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.5.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cc164e969 code=0x7ffc0000 [ 331.397651][ T29] audit: type=1326 audit(1748661966.058:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.5.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc164e969 code=0x7ffc0000 [ 331.421275][ T29] audit: type=1326 audit(1748661966.058:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.5.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5cc164e969 code=0x7ffc0000 [ 331.444654][ T29] audit: type=1326 audit(1748661966.058:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.5.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc164e969 code=0x7ffc0000 [ 331.474213][ T3469] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.487784][T13569] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 331.495724][T13569] FAT-fs (loop8): Filesystem has been set read-only [ 331.502644][T13569] syz.8.3095: attempt to access beyond end of device [ 331.502644][T13569] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 331.516676][T13569] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 331.524582][T13569] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 331.830897][T13585] 9pnet_fd: Insufficient options for proto=fd [ 331.941112][T13588] 9pnet_fd: Insufficient options for proto=fd [ 332.028401][T13593] pim6reg1: entered promiscuous mode [ 332.033891][T13593] pim6reg1: entered allmulticast mode [ 332.135939][T13601] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3105'. [ 332.155299][T13600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3104'. [ 332.167819][T13603] 9pnet: Could not find request transport: f [ 332.176557][T13603] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 332.228603][T13607] loop8: detected capacity change from 0 to 1024 [ 332.237182][T13607] ext4: Unknown parameter 'func' [ 332.298314][T13619] loop2: detected capacity change from 0 to 164 [ 332.333197][T13619] rock: directory entry would overflow storage [ 332.339442][T13619] rock: sig=0x4f50, size=4, remaining=3 [ 332.345016][T13619] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 332.407200][T13625] 9pnet_fd: Insufficient options for proto=fd [ 332.525530][T13633] 9pnet_fd: Insufficient options for proto=fd [ 332.533269][T13634] pim6reg1: entered promiscuous mode [ 332.538727][T13634] pim6reg1: entered allmulticast mode [ 332.595414][T13636] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3119'. [ 332.682902][T13643] 9pnet: Could not find request transport: f [ 332.696403][T13643] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 333.111970][T13668] pim6reg1: entered promiscuous mode [ 333.117522][T13668] pim6reg1: entered allmulticast mode [ 333.131260][T13667] loop9: detected capacity change from 0 to 1024 [ 333.139271][T13667] EXT4-fs: Ignoring removed orlov option [ 333.156835][T13672] 9pnet_fd: Insufficient options for proto=fd [ 333.157156][T13670] pim6reg1: entered promiscuous mode [ 333.163061][T13667] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 333.168276][T13670] pim6reg1: entered allmulticast mode [ 333.220356][T13667] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.3132: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 333.348277][T13686] loop2: detected capacity change from 0 to 1024 [ 333.388575][ T36] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 333.402452][ T36] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.567038][T13708] pim6reg1: entered promiscuous mode [ 333.572390][T13708] pim6reg1: entered allmulticast mode [ 333.679126][T13713] pim6reg1: entered promiscuous mode [ 333.684591][T13713] pim6reg1: entered allmulticast mode [ 333.996956][T13730] 9pnet: Could not find request transport: f [ 334.009683][T13730] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 334.052078][T13735] netlink: 4300 bytes leftover after parsing attributes in process `syz.2.3157'. [ 334.066375][T13735] loop2: detected capacity change from 0 to 1024 [ 334.073303][T13735] ext4: Unknown parameter 'func' [ 334.210236][T13748] loop8: detected capacity change from 0 to 164 [ 334.220960][T13748] rock: directory entry would overflow storage [ 334.227268][T13748] rock: sig=0x4f50, size=4, remaining=3 [ 334.232843][T13748] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 334.864332][T13766] netlink: 4300 bytes leftover after parsing attributes in process `syz.8.3170'. [ 334.883069][T13766] loop8: detected capacity change from 0 to 1024 [ 334.892200][T13768] loop2: detected capacity change from 0 to 128 [ 334.911044][T13767] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 334.919029][T13767] FAT-fs (loop2): Filesystem has been set read-only [ 334.928240][T13766] ext4: Unknown parameter 'func' [ 334.943618][T13767] syz.2.3171: attempt to access beyond end of device [ 334.943618][T13767] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 334.958119][T13767] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 334.966014][T13767] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 335.145457][T13786] loop9: detected capacity change from 0 to 1024 [ 335.225836][T13786] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.258279][T13786] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3178: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 335.300292][T13786] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3178: couldn't read orphan inode 11 (err -117) [ 335.322894][T13786] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3178: Invalid block bitmap block 0 in block_group 0 [ 335.340563][T13786] __quota_error: 30 callbacks suppressed [ 335.340577][T13786] Quota error (device loop9): write_blk: dquota write failed [ 335.353878][T13786] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 335.364334][T13786] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3178: Failed to acquire dquot type 0 [ 335.730946][T13814] loop2: detected capacity change from 0 to 128 [ 335.770205][T13813] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 335.778213][T13813] FAT-fs (loop2): Filesystem has been set read-only [ 335.821630][T13813] syz.2.3189: attempt to access beyond end of device [ 335.821630][T13813] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 335.841796][T13816] pim6reg1: entered promiscuous mode [ 335.847143][T13816] pim6reg1: entered allmulticast mode [ 335.858603][T13813] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 335.866476][T13813] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 335.966952][T13822] pim6reg1: entered promiscuous mode [ 335.972310][T13822] pim6reg1: entered allmulticast mode [ 336.078200][T13831] loop8: detected capacity change from 0 to 164 [ 336.087285][T13831] rock: directory entry would overflow storage [ 336.093480][T13831] rock: sig=0x4f50, size=4, remaining=3 [ 336.099116][T13831] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 336.174127][T13841] loop2: detected capacity change from 0 to 128 [ 336.191622][T13839] loop8: detected capacity change from 0 to 512 [ 336.199318][T13839] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.208390][T13839] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 336.221781][T13840] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 336.229734][T13840] FAT-fs (loop2): Filesystem has been set read-only [ 336.239838][T13839] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 336.243817][T13840] syz.2.3202: attempt to access beyond end of device [ 336.243817][T13840] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 336.249285][T13839] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 336.270546][T13839] System zones: 0-2, 18-18, 34-34 [ 336.276822][T13839] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad i_size value: 360287970189639680 [ 336.281963][T13844] loop5: detected capacity change from 0 to 1024 [ 336.297283][T13840] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 336.305240][T13840] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 336.317514][T13844] EXT4-fs: Ignoring removed orlov option [ 336.317992][T13839] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 336.324152][T13844] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 336.398733][T13844] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.3203: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 336.425770][T13850] pim6reg1: entered promiscuous mode [ 336.431118][T13850] pim6reg1: entered allmulticast mode [ 336.479261][T13853] 9pnet: Could not find request transport: f [ 336.486877][T13853] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 336.519405][T13859] 9pnet_fd: Insufficient options for proto=fd [ 336.593777][T13863] pim6reg1: entered promiscuous mode [ 336.599162][T13863] pim6reg1: entered allmulticast mode [ 336.659848][T13870] loop8: detected capacity change from 0 to 1024 [ 336.678286][ T3469] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 336.689221][ T3469] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.782502][T13878] loop5: detected capacity change from 0 to 128 [ 336.795831][T13877] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 336.803783][T13877] FAT-fs (loop5): Filesystem has been set read-only [ 336.813419][T13877] syz.5.3215: attempt to access beyond end of device [ 336.813419][T13877] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 336.833717][T13877] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 336.841585][T13877] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 336.892854][T13880] loop2: detected capacity change from 0 to 1024 [ 336.902838][T13882] loop3: detected capacity change from 0 to 1024 [ 336.911136][T13885] 9pnet_fd: Insufficient options for proto=fd [ 336.911900][T13880] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 336.936878][T13882] EXT4-fs: Ignoring removed orlov option [ 336.953439][T13882] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 336.989337][T13880] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.3216: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 336.992307][T13882] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3217: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 337.035377][T13880] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3216: couldn't read orphan inode 11 (err -117) [ 337.051155][T13880] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3216: Invalid block bitmap block 0 in block_group 0 [ 337.065122][T13880] Quota error (device loop2): write_blk: dquota write failed [ 337.072543][T13880] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 337.082576][T13880] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3216: Failed to acquire dquot type 0 [ 337.144885][T13892] 9pnet: Could not find request transport: f [ 337.153022][T13892] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 337.275831][T13904] pim6reg1: entered promiscuous mode [ 337.281171][T13904] pim6reg1: entered allmulticast mode [ 337.297853][T13910] loop3: detected capacity change from 0 to 164 [ 337.311309][T13908] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3225'. [ 337.343825][T13910] rock: directory entry would overflow storage [ 337.350025][T13910] rock: sig=0x4f50, size=4, remaining=3 [ 337.355670][T13910] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 337.364926][T13912] 9pnet_fd: Insufficient options for proto=fd [ 337.422178][T13916] 9pnet_fd: Insufficient options for proto=fd [ 337.648279][T13936] 9pnet: Could not find request transport: f [ 337.662622][T13936] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 337.702511][T13944] loop9: detected capacity change from 0 to 164 [ 337.747530][T13944] rock: directory entry would overflow storage [ 337.753765][T13944] rock: sig=0x4f50, size=4, remaining=3 [ 337.759358][T13944] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 337.823736][T13959] 9pnet_fd: Insufficient options