last executing test programs: 6m30.090136073s ago: executing program 32 (id=835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140), 0x10}}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 6m20.23381527s ago: executing program 33 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0xc0c4) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m10.064355382s ago: executing program 34 (id=3153): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) 5m9.549293283s ago: executing program 35 (id=3164): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 5m8.978165089s ago: executing program 36 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0xc}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x6d, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @empty=0xe0000001}, {0x0, 0x4e20, 0x4b, 0x0, @opaque="ab8ec18db04aa7240a796257e424ad7b8ff135f6b1bd143d515b2a716b64755c17ba4f41f5eb6678ae4ff9442abc60cb8bd96482fbec21de3615781db74188c76e5dae"}}}}}, 0x0) 4m57.174878224s ago: executing program 37 (id=3441): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 4m54.549718866s ago: executing program 38 (id=3471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010024bd7000fedbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) 4m51.627324032s ago: executing program 39 (id=3521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x8}]}}]}, 0x38}}, 0x0) 4m42.299623136s ago: executing program 40 (id=3837): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 4m38.998957013s ago: executing program 41 (id=3889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xb723, 0x2, 0x0, 0xfffffffe, 0xfffffffd}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x2400c000) 4m8.491616505s ago: executing program 42 (id=4872): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m7.174932611s ago: executing program 43 (id=4918): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 3m48.208564674s ago: executing program 44 (id=5582): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) 3m7.096708257s ago: executing program 45 (id=6813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m12.75253744s ago: executing program 46 (id=8512): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x281445c, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0x2, 0x269, &(0x7f0000000780)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open$dir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20040, 0x142) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m40.908166974s ago: executing program 47 (id=9319): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='workqueue_queue_work\x00', r1, 0x0, 0x7fffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.716313442s ago: executing program 2 (id=9386): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000012) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m37.656588526s ago: executing program 48 (id=9385): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) 1m37.646801387s ago: executing program 2 (id=9392): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 1m37.572049383s ago: executing program 2 (id=9393): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1m37.571774423s ago: executing program 2 (id=9394): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m37.49191795s ago: executing program 2 (id=9396): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 1m36.270626478s ago: executing program 2 (id=9402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1m36.194366895s ago: executing program 49 (id=9402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1m12.00040989s ago: executing program 0 (id=10022): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 1m11.955142374s ago: executing program 0 (id=10025): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 1m11.888027429s ago: executing program 0 (id=10027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1m11.827135504s ago: executing program 0 (id=10029): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 1m11.773096688s ago: executing program 0 (id=10032): r0 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f00000006c0)='personality\x00') pread64(r4, &(0x7f0000000040)=""/8, 0x8, 0x4) 1m11.600741972s ago: executing program 0 (id=10036): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000007000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7770500140000472c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10}, 0x94) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m11.600580632s ago: executing program 50 (id=10036): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000007000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7770500140000472c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10}, 0x94) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 41.19581664s ago: executing program 3 (id=10984): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) 40.381633466s ago: executing program 3 (id=11004): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @loopback, 0xc5f}, 0x1c) 39.570923432s ago: executing program 3 (id=11039): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 39.476392679s ago: executing program 3 (id=11044): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) getdents(r0, 0x0, 0x0) 39.300385963s ago: executing program 3 (id=11049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 39.243906018s ago: executing program 3 (id=11052): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 39.21106007s ago: executing program 51 (id=11052): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 27.066225522s ago: executing program 6 (id=11339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r3 = syz_io_uring_setup(0x495, &(0x7f0000000040)={0x0, 0x10079ae, 0x800, 0x3, 0xc}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x74d1, 0x2448, 0x43, 0x0, 0x20) 27.006001717s ago: executing program 6 (id=11342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26.122813259s ago: executing program 6 (id=11350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb90008a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 24.793433446s ago: executing program 6 (id=11366): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 24.754005889s ago: executing program 6 (id=11358): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 24.676522566s ago: executing program 6 (id=11360): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 24.676214696s ago: executing program 52 (id=11360): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 20.712484936s ago: executing program 5 (id=11478): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dd7b) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x22) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) close_range(r3, 0xffffffffffffffff, 0x0) 20.518385812s ago: executing program 5 (id=11493): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)="d967", 