for proto=fd [ 337.857897][T13961] 9pnet_fd: Insufficient options for proto=fd [ 338.054117][T13975] 9pnet_fd: Insufficient options for proto=fd [ 338.149194][T13980] 9pnet: Could not find request transport: f [ 338.156392][T13980] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 338.288977][T13987] loop2: detected capacity change from 0 to 164 [ 338.458556][T13987] rock: directory entry would overflow storage [ 338.464831][T13987] rock: sig=0x4f50, size=4, remaining=3 [ 338.470470][T13987] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 338.671535][T14006] loop3: detected capacity change from 0 to 1024 [ 338.685821][T14006] EXT4-fs: Ignoring removed orlov option [ 338.698778][T14006] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 338.727789][T14006] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3263: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 338.752565][T14014] loop5: detected capacity change from 0 to 1024 [ 338.760249][T14014] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.783865][T14014] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.3266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 338.818918][T14014] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3266: couldn't read orphan inode 11 (err -117) [ 338.880397][T14014] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3266: Invalid block bitmap block 0 in block_group 0 [ 338.912404][T14020] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3267'. [ 338.931215][T14014] Quota error (device loop5): write_blk: dquota write failed [ 338.938913][T14014] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 338.968449][T14014] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3266: Failed to acquire dquot type 0 [ 338.992166][T14028] loop8: detected capacity change from 0 to 1024 [ 339.030115][T14028] ext4: Unknown parameter 'func' [ 339.199959][T14045] loop8: detected capacity change from 0 to 128 [ 339.214273][T14044] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 339.222162][T14044] FAT-fs (loop8): Filesystem has been set read-only [ 339.236874][T14044] syz.8.3279: attempt to access beyond end of device [ 339.236874][T14044] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 339.253489][T14044] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 339.261368][T14044] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 339.378368][T14055] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3284'. [ 339.468492][T14063] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3286'. [ 339.506330][T14063] loop8: detected capacity change from 0 to 1024 [ 339.513165][T14063] ext4: Unknown parameter 'func' [ 339.537412][T14071] 9pnet: Could not find request transport: f [ 339.560034][T14071] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 339.691199][T14083] loop8: detected capacity change from 0 to 128 [ 339.702057][T14080] pim6reg1: entered promiscuous mode [ 339.707449][T14080] pim6reg1: entered allmulticast mode [ 339.724635][T14079] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 339.732496][T14079] FAT-fs (loop8): Filesystem has been set read-only [ 339.739538][T14079] syz.8.3294: attempt to access beyond end of device [ 339.739538][T14079] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 339.753368][T14079] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 339.761292][T14079] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 339.879220][T14095] loop3: detected capacity change from 0 to 164 [ 339.901151][T14095] rock: directory entry would overflow storage [ 339.907409][T14095] rock: sig=0x4f50, size=4, remaining=3 [ 339.913111][T14095] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 340.000834][T14101] loop8: detected capacity change from 0 to 1024 [ 340.033940][ T3395] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 340.057363][ T3395] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.272445][T14118] loop2: detected capacity change from 0 to 128 [ 340.316401][T14117] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 340.324294][T14117] FAT-fs (loop2): Filesystem has been set read-only [ 340.362508][T14117] syz.2.3307: attempt to access beyond end of device [ 340.362508][T14117] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 340.416049][T14117] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 340.423979][T14117] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 340.652073][T14130] pim6reg1: entered promiscuous mode [ 340.657453][T14130] pim6reg1: entered allmulticast mode [ 340.700364][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.777226][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.851536][T14114] chnl_net:caif_netlink_parms(): no params data found [ 340.867954][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.900815][T14151] loop3: detected capacity change from 0 to 128 [ 340.931608][T14149] pim6reg1: entered promiscuous mode [ 340.937094][T14149] pim6reg1: entered allmulticast mode [ 340.948343][T14150] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 340.956397][T14150] FAT-fs (loop3): Filesystem has been set read-only [ 340.963006][T14150] syz.3.3318: attempt to access beyond end of device [ 340.963006][T14150] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 340.977698][T14150] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 340.985595][T14150] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 340.997796][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.042957][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.050170][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.057397][T14114] bridge_slave_0: entered allmulticast mode [ 341.064027][T14114] bridge_slave_0: entered promiscuous mode [ 341.071206][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.078383][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.086136][T14114] bridge_slave_1: entered allmulticast mode [ 341.092661][T14114] bridge_slave_1: entered promiscuous mode [ 341.122024][T14114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.150714][T14114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.207493][T14168] loop9: detected capacity change from 0 to 1024 [ 341.214557][T14168] ext4: Unknown parameter 'func' [ 341.221055][T14114] team0: Port device team_slave_0 added [ 341.238597][T14170] pim6reg1: entered promiscuous mode [ 341.244017][T14170] pim6reg1: entered allmulticast mode [ 341.261554][T14114] team0: Port device team_slave_1 added [ 341.279571][T14114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.286674][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.312752][T14114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.327833][T14114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.334830][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.360893][T14114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.429686][ T57] bridge_slave_1: left allmulticast mode [ 341.435411][ T57] bridge_slave_1: left promiscuous mode [ 341.441285][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.519386][T14182] loop8: detected capacity change from 0 to 128 [ 341.561448][ T57] bridge_slave_0: left allmulticast mode [ 341.567203][ T57] bridge_slave_0: left promiscuous mode [ 341.572934][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.589019][T14181] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 341.596973][T14181] FAT-fs (loop8): Filesystem has been set read-only [ 341.624803][T14188] 9pnet_fd: Insufficient options for proto=fd [ 341.637273][T14181] syz.8.3329: attempt to access beyond end of device [ 341.637273][T14181] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 341.661639][T14181] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 341.669554][T14181] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 341.753444][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.765995][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.784483][ T57] bond0 (unregistering): Released all slaves [ 341.816565][T14114] hsr_slave_0: entered promiscuous mode [ 341.826126][T14114] hsr_slave_1: entered promiscuous mode [ 341.846088][T14114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.855968][T14114] Cannot create hsr debugfs directory [ 341.881724][T14205] pim6reg1: entered promiscuous mode [ 341.887288][T14205] pim6reg1: entered allmulticast mode [ 341.894744][ T57] tipc: Disabling bearer [ 341.899982][ T57] tipc: Left network mode [ 342.064250][ T57] hsr_slave_0: left promiscuous mode [ 342.071972][ T57] hsr_slave_1: left promiscuous mode [ 342.086911][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.099545][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.107071][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.126186][ T57] veth1_macvtap: left promiscuous mode [ 342.133055][ T57] veth0_macvtap: left promiscuous mode [ 342.153738][ T57] veth1_vlan: left promiscuous mode [ 342.159003][ T57] veth0_vlan: left promiscuous mode [ 342.264669][T14250] loop3: detected capacity change from 0 to 1024 [ 342.273480][T14250] EXT4-fs: Ignoring removed orlov option [ 342.301786][T14250] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 342.314130][ T57] team0 (unregistering): Port device team_slave_1 removed [ 342.328459][T14252] 9pnet_fd: Insufficient options for proto=fd [ 342.338890][T14250] EXT4-fs mount: 52 callbacks suppressed [ 342.338905][T14250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.369071][T14250] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3343: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 342.396987][T14223] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3336'. [ 342.408473][ T6205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.487161][T14258] pim6reg1: entered promiscuous mode [ 342.492502][T14258] pim6reg1: entered allmulticast mode [ 342.618463][T14276] loop8: detected capacity change from 0 to 164 [ 342.719438][T14289] loop2: detected capacity change from 0 to 1024 [ 342.762673][T14289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.833494][T14114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.837249][T14289] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3350: Allocating blocks 385-513 which overlap fs metadata [ 342.857374][T14114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.879254][T14306] loop3: detected capacity change from 0 to 1024 [ 342.884675][T14114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.894590][T14306] EXT4-fs: Ignoring removed orlov option [ 342.910110][T14114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.917541][T14306] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 342.956241][T14306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.979403][T14114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.984833][T14289] EXT4-fs (loop2): pa ffff888106db4620: logic 16, phys. 129, len 24 [ 342.994034][T14289] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 342.995005][T14114] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.014885][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.019380][T14306] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3354: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 343.021979][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.059828][T14114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.070292][T14114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.085184][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.092262][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.178974][ T6205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.192152][T14337] 9pnet_fd: Insufficient options for proto=fd [ 343.204821][ T7870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.219580][T14114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.266975][T14343] loop3: detected capacity change from 0 to 512 [ 343.299462][T14343] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.308625][T14343] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 343.347853][T14352] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 343.386394][T14343] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 343.417483][T14343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 343.430159][T14363] loop8: detected capacity change from 0 to 1024 [ 343.465027][T14363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.483965][T14343] System zones: 0-2, 18-18, 34-34 [ 343.489473][T14343] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad i_size value: 360287970189639680 [ 343.502614][ T3371] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 343.513420][T14343] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 343.538309][ T3371] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.538812][T14343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.616042][T14343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.640984][T14114] veth0_vlan: entered promiscuous mode [ 343.657210][T14114] veth1_vlan: entered promiscuous mode [ 343.691039][T14114] veth0_macvtap: entered promiscuous mode [ 343.703124][T14114] veth1_macvtap: entered promiscuous mode [ 343.720969][T14114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.732526][T14114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.743298][T14114] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.752081][T14114] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.760844][T14114] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.769626][T14114] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.773531][T14392] loop9: detected capacity change from 0 to 1024 [ 343.806616][T14394] loop3: detected capacity change from 0 to 1024 [ 343.813406][T14394] EXT4-fs: Ignoring removed orlov option [ 343.820470][T14392] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 343.832996][ T29] audit: type=1400 audit(1748661978.578:2450): avc: denied { mount } for pid=14114 comm="syz-executor" name="/" dev="gadgetfs" ino=4174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 343.846329][T14394] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 343.866360][T14392] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3367: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 343.890278][T14392] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3367: couldn't read orphan inode 11 (err -117) [ 343.904723][T14398] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3303'. [ 343.918446][T14398] loop5: detected capacity change from 0 to 1024 [ 343.929506][T14398] ext4: Unknown parameter 'func' [ 343.938209][T14392] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.953252][T14394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.954792][T14392] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3367: Invalid block bitmap block 0 in block_group 0 [ 343.969327][ T5447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.984326][T14392] Quota error (device loop9): write_blk: dquota write failed [ 343.995588][T14392] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 344.019482][T14392] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3367: Failed to acquire dquot type 0 [ 344.034236][T14394] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3368: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 344.077428][T14405] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3371'. [ 344.099568][T14407] 9pnet: Could not find request transport: f [ 344.107347][T14407] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 344.145517][T14412] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 344.152298][ T5656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.172761][ T6205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.200895][T14417] pim6reg1: entered promiscuous mode [ 344.206312][T14417] pim6reg1: entered allmulticast mode [ 344.241420][T14420] loop3: detected capacity change from 0 to 512 [ 344.265822][T14420] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.275082][T14420] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 344.328746][T14428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3380'. [ 344.337979][T14420] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 344.349046][T14420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 344.349115][T14428] loop2: detected capacity change from 0 to 1024 [ 344.357275][T14420] System zones: 0-2, 18-18, 34-34 [ 344.367066][T14428] ext4: Unknown parameter 'func' [ 344.376640][T14420] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad i_size value: 360287970189639680 [ 344.399104][T14420] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 344.426914][T14420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.447640][T14420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.472370][T14437] loop9: detected capacity change from 0 to 1024 [ 344.486815][T14437] EXT4-fs: Ignoring removed orlov option [ 344.510019][T14437] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 344.540855][T14435] pim6reg1: entered promiscuous mode [ 344.546273][T14435] pim6reg1: entered allmulticast mode [ 344.552941][T14437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.571740][T14439] 9pnet: Could not find request transport: f [ 344.574467][T14437] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.3383: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 344.598164][T14444] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3385'. [ 344.611159][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3384'. [ 344.643852][ T5656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.653858][T14449] pim6reg1: entered promiscuous mode [ 344.659175][T14449] pim6reg1: entered allmulticast mode [ 344.765209][T14460] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3392'. [ 344.792628][T14460] loop5: detected capacity change from 0 to 1024 [ 344.807233][T14460] ext4: Unknown parameter 'func' [ 344.891727][T14472] loop8: detected capacity change from 0 to 512 [ 344.906922][T14472] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.916081][T14472] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 344.947432][T14472] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 344.957275][T14472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 344.965554][T14475] loop5: detected capacity change from 0 to 512 [ 344.972195][T14472] System zones: 0-2, 18-18, 34-34 [ 344.978966][T14475] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.988109][T14475] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 344.996694][T14472] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad i_size value: 360287970189639680 [ 345.009620][T14472] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 345.010056][T14475] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 345.028121][T14472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.042879][T14472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.052462][T14475] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 345.060749][T14475] System zones: 0-2, 18-18, 34-34 [ 345.069802][T14479] loop3: detected capacity change from 0 to 1024 [ 345.076501][T14475] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad i_size value: 360287970189639680 [ 345.089636][T14475] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 345.094503][T14479] EXT4-fs: Ignoring removed orlov option [ 345.110121][T14475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.122827][T14479] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 345.139858][T14475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.162362][T14479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.196185][T14479] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3399: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 345.222599][T14485] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 345.226866][T14481] 9pnet: Could not find request transport: f [ 345.283418][T14490] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3402'. [ 345.300464][ T6205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.340211][T14494] loop5: detected capacity change from 0 to 1024 [ 345.363687][T14494] ext4: Unknown parameter 'func' [ 345.387120][T14500] pim6reg1: entered promiscuous mode [ 345.392465][T14500] pim6reg1: entered allmulticast mode [ 345.472516][T14504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.480760][T14504] batadv_slave_0: entered promiscuous mode [ 345.640726][T14511] loop9: detected capacity change from 0 to 1024 [ 345.652258][T14506] loop3: detected capacity change from 0 to 1024 [ 345.666902][T14510] 9pnet_fd: Insufficient options for proto=fd [ 345.676233][T14506] EXT4-fs: Ignoring removed orlov option [ 345.697278][T14511] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.715918][T14506] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 345.749954][T14511] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.3412: Allocating blocks 385-513 which overlap fs metadata [ 345.769247][T14506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.785905][ T29] audit: type=1326 audit(1748661980.528:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.9.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648ba5e969 code=0x7ffc0000 [ 345.799991][T14506] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3410: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 345.830738][ T9] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 345.845269][ T9] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.854993][ T29] audit: type=1326 audit(1748661980.558:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.9.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f648ba5e969 code=0x7ffc0000 [ 345.878529][ T29] audit: type=1326 audit(1748661980.558:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.9.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648ba5e969 code=0x7ffc0000 [ 345.902424][ T29] audit: type=1326 audit(1748661980.558:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.9.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f648ba5e969 code=0x7ffc0000 [ 345.926055][ T29] audit: type=1326 audit(1748661980.558:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.9.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648ba5e969 code=0x7ffc0000 [ 345.950075][ T29] audit: type=1326 audit(1748661980.558:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.9.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f648ba5e969 code=0x7ffc0000 [ 345.992114][T14524] 9pnet: Could not find request transport: f [ 346.061648][T14529] loop8: detected capacity change from 0 to 1024 [ 346.089353][T14529] EXT4-fs: Ignoring removed orlov option [ 346.104573][T14529] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 346.140383][T14529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.142993][ T6205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.164338][ T29] audit: type=1326 audit(1748661980.908:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.9.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648ba5e969 code=0x7ffc0000 [ 346.166544][T14529] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.3414: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 346.249894][T14511] EXT4-fs (loop9): pa ffff888106db4620: logic 16, phys. 129, len 24 [ 346.258150][T14511] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 346.281977][T14542] pim6reg1: entered promiscuous mode [ 346.287371][T14542] pim6reg1: entered allmulticast mode [ 346.326616][ T5447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.422799][T14550] loop2: detected capacity change from 0 to 1024 [ 346.430586][ T5656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.434163][T14550] ext4: Unknown parameter 'func' [ 346.647665][T14570] 9pnet_fd: Insufficient options for proto=fd [ 346.787620][T14576] loop2: detected capacity change from 0 to 1024 [ 346.811625][T14576] EXT4-fs: Ignoring removed orlov option [ 346.836208][T14576] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 346.845002][T14579] pim6reg1: entered promiscuous mode [ 346.851259][T14579] pim6reg1: entered allmulticast mode [ 346.877279][T14576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.893941][T14576] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.3434: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 346.937339][ T7870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.971659][T14584] loop5: detected capacity change from 0 to 1024 [ 347.016205][T14584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.031669][T14584] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3438: Allocating blocks 385-513 which overlap fs metadata [ 347.076252][ T3395] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 347.080656][T14593] loop9: detected capacity change from 0 to 512 [ 347.101923][ T3395] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.126003][T14593] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.135088][T14593] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 347.182700][T14596] loop8: detected capacity change from 0 to 1024 [ 347.211375][T14596] ext4: Unknown parameter 'func' [ 347.243673][T14593] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 347.259236][T14593] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 347.267441][T14593] System zones: 0-2, 18-18, 34-34 [ 347.277583][T14593] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad i_size value: 360287970189639680 [ 347.292697][T14593] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 347.322465][T14593] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.342469][T14593] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.357726][T14584] EXT4-fs (loop5): pa ffff888106db47e0: logic 16, phys. 129, len 24 [ 347.365923][T14584] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 347.391589][T14613] loop2: detected capacity change from 0 to 1024 [ 347.414933][T14613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.467117][T14114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.504896][T14619] loop9: detected capacity change from 0 to 1024 [ 347.519157][T14619] EXT4-fs: Ignoring removed orlov option [ 347.545190][T14619] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 347.588551][T14619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.629522][T14619] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.3447: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 347.670319][T14626] 9pnet_fd: Insufficient options for proto=fd [ 347.718196][ T5656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.049765][ T7870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.063484][T14638] 9pnet: Could not find request transport: f [ 348.076192][T14638] __nla_validate_parse: 6 callbacks suppressed [ 348.076207][T14638] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 348.107589][T14642] pim6reg1: entered promiscuous mode [ 348.112908][T14642] pim6reg1: entered allmulticast mode [ 348.152956][T14645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3454'. [ 348.176835][T14649] loop8: detected capacity change from 0 to 512 [ 348.216595][T14649] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.225768][T14649] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 348.257207][T14659] loop3: detected capacity change from 0 to 1024 [ 348.266102][T14659] EXT4-fs: Ignoring removed orlov option [ 348.286486][T14663] loop5: detected capacity change from 0 to 1024 [ 348.293348][T14659] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 348.307592][T14649] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 348.324622][T14649] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 348.335738][T14649] System zones: 0-2, 18-18, 34-34 [ 348.342195][T14659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.355672][T14649] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad i_size value: 360287970189639680 [ 348.372852][T14663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.388540][T14649] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 348.400688][T14659] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3462: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 348.421832][T14649] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.436390][T14649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.508206][ T6205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.632753][T14673] loop8: detected capacity change from 0 to 1024 [ 348.683885][T14676] loop3: detected capacity change from 0 to 1024 [ 348.691173][T14676] EXT4-fs: Ignoring removed orlov option [ 348.726904][T14676] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 348.764897][T14673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.800993][T14673] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.3466: Allocating blocks 385-513 which overlap fs metadata [ 348.815738][T14683] 9pnet_fd: Insufficient options for proto=fd [ 348.862010][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 348.862022][ T29] audit: type=1326 audit(1748661983.598:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 348.907793][ T3395] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 349.054931][ T3395] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 349.136652][ T29] audit: type=1326 audit(1748661983.638:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.160219][ T29] audit: type=1326 audit(1748661983.638:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.183817][ T29] audit: type=1326 audit(1748661983.638:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.207314][ T29] audit: type=1326 audit(1748661983.638:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.230844][ T29] audit: type=1326 audit(1748661983.638:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.254430][ T29] audit: type=1326 audit(1748661983.638:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.278025][ T29] audit: type=1326 audit(1748661983.638:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.301514][ T29] audit: type=1326 audit(1748661983.638:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.537183][ T29] audit: type=1326 audit(1748661984.138:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ef9e969 code=0x7ffc0000 [ 349.571209][T14676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.587011][T14684] EXT4-fs (loop8): pa ffff888106e51af0: logic 16, phys. 129, len 24 [ 349.595184][T14684] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 349.606945][T14114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.626003][T14676] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3465: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 349.733184][T14695] 9pnet_fd: Insufficient options for proto=fd [ 349.758786][ T5447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.769723][ T6205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.803117][T14702] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 349.814603][T14699] pim6reg1: entered promiscuous mode [ 349.819913][T14699] pim6reg1: entered allmulticast mode [ 349.834639][T14701] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3470'. [ 349.851601][T14701] loop3: detected capacity change from 0 to 1024 [ 349.870258][T14701] ext4: Unknown parameter 'func' [ 349.927086][T14711] loop9: detected capacity change from 0 to 8 [ 349.967992][T14709] loop8: detected capacity change from 0 to 1024 [ 350.000182][T14714] 9pnet_fd: Insufficient options for proto=fd [ 350.013133][T14709] EXT4-fs: Ignoring removed orlov option [ 350.036283][T14709] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 350.075436][T14720] pim6reg1: entered promiscuous mode [ 350.080838][T14720] pim6reg1: entered allmulticast mode [ 350.098271][T14709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.168178][T14709] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.3476: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 350.202177][ T5447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.232222][T14729] loop8: detected capacity change from 0 to 1024 [ 350.243066][T14729] EXT4-fs: Ignoring removed orlov option [ 350.250173][T14729] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 350.273219][T14731] loop9: detected capacity change from 0 to 1024 [ 350.286057][T14729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.287880][T14733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3493'. [ 350.319439][T14729] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.3482: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 350.342568][T14731] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.433741][T14731] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3492: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 350.453934][T14737] loop2: detected capacity change from 0 to 512 [ 350.459412][T14731] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3492: couldn't read orphan inode 11 (err -117) [ 350.472528][T14740] loop3: detected capacity change from 0 to 1024 [ 350.474597][ T5447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.488861][T14731] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.490052][T14737] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 350.510530][T14737] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 350.528794][T14740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.541708][T14737] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 350.542019][T14731] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3492: Invalid block bitmap block 0 in block_group 0 [ 350.566029][T14731] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3492: Failed to acquire dquot type 0 [ 350.592486][T14737] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 350.625067][T14737] System zones: 0-2, 18-18, 34-34 [ 350.630706][T14737] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad i_size value: 360287970189639680 [ 350.668010][T14737] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 350.680541][ T5656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.692059][T14737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.732553][T14737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.746031][T14751] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3488'. [ 350.761173][T14751] loop8: detected capacity change from 0 to 1024 [ 350.785498][T14751] ext4: Unknown parameter 'func' [ 350.790802][T14753] 9pnet: Could not find request transport: f [ 350.813778][T14753] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 350.919801][T14759] loop9: detected capacity change from 0 to 8 [ 350.935943][ T6205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.975830][T14765] loop3: detected capacity change from 0 to 1024 [ 350.983067][T14762] 9pnet: Could not find request transport: f [ 350.994098][T14767] loop5: detected capacity change from 0 to 1024 [ 351.002645][T14767] EXT4-fs: Ignoring removed orlov option [ 351.010978][T14767] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 351.011653][T14762] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 351.039962][T14767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.070829][T14767] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.3494: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 351.082953][T14765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.122037][T14114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.124785][T14765] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3491: Allocating blocks 385-513 which overlap fs metadata [ 351.150511][T14780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3497'. [ 351.157224][ T3371] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 351.167992][ T3371] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.221958][T14784] loop2: detected capacity change from 0 to 1024 [ 351.244391][T14784] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.266309][T14784] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.3499: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 351.290043][T14784] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3499: couldn't read orphan inode 11 (err -117) [ 351.302921][T14784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.318671][T14784] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3499: Invalid block bitmap block 0 in block_group 0 [ 351.332851][T14784] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3499: Failed to acquire dquot type 0 [ 351.398538][T14794] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3504'. [ 351.414292][T14794] loop2: detected capacity change from 0 to 1024 [ 351.415965][T14765] EXT4-fs (loop3): pa ffff888106e51930: logic 16, phys. 129, len 24 [ 351.421541][T14794] ext4: Unknown parameter 'func' [ 351.428752][T14765] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 351.465229][T14797] loop2: detected capacity change from 0 to 1024 [ 351.505747][T14799] loop5: detected capacity change from 0 to 128 [ 351.523550][T14798] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 351.531519][T14798] FAT-fs (loop5): Filesystem has been set read-only [ 351.538617][T14798] syz.5.3506: attempt to access beyond end of device [ 351.538617][T14798] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 351.552766][T14798] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 351.560665][T14798] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 351.589413][T14799] syz.5.3506: attempt to access beyond end of device [ 351.589413][T14799] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 351.649500][T14799] syz.5.3506: attempt to access beyond end of device [ 351.649500][T14799] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 351.682464][T14799] syz.5.3506: attempt to access beyond end of device [ 351.682464][T14799] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 351.697783][T14799] syz.5.3506: attempt to access beyond end of device [ 351.697783][T14799] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 351.792018][T14811] 9pnet: Could not find request transport: f [ 351.802644][T14817] pim6reg1: entered promiscuous mode [ 351.802729][T14811] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 351.808047][T14817] pim6reg1: entered allmulticast mode [ 351.834587][T14819] loop2: detected capacity change from 0 to 1024 [ 351.841614][T14819] EXT4-fs: Ignoring removed orlov option [ 351.860259][T14819] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 351.877828][T14821] loop5: detected capacity change from 0 to 1024 [ 351.888380][T14821] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.922414][T14819] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.3514: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 351.946392][T14821] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.3515: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 351.973768][T14825] loop3: detected capacity change from 0 to 1024 [ 351.980518][T14821] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3515: couldn't read orphan inode 11 (err -117) [ 352.000364][T14825] ext4: Unknown parameter 'func' [ 352.006730][T14830] 9pnet_fd: Insufficient options for proto=fd [ 352.020903][T14821] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3515: Invalid block bitmap block 0 in block_group 0 [ 352.085689][T14821] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3515: Failed to acquire dquot type 0 [ 352.129114][T14836] loop2: detected capacity change from 0 to 1024 [ 352.167835][T14836] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3518: Allocating blocks 385-513 which overlap fs metadata [ 352.202203][T14842] loop5: detected capacity change from 0 to 1024 [ 352.223917][ T3469] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 352.249939][ T3469] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 352.265804][T14851] loop9: detected capacity change from 0 to 128 [ 352.325929][T14850] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 352.333807][T14850] FAT-fs (loop9): Filesystem has been set read-only [ 352.355590][T14850] syz.9.3523: attempt to access beyond end of device [ 352.355590][T14850] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 352.369656][T14850] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 352.377577][T14850] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 352.388909][T14851] syz.9.3523: attempt to access beyond end of device [ 352.388909][T14851] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.423741][T14851] syz.9.3523: attempt to access beyond end of device [ 352.423741][T14851] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.442824][T14851] syz.9.3523: attempt to access beyond end of device [ 352.442824][T14851] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.456859][T14851] syz.9.3523: attempt to access beyond end of device [ 352.456859][T14851] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.504281][T14862] loop8: detected capacity change from 0 to 1024 [ 352.510956][T14862] ext4: Unknown parameter 'func' [ 352.535199][T14865] pim6reg1: entered promiscuous mode [ 352.540546][T14865] pim6reg1: entered allmulticast mode [ 352.551476][T14836] EXT4-fs (loop2): pa ffff888106e51a80: logic 16, phys. 129, len 24 [ 352.559614][T14836] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 352.646801][T14869] 9pnet_fd: Insufficient options for proto=fd [ 352.725841][T14872] 9pnet_fd: Insufficient options for proto=fd [ 353.015068][T14873] chnl_net:caif_netlink_parms(): no params data found [ 353.058004][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.065162][T14873] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.072618][T14873] bridge_slave_0: entered allmulticast mode [ 353.080557][T14873] bridge_slave_0: entered promiscuous mode [ 353.089152][T14873] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.096272][T14873] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.103523][T14873] bridge_slave_1: entered allmulticast mode [ 353.110120][T14873] bridge_slave_1: entered promiscuous mode [ 353.126317][T14873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.136828][T14873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.156473][T14873] team0: Port device team_slave_0 added [ 353.163116][T14873] team0: Port device team_slave_1 added [ 353.178441][T14873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.185434][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.211447][T14873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.223449][T14873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.230505][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.256529][T14873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.269306][ T1012] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.295337][T14873] hsr_slave_0: entered promiscuous mode [ 353.301348][T14873] hsr_slave_1: entered promiscuous mode [ 353.307390][T14873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.314956][T14873] Cannot create hsr debugfs directory [ 353.340253][ T1012] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.385458][ T1012] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.435000][ T1012] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.503727][ T1012] bridge_slave_1: left allmulticast mode [ 353.509441][ T1012] bridge_slave_1: left promiscuous mode [ 353.515083][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.522706][ T1012] bridge_slave_0: left allmulticast mode [ 353.528565][ T1012] bridge_slave_0: left promiscuous mode [ 353.534281][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.572760][ T1012] dvmrp1 (unregistering): left allmulticast mode [ 353.605879][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.615867][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.625655][ T1012] bond0 (unregistering): Released all slaves [ 353.675899][ T1012] tipc: Disabling bearer [ 353.681171][ T1012] tipc: Left network mode [ 353.708258][ T1012] hsr_slave_0: left promiscuous mode [ 353.716230][ T1012] hsr_slave_1: left promiscuous mode [ 353.721960][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.729739][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.737419][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.750845][ T1012] veth1_macvtap: left promiscuous mode [ 353.763406][ T1012] veth0_macvtap: left promiscuous mode [ 353.769901][ T1012] veth1_vlan: left promiscuous mode [ 353.776135][ T1012] veth0_vlan: left promiscuous mode [ 353.846422][T14924] __nla_validate_parse: 4 callbacks suppressed [ 353.846437][T14924] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3541'. [ 353.869266][T14924] loop3: detected capacity change from 0 to 1024 [ 353.876660][T14924] ext4: Unknown parameter 'func' [ 353.909010][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 353.949938][T14921] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3540'. [ 353.969000][T14931] pim6reg1: entered promiscuous mode [ 353.974418][T14931] pim6reg1: entered allmulticast mode [ 354.069897][T14947] loop3: detected capacity change from 0 to 128 [ 354.100931][T14946] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 354.108941][T14946] FAT-fs (loop3): Filesystem has been set read-only [ 354.113550][T14873] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 354.133759][T14946] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 354.141782][T14946] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 354.175400][T14873] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 354.224035][T14873] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 354.252734][T14873] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 354.455112][T14873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.463966][T14964] 9pnet_fd: Insufficient options for proto=fd [ 354.479808][T14873] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.496141][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.503316][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.536159][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.543263][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.572309][T14970] 9pnet: Could not find request transport: f [ 354.581938][T14970] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 354.585746][T14873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.601001][T14873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.750738][T14978] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3553'. [ 354.807301][T14873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.829226][T14988] pim6reg1: entered promiscuous mode [ 354.834723][T14988] pim6reg1: entered allmulticast mode [ 354.904211][T14997] loop3: detected capacity change from 0 to 1024 [ 354.944280][T14997] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3558: Allocating blocks 385-513 which overlap fs metadata [ 354.949428][T15004] loop2: detected capacity change from 0 to 1024 [ 354.981540][T15008] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 354.997933][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 354.997946][ T29] audit: type=1326 audit(1748661989.718:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 355.027688][ T29] audit: type=1326 audit(1748661989.718:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 355.051184][ T29] audit: type=1326 audit(1748661989.718:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 355.074745][ T29] audit: type=1326 audit(1748661989.718:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 355.098255][ T29] audit: type=1326 audit(1748661989.718:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 355.117277][ T3395] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 355.121691][ T29] audit: type=1326 audit(1748661989.718:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 355.152560][ T29] audit: type=1326 audit(1748661989.718:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 355.184041][ T3395] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.231659][ T29] audit: type=1326 audit(1748661989.798:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14996 comm="syz.3.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8f59e969 code=0x7ffc0000 [ 355.255316][ T29] audit: type=1326 audit(1748661989.798:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14996 comm="syz.3.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8f59e969 code=0x7ffc0000 [ 355.278866][ T29] audit: type=1326 audit(1748661989.798:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14996 comm="syz.3.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf8f59e969 code=0x7ffc0000 [ 355.377008][T14873] veth0_vlan: entered promiscuous mode [ 355.392182][T15013] EXT4-fs (loop3): pa ffff888106db48c0: logic 16, phys. 129, len 24 [ 355.400460][T15013] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 355.418368][T14873] veth1_vlan: entered promiscuous mode [ 355.445820][T14873] veth0_macvtap: entered promiscuous mode [ 355.459679][T14873] veth1_macvtap: entered promiscuous mode [ 355.489924][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.508854][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.529321][T14873] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.538302][T14873] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.547377][T14873] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.556275][T14873] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.688467][T15031] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 355.697888][T15026] 9pnet: Could not find request transport: f [ 355.733467][T15030] loop8: detected capacity change from 0 to 1024 [ 355.758751][T15030] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.773188][T15030] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.3532: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 355.794927][T15030] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.3532: couldn't read orphan inode 11 (err -117) [ 355.817839][T15030] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3532: Invalid block bitmap block 0 in block_group 0 [ 355.831839][T15033] loop9: detected capacity change from 0 to 1024 [ 355.842322][T15033] EXT4-fs: Ignoring removed orlov option [ 355.843604][T15030] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3532: Failed to acquire dquot type 0 [ 355.864504][T15040] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3568'. [ 355.888182][T15033] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 355.909133][T15040] loop5: detected capacity change from 0 to 1024 [ 355.916454][T15040] ext4: Unknown parameter 'func' [ 355.955211][T15037] loop2: detected capacity change from 0 to 1024 [ 355.969393][T15037] EXT4-fs: Ignoring removed orlov option [ 355.976908][T15037] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 355.992117][T15049] pim6reg1: entered promiscuous mode [ 355.995864][T15033] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.3566: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 355.997592][T15049] pim6reg1: entered allmulticast mode [ 356.027754][T15047] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 356.181377][T15066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.188985][T15066] batadv_slave_0: entered promiscuous mode [ 356.231995][T15068] 9pnet: Could not find request transport: f [ 356.249623][T15068] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 356.299058][T15073] 9pnet_fd: Insufficient options for proto=fd [ 356.314723][T15075] loop3: detected capacity change from 0 to 1024 [ 356.325322][T15075] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 356.360457][T15075] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3580: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 356.381363][T15075] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3580: couldn't read orphan inode 11 (err -117) [ 356.404079][T15075] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3580: Invalid block bitmap block 0 in block_group 0 [ 356.418317][T15075] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3580: Failed to acquire dquot type 0 [ 356.528449][T15081] loop9: detected capacity change from 0 to 1024 [ 356.561227][T15081] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.3581: Allocating blocks 385-513 which overlap fs metadata [ 356.583115][ T3469] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 356.617037][ T3469] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.657185][T15087] pim6reg1: entered promiscuous mode [ 356.662511][T15087] pim6reg1: entered allmulticast mode [ 356.804028][T15099] 9pnet_fd: Insufficient options for proto=fd [ 356.821456][T15081] EXT4-fs (loop9): pa ffff888106db48c0: logic 16, phys. 129, len 24 [ 356.829615][T15081] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 356.839833][T15097] loop2: detected capacity change from 0 to 1024 [ 356.847729][T15097] EXT4-fs: Ignoring removed orlov option [ 356.870956][T15097] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 357.026177][T15112] 9pnet: Could not find request transport: f [ 357.037098][T15112] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 357.047375][T15112] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 357.089826][T15121] pim6reg1: entered promiscuous mode [ 357.095227][T15121] pim6reg1: entered allmulticast mode [ 357.142980][T15125] loop5: detected capacity change from 0 to 1024 [ 357.146843][T15124] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3598'. [ 357.163980][T15124] loop3: detected capacity change from 0 to 1024 [ 357.170678][T15124] ext4: Unknown parameter 'func' [ 357.183492][T15125] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3597: Allocating blocks 385-513 which overlap fs metadata [ 357.212145][T15125] EXT4-fs (loop5): pa ffff888106e51a80: logic 16, phys. 129, len 24 [ 357.220490][T15125] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 357.256190][T15131] 9pnet: Could not find request transport: f [ 357.359420][T15140] loop3: detected capacity change from 0 to 1024 [ 357.438502][T15147] 9pnet: Could not find request transport: f [ 357.680328][T15158] 9pnet_fd: Insufficient options for proto=fd [ 357.712979][T15162] loop5: detected capacity change from 0 to 1024 [ 357.732379][T15162] ext4: Unknown parameter 'func' [ 357.940809][T15169] pim6reg1: entered promiscuous mode [ 357.946188][T15169] pim6reg1: entered allmulticast mode [ 358.059850][T15173] 9pnet: Could not find request transport: f [ 358.501081][T15188] 9pnet_fd: Insufficient options for proto=fd [ 358.576214][T15191] 9pnet: Could not find request transport: f [ 358.759243][T15199] loop3: detected capacity change from 0 to 1024 [ 358.861056][T15204] __nla_validate_parse: 8 callbacks suppressed [ 358.861070][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3623'. [ 358.927431][T15207] pim6reg1: entered promiscuous mode [ 358.932895][T15207] pim6reg1: entered allmulticast mode [ 358.956661][T15204] loop8: detected capacity change from 0 to 1024 [ 358.970589][T15209] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 358.979651][T15204] ext4: Unknown parameter 'func' [ 359.036291][T15211] loop5: detected capacity change from 0 to 512 [ 359.082727][T15211] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 359.104574][T15211] EXT4-fs (loop5): mount failed [ 359.159118][T15220] 9pnet_fd: Insufficient options for proto=fd [ 359.170288][T15225] loop5: detected capacity change from 0 to 1024 [ 359.218645][T15225] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 359.243755][T15225] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.3641: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 359.272496][T15232] 9pnet_fd: Insufficient options for proto=fd [ 359.293743][T15236] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 359.302864][T15236] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 359.323208][T15227] 9pnet: Could not find request transport: f [ 359.339229][T15225] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3641: couldn't read orphan inode 11 (err -117) [ 359.366188][T15225] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3641: Invalid block bitmap block 0 in block_group 0 [ 359.391959][T15225] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3641: Failed to acquire dquot type 0 [ 359.404867][T15238] loop2: detected capacity change from 0 to 1024 [ 359.460116][T15246] 9pnet: Could not find request transport: f [ 359.469185][T15246] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 359.489067][T15238] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3634: Allocating blocks 385-513 which overlap fs metadata [ 359.522326][T15238] EXT4-fs (loop2): pa ffff888106db4a10: logic 16, phys. 129, len 24 [ 359.530525][T15238] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 359.559968][T15252] loop8: detected capacity change from 0 to 1024 [ 359.574953][T15253] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3637'. [ 359.589805][T15255] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 359.597832][T15253] loop9: detected capacity change from 0 to 1024 [ 359.608115][T15253] ext4: Unknown parameter 'func' [ 359.649947][T15262] pim6reg1: entered promiscuous mode [ 359.655498][T15262] pim6reg1: entered allmulticast mode [ 359.688957][T15265] loop9: detected capacity change from 0 to 512 [ 359.795119][T15265] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 359.825521][T15265] EXT4-fs (loop9): mount failed [ 359.947377][T15276] 9pnet_fd: Insufficient options for proto=fd [ 359.980082][T15281] loop8: detected capacity change from 0 to 512 [ 359.995199][T15281] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 360.004380][T15281] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 360.046179][T15281] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 360.081251][T15281] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 360.115715][T15281] System zones: 0-2, 18-18, 34-34 [ 360.130011][T15281] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.3651: iget: bad i_size value: 360287970189639680 [ 360.173642][T15281] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.3651: couldn't read orphan inode 15 (err -117) [ 360.189758][ T41] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.283328][ T41] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.307831][T15298] pim6reg1: entered promiscuous mode [ 360.313162][T15298] pim6reg1: entered allmulticast mode [ 360.330646][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 360.358033][ T41] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.393378][T15300] loop3: detected capacity change from 0 to 1024 [ 360.403055][T15300] ext4: Unknown parameter 'func' [ 360.440053][ T41] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.680560][ T41] bridge_slave_1: left allmulticast mode [ 360.686282][ T41] bridge_slave_1: left promiscuous mode [ 360.692006][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.717078][T15307] loop8: detected capacity change from 0 to 1024 [ 360.734290][ T41] bridge_slave_0: left allmulticast mode [ 360.740001][ T41] bridge_slave_0: left promiscuous mode [ 360.745718][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.752863][T15307] EXT4-fs: Ignoring removed orlov option [ 360.779001][T15307] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 360.870091][T15307] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.3656: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 360.912517][T15315] loop2: detected capacity change from 0 to 512 [ 360.974272][T15315] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 360.993746][T15315] EXT4-fs (loop2): mount failed [ 361.014777][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.036545][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.048447][T15323] 9pnet_fd: Insufficient options for proto=fd [ 361.055671][ T41] bond0 (unregistering): Released all slaves [ 361.138868][T15278] chnl_net:caif_netlink_parms(): no params data found [ 361.187057][T15329] loop8: detected capacity change from 0 to 128 [ 361.200722][ T41] tipc: Disabling bearer [ 361.206067][ T41] tipc: Left network mode [ 361.216711][T15328] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 361.224584][T15328] FAT-fs (loop8): Filesystem has been set read-only [ 361.234307][T15328] bio_check_eod: 5 callbacks suppressed [ 361.234320][T15328] syz.8.3661: attempt to access beyond end of device [ 361.234320][T15328] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 361.282152][T15328] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 361.290052][T15328] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 361.302823][T15329] syz.8.3661: attempt to access beyond end of device [ 361.302823][T15329] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 361.346984][ T41] hsr_slave_0: left promiscuous mode [ 361.350102][T15329] syz.8.3661: attempt to access beyond end of device [ 361.350102][T15329] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 361.373188][ T41] hsr_slave_1: left promiscuous mode [ 361.382698][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.398492][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.406081][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.427067][ T41] veth1_vlan: left promiscuous mode [ 361.438394][ T41] veth0_vlan: left promiscuous mode [ 361.530694][T15349] loop8: detected capacity change from 0 to 1024 [ 361.539779][T15349] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 361.553505][T15349] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.3664: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 361.572473][T15349] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.3664: couldn't read orphan inode 11 (err -117) [ 361.572640][ T41] team0 (unregistering): Port device team_slave_1 removed [ 361.597759][T15354] loop3: detected capacity change from 0 to 1024 [ 361.608983][T15349] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3664: Invalid block bitmap block 0 in block_group 0 [ 361.612817][T15354] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 361.623073][T15349] __quota_error: 90 callbacks suppressed [ 361.623098][T15349] Quota error (device loop8): write_blk: dquota write failed [ 361.645916][T15349] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 361.656192][T15349] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3664: Failed to acquire dquot type 0 [ 361.668444][T15354] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3666: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 361.687536][T15278] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.694641][T15278] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.701828][T15354] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3666: couldn't read orphan inode 11 (err -117) [ 361.709179][T15278] bridge_slave_0: entered allmulticast mode [ 361.720635][T15278] bridge_slave_0: entered promiscuous mode [ 361.735644][T15351] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3665'. [ 361.745291][T15278] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.752411][T15278] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.769166][T15278] bridge_slave_1: entered allmulticast mode [ 361.769307][T15354] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3666: Invalid block bitmap block 0 in block_group 0 [ 361.781232][T15278] bridge_slave_1: entered promiscuous mode [ 361.797830][T15354] Quota error (device loop3): write_blk: dquota write failed [ 361.805343][T15354] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 361.829464][T15354] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3666: Failed to acquire dquot type 0 [ 361.844663][T15278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.861270][T15278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.884100][T15278] team0: Port device team_slave_0 added [ 361.890929][T15278] team0: Port device team_slave_1 added [ 361.982718][T15278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.988234][T15371] loop2: detected capacity change from 0 to 1024 [ 361.989711][T15278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.022109][T15278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.034489][T15371] EXT4-fs: Ignoring removed orlov option [ 362.070227][T15371] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 362.093028][T15278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.100117][T15278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.126165][T15278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.168639][T15371] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.3670: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 362.227460][T15391] pim6reg1: entered promiscuous mode [ 362.232954][T15391] pim6reg1: entered allmulticast mode [ 362.258036][T15278] hsr_slave_0: entered promiscuous mode [ 362.278363][T15278] hsr_slave_1: entered promiscuous mode [ 362.286522][T15278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.294466][T15278] Cannot create hsr debugfs directory [ 362.301280][T15388] pim6reg1: entered promiscuous mode [ 362.306845][T15388] pim6reg1: entered allmulticast mode [ 362.343826][T15395] loop2: detected capacity change from 0 to 1024 [ 362.364363][T15395] EXT4-fs: Ignoring removed orlov option [ 362.435641][T15395] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 362.532916][T15395] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.3683: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 362.570421][T15401] pim6reg1: entered promiscuous mode [ 362.575858][T15401] pim6reg1: entered allmulticast mode [ 362.986191][T15429] loop3: detected capacity change from 0 to 128 [ 363.121083][T15278] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 363.131028][T15439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3680'. [ 363.141031][T15278] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 363.171434][T15278] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 363.229530][T15278] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 363.262952][T15449] loop2: detected capacity change from 0 to 1024 [ 363.297579][T15449] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 363.324668][T15449] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.3682: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 363.531852][T15449] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3682: couldn't read orphan inode 11 (err -117) [ 363.558715][T15449] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3682: Invalid block bitmap block 0 in block_group 0 [ 363.620418][T15449] Quota error (device loop2): write_blk: dquota write failed [ 363.628019][T15449] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 363.633314][T15459] loop3: detected capacity change from 0 to 1024 [ 363.663186][T15459] EXT4-fs: Ignoring removed orlov option [ 363.670611][T15278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.691252][T15459] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 363.693761][T15449] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3682: Failed to acquire dquot type 0 [ 363.715428][T15278] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.737158][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.744257][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.779471][T15459] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3684: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 363.813548][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.820678][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.976927][T15278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.034643][T15482] pim6reg1: entered promiscuous mode [ 364.039967][T15482] pim6reg1: entered allmulticast mode [ 364.077143][T15485] loop3: detected capacity change from 0 to 1024 [ 364.131922][T15485] EXT4-fs: Ignoring removed orlov option [ 364.146206][T15485] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 364.213483][T15485] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.3687: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 364.244495][T15503] 9pnet_fd: Insufficient options for proto=fd [ 364.394867][T15278] veth0_vlan: entered promiscuous mode [ 364.407312][T15278] veth1_vlan: entered promiscuous mode [ 364.453209][T15518] 9pnet_fd: Insufficient options for proto=fd [ 364.461102][T15278] veth0_macvtap: entered promiscuous mode [ 364.479467][T15278] veth1_macvtap: entered promiscuous mode [ 364.517712][T15278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.549018][T15278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.595902][T15278] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.604770][T15278] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.613549][T15278] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.622363][T15278] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.629240][T15525] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3691'. [ 364.668177][T15525] loop5: detected capacity change from 0 to 1024 [ 364.691141][T15525] ext4: Unknown parameter 'func' [ 364.780205][T15534] loop2: detected capacity change from 0 to 128 [ 364.794222][T15532] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 364.846188][T15537] 9pnet: Could not find request transport: f [ 364.855131][T15537] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 364.884393][T15537] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 364.895965][T15542] loop5: detected capacity change from 0 to 1024 [ 364.949476][T15542] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.012191][T15547] loop2: detected capacity change from 0 to 1024 [ 365.026389][T15542] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.3696: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 365.058805][T15547] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.073993][T15542] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3696: couldn't read orphan inode 11 (err -117) [ 365.083845][T15547] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.3699: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 365.108632][T15547] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3699: couldn't read orphan inode 11 (err -117) [ 365.138888][T15542] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3696: Invalid block bitmap block 0 in block_group 0 [ 365.158316][T15557] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3703'. [ 365.172996][T15547] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3699: Invalid block bitmap block 0 in block_group 0 [ 365.196958][T15557] loop8: detected capacity change from 0 to 1024 [ 365.204668][T15542] Quota error (device loop5): write_blk: dquota write failed [ 365.212084][T15542] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 365.227417][T15557] ext4: Unknown parameter 'func' [ 365.232583][T15542] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3696: Failed to acquire dquot type 0 [ 365.244447][T15547] Quota error (device loop2): write_blk: dquota write failed [ 365.251840][T15547] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 365.261909][T15547] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3699: Failed to acquire dquot type 0 [ 365.279718][T15560] netlink: 'syz.2.3699': attribute type 4 has an invalid length. [ 365.356462][T15565] 9pnet_fd: Insufficient options for proto=fd [ 365.371121][T15569] pim6reg1: entered promiscuous mode [ 365.376494][T15569] pim6reg1: entered allmulticast mode [ 365.858175][T15583] 9pnet: Could not find request transport: f [ 365.891562][T15588] binfmt_misc: register: failed to install interpreter file ./file2 [ 365.932403][T15583] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 365.981161][T15595] loop3: detected capacity change from 0 to 1024 [ 365.995879][T15594] loop2: detected capacity change from 0 to 1024 [ 366.002933][T15594] ext4: Unknown parameter 'func' [ 366.021860][T15595] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.139525][T15595] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3716: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 366.207123][T15595] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3716: couldn't read orphan inode 11 (err -117) [ 366.255974][T15595] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3716: Invalid block bitmap block 0 in block_group 0 [ 366.318706][T15595] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3716: Failed to acquire dquot type 0 [ 366.348980][T15607] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 366.474815][T15611] loop3: detected capacity change from 0 to 1024 [ 366.484042][T15611] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.514916][T15611] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3719: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 366.538780][T15611] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3719: couldn't read orphan inode 11 (err -117) [ 366.560784][T15611] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3719: Invalid block bitmap block 0 in block_group 0 [ 366.576744][T15611] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3719: Failed to acquire dquot type 0 [ 366.592890][T15611] netlink: 'syz.3.3719': attribute type 4 has an invalid length. [ 366.625979][T15615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3721'. [ 366.759707][T15620] 9pnet_fd: Insufficient options for proto=fd [ 366.964174][T15627] 9pnet: Could not find request transport: f [ 366.972832][T15630] loop5: detected capacity change from 0 to 128 [ 366.979591][T15627] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 367.087260][T15639] loop3: detected capacity change from 0 to 1024 [ 367.106614][T15639] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.120124][T15639] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3730: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 367.141401][T15639] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3730: couldn't read orphan inode 11 (err -117) [ 367.168806][T15639] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3730: Invalid block bitmap block 0 in block_group 0 [ 367.213262][T15644] loop5: detected capacity change from 0 to 1024 [ 367.230416][T15646] loop2: detected capacity change from 0 to 1024 [ 367.237141][T15639] __quota_error: 4 callbacks suppressed [ 367.237154][T15639] Quota error (device loop3): write_blk: dquota write failed [ 367.249344][T15644] EXT4-fs: Ignoring removed orlov option [ 367.250384][T15639] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 367.263248][T15648] loop9: detected capacity change from 0 to 1024 [ 367.266193][T15639] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3730: Failed to acquire dquot type 0 [ 367.318565][T15648] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.329076][T15644] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 367.352373][ T29] audit: type=1326 audit(1748662002.088:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.2.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 367.390130][ T29] audit: type=1326 audit(1748662002.088:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.2.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 367.413993][ T29] audit: type=1326 audit(1748662002.088:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.2.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 367.437567][ T29] audit: type=1326 audit(1748662002.088:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.2.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 367.460984][ T29] audit: type=1326 audit(1748662002.088:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.2.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 367.484743][ T29] audit: type=1326 audit(1748662002.088:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.2.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 367.551283][ T29] audit: type=1326 audit(1748662002.288:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.2.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 367.585295][ T29] audit: type=1326 audit(1748662002.328:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.2.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1e6e969 code=0x7ffc0000 [ 367.634033][T15648] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.3733: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 367.655818][T15644] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.3732: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 367.685815][T15648] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.3733: couldn't read orphan inode 11 (err -117) [ 367.760668][T15648] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3733: Invalid block bitmap block 0 in block_group 0 [ 367.799836][T15648] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3733: Failed to acquire dquot type 0 [ 367.856447][T15648] netlink: 'syz.9.3733': attribute type 4 has an invalid length. [ 367.955949][T15657] chnl_net:caif_netlink_parms(): no params data found [ 368.148945][T15682] 9pnet: Could not find request transport: f [ 368.156062][T15682] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 368.167628][T15657] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.174778][T15657] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.183122][T15657] bridge_slave_0: entered allmulticast mode [ 368.190777][T15657] bridge_slave_0: entered promiscuous mode [ 368.199028][T15657] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.206131][T15657] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.214015][T15657] bridge_slave_1: entered allmulticast mode [ 368.221477][T15657] bridge_slave_1: entered promiscuous mode [ 368.370129][T15657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.382292][T15657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.461489][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.670583][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.702113][T15657] team0: Port device team_slave_0 added [ 368.714789][T15657] team0: Port device team_slave_1 added [ 368.747873][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.780990][T15657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.788048][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.814093][T15657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.828792][T15657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.835819][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.861927][T15657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.897529][T15657] hsr_slave_0: entered promiscuous mode [ 368.913949][T15657] hsr_slave_1: entered promiscuous mode [ 369.023028][T15657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.033515][T15657] Cannot create hsr debugfs directory [ 369.102498][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.191700][T15713] loop8: detected capacity change from 0 to 1024 [ 369.203097][T15713] ext4: Unknown parameter 'func' [ 369.266971][ T8887] ================================================================== [ 369.275074][ T8887] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 369.281746][ T8887] [ 369.284056][ T8887] write to 0xffff888106e52e50 of 8 bytes by task 8984 on cpu 1: [ 369.291669][ T8887] __dentry_kill+0x142/0x4b0 [ 369.296249][ T8887] dput+0x5e/0xd0 [ 369.299871][ T8887] step_into+0x5b2/0x820 [ 369.304107][ T8887] path_openat+0x13e8/0x2170 [ 369.308689][ T8887] do_filp_open+0x109/0x230 [ 369.313184][ T8887] do_sys_openat2+0xa6/0x110 [ 369.317797][ T8887] __x64_sys_openat+0xf2/0x120 [ 369.322556][ T8887] x64_sys_call+0x1af/0x2fb0 [ 369.327136][ T8887] do_syscall_64+0xd2/0x200 [ 369.331634][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.337521][ T8887] [ 369.339832][ T8887] read to 0xffff888106e52e50 of 8 bytes by task 8887 on cpu 0: [ 369.347370][ T8887] fast_dput+0x5f/0x2c0 [ 369.351608][ T8887] dput+0x24/0xd0 [ 369.355239][ T8887] step_into+0x5b2/0x820 [ 369.359471][ T8887] path_openat+0x13e8/0x2170 [ 369.364060][ T8887] do_filp_open+0x109/0x230 [ 369.368647][ T8887] do_sys_openat2+0xa6/0x110 [ 369.373232][ T8887] __x64_sys_openat+0xf2/0x120 [ 369.377994][ T8887] x64_sys_call+0x1af/0x2fb0 [ 369.382576][ T8887] do_syscall_64+0xd2/0x200 [ 369.387071][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.392956][ T8887] [ 369.395264][ T8887] value changed: 0xffff888237af2e08 -> 0x0000000000000000 [ 369.402357][ T8887] [ 369.404665][ T8887] Reported by Kernel Concurrency Sanitizer on: [ 369.410814][ T8887] CPU: 0 UID: 0 PID: 8887 Comm: udevd Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(voluntary) [ 369.422434][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.432479][ T8887] ================================================================== [ 369.552453][ T31] bridge_slave_1: left allmulticast mode [ 369.558180][ T31] bridge_slave_1: left promiscuous mode [ 369.563870][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.574683][ T31] bridge_slave_0: left allmulticast mode [ 369.580352][ T31] bridge_slave_0: left promiscuous mode [ 369.586087][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.738458][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.748267][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.757914][ T31] bond0 (unregistering): Released all slaves [ 369.818684][ T31] tipc: Disabling bearer [ 369.823979][ T31] tipc: Left network mode [ 369.846153][ T31] hsr_slave_0: left promiscuous mode [ 369.851928][ T31] hsr_slave_1: left promiscuous mode [ 369.857674][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.865488][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.872971][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.884944][ T31] veth1_macvtap: left promiscuous mode [ 369.890556][ T31] veth0_macvtap: left promiscuous mode [ 369.899084][ T31] veth1_vlan: left promiscuous mode [ 369.905369][ T31] veth0_vlan: left promiscuous mode [ 369.965479][ T31] team0 (unregistering): Port device team_slave_1 removed [ 370.192958][T15657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 370.202411][T15657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 370.211308][T15657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.220391][T15657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.270168][T15657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.286963][T15657] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.299112][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.306292][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.323348][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.330448][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.414131][T15657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.482957][T15657] veth0_vlan: entered promiscuous mode [ 370.490940][T15657] veth1_vlan: entered promiscuous mode [ 370.507807][T15657] veth0_macvtap: entered promiscuous mode [ 370.515777][T15657] veth1_macvtap: entered promiscuous mode [ 370.527258][T15657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.539238][T15657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.549337][T15657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.558154][T15657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.566896][T15657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.575766][T15657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0