0x2}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000005d40)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000007940)='./file0/../file0\x00') 20.485310184s ago: executing program 5 (id=11483): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 20.429214569s ago: executing program 5 (id=11486): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) creat(0x0, 0x44) mount(0x0, 0x0, 0x0, 0x301400, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 20.278413281s ago: executing program 5 (id=11494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x415}, 0x18) r2 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 18.408609792s ago: executing program 5 (id=11519): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x2, 0x0, 0x400, 0x0, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 18.355032927s ago: executing program 53 (id=11519): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x2, 0x0, 0x400, 0x0, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 2.085218112s ago: executing program 1 (id=11984): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.070642403s ago: executing program 1 (id=11985): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) flock(r0, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x440, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r0, 0x0) 1.997414579s ago: executing program 1 (id=11988): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000700)={0x0, 0x594, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) mlock2(&(0x7f00007fc000/0x2000)=nil, 0x2000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000380)=[{0x4, 0x7f, 0x1000}, {0x1, 0xfffd, 0x1000}], 0x2) 1.947312803s ago: executing program 1 (id=11990): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000000)={0x2000000000002000, 0x1, 0x53, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000300)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x9e1, 0x0, 0x802}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x2, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 1.629773499s ago: executing program 7 (id=11999): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f000000a280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 1.588346312s ago: executing program 7 (id=12000): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000700)={0x0, 0x594, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) mlock2(&(0x7f00007fc000/0x2000)=nil, 0x2000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000380)=[{0x4, 0x7f, 0x1000}, {0x1, 0xfffd, 0x1000}], 0x2) 1.200801543s ago: executing program 8 (id=12002): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x10000}], 0x1, 0x40001023, 0x0) 1.141092828s ago: executing program 1 (id=12003): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 935.159674ms ago: executing program 4 (id=12011): syz_open_dev$usbfs(0x0, 0x76, 0x103381) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r3, 0x14) 864.6194ms ago: executing program 4 (id=12012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 842.481152ms ago: executing program 4 (id=12013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 774.763698ms ago: executing program 9 (id=12016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 774.490618ms ago: executing program 9 (id=12017): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0xb, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000953de911bc8d33"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 773.781828ms ago: executing program 4 (id=12018): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x2004, 0x0) 770.918318ms ago: executing program 7 (id=12019): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) rt_sigsuspend(0x0, 0x0) 740.1713ms ago: executing program 9 (id=12020): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x28000600) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 739.53242ms ago: executing program 4 (id=12021): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYRESOCT=0x0], &(0x7f0000000280)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) setgroups(0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) 736.4357ms ago: executing program 9 (id=12022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='qdisc_destroy\x00', r3}, 0x18) close(r0) 734.002291ms ago: executing program 7 (id=12023): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 695.094964ms ago: executing program 4 (id=12024): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) 694.469224ms ago: executing program 7 (id=12025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000abc0)=@delchain={0x2c, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 639.725578ms ago: executing program 7 (id=12026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)={r3}) 638.410208ms ago: executing program 9 (id=12027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast1, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 576.579324ms ago: executing program 9 (id=12028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000) 393.675368ms ago: executing program 8 (id=12029): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 346.121232ms ago: executing program 8 (id=12030): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 283.181837ms ago: executing program 8 (id=12031): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f0000000440)={[{@nombcache}, {@noblock_validity}, {@noquota}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x524, &(0x7f00000004c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 250.75847ms ago: executing program 8 (id=12032): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8561a678639e49e4, @perf_bp={0x0, 0x4}, 0x109ba0, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 649.35µs ago: executing program 8 (id=12033): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e73}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 0s ago: executing program 1 (id=12043): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): (loop6): Remounting filesystem read-only [ 387.490725][ T2781] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 387.518732][ T2781] EXT4-fs (loop6): mount failed [ 387.561553][ T2799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10637'. [ 387.570002][ T2795] syzkaller0: entered promiscuous mode [ 387.576036][ T2795] syzkaller0: entered allmulticast mode [ 387.602797][ T2806] netlink: 'syz.4.10638': attribute type 10 has an invalid length. [ 387.610824][ T2806] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10638'. [ 387.651343][ T2812] loop6: detected capacity change from 0 to 512 [ 387.658782][ T2812] EXT4-fs: Ignoring removed oldalloc option [ 387.667733][ T2812] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 387.681457][ T2812] EXT4-fs (loop6): 1 truncate cleaned up [ 387.693941][ T2815] lo speed is unknown, defaulting to 1000 [ 387.698254][ T2812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.841082][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.870842][ T2856] netlink: 14 bytes leftover after parsing attributes in process `syz.7.10650'. [ 387.870856][ T2857] loop6: detected capacity change from 0 to 1024 [ 387.871566][ T2857] EXT4-fs: Ignoring removed bh option [ 387.895542][ T2856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.915033][ T2856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.917816][ T2857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 387.938583][ T2856] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 387.951385][ T2856] bond0 (unregistering): Released all slaves [ 387.954287][ T2863] loop3: detected capacity change from 0 to 1024 [ 387.977473][ T2863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.992781][ T2857] SELinux: failed to load policy [ 388.006781][ T2863] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.023115][ T2863] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.10651: lblock 1 mapped to illegal pblock 1 (length 15) [ 388.042731][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 388.083677][ T2863] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.10651: lblock 1 mapped to illegal pblock 1 (length 3) [ 388.129110][ T2910] team0: Port device team_slave_0 removed [ 388.140455][ T2908] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 8: comm syz.3.10651: lblock 8 mapped to illegal pblock 8 (length 8) [ 388.166799][ T2910] team0: Port device team_slave_1 removed [ 388.175265][ T2910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.186284][ T2863] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 388.198677][ T2863] EXT4-fs (loop3): This should not happen!! Data will be lost [ 388.198677][ T2863] [ 388.216144][ T2910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.226256][ T2910] bond1: (slave batadv1): Releasing active interface [ 388.233064][ T2910] bond1: (slave batadv1): the permanent HWaddr of slave - de:7b:5c:68:c8:99 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 388.252649][ T2908] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 8: comm syz.3.10651: lblock 8 mapped to illegal pblock 8 (length 4) [ 388.267095][ T2910] bond1: (slave batadv2): making interface the new active one [ 388.275434][ T2863] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 4: comm syz.3.10651: lblock 4 mapped to illegal pblock 4 (length 1) [ 388.280208][ T2908] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 8: comm syz.3.10651: lblock 8 mapped to illegal pblock 8 (length 4) [ 388.306438][ T2910] bond1: (slave batadv2): Releasing active interface [ 388.332692][ T2919] loop6: detected capacity change from 0 to 1024 [ 388.339652][ T2919] EXT4-fs: Ignoring removed bh option [ 388.345692][ T2919] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 388.370996][ T2919] EXT4-fs error (device loop6): ext4_quota_enable:7128: comm syz.6.10652: inode #2304: comm syz.6.10652: iget: illegal inode # [ 388.394932][T29919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.404443][ T2919] EXT4-fs (loop6): Remounting filesystem read-only [ 388.411066][ T2919] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 388.444080][ T2923] tipc: Enabled bearer , priority 0 [ 388.448918][ T2919] EXT4-fs (loop6): mount failed [ 388.465248][ T2923] tipc: Disabling bearer [ 388.644958][ T2951] netlink: 148 bytes leftover after parsing attributes in process `syz.6.10666'. [ 388.673055][ T2955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10668'. [ 389.564017][ T3038] loop3: detected capacity change from 0 to 1024 [ 389.571813][ T3038] ext4: Bad value for 'debug_want_extra_isize' [ 389.604828][ T3043] tipc: Enabling of bearer rejected, failed to enable media [ 389.698627][ T3055] netlink: 'syz.6.10705': attribute type 10 has an invalid length. [ 389.711162][ T3055] team0: Port device dummy0 added [ 389.718799][ T3055] netlink: 'syz.6.10705': attribute type 10 has an invalid length. [ 389.730074][ T3055] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 389.740477][ T3055] team0: Failed to send options change via netlink (err -105) [ 389.752610][ T3055] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 389.785173][ T3055] team0: Port device dummy0 removed [ 389.792118][ T3055] dummy0: entered promiscuous mode [ 389.826497][ T3068] wireguard0: entered promiscuous mode [ 389.833158][ T3068] wireguard0: entered allmulticast mode [ 390.235762][ T3105] loop6: detected capacity change from 0 to 8192 [ 390.409226][ T3119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10725'. [ 390.433880][ T3112] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 390.441540][ T3112] FAT-fs (loop6): Filesystem has been set read-only [ 390.491436][ T3124] 9pnet_fd: Insufficient options for proto=fd [ 390.555522][ T3131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10729'. [ 390.612775][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 390.612790][ T29] audit: type=1326 audit(2000000066.798:17654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.665936][ T29] audit: type=1326 audit(2000000066.798:17655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.689697][ T29] audit: type=1326 audit(2000000066.798:17656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.713306][ T29] audit: type=1326 audit(2000000066.798:17657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.736993][ T29] audit: type=1326 audit(2000000066.798:17658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.760738][ T29] audit: type=1326 audit(2000000066.830:17659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.784302][ T29] audit: type=1326 audit(2000000066.830:17660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.808017][ T29] audit: type=1326 audit(2000000066.830:17661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.831690][ T29] audit: type=1326 audit(2000000066.830:17662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.855281][ T29] audit: type=1326 audit(2000000066.830:17663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.4.10731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 390.994267][ T3168] loop1: detected capacity change from 0 to 1024 [ 390.998244][ T3169] netlink: 'syz.7.10742': attribute type 10 has an invalid length. [ 391.000946][ T3168] EXT4-fs: Ignoring removed bh option [ 391.021171][ T3169] team0: Port device dummy0 added [ 391.028467][ T3168] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 391.035307][ T3169] netlink: 'syz.7.10742': attribute type 10 has an invalid length. [ 391.046162][ T3168] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 391.054992][ T3168] System zones: 0-1, 3-12 [ 391.061214][ T3168] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.10737: lblock 1 mapped to illegal pblock 1 (length 1) [ 391.064509][ T3169] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 391.075654][ T3168] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.10737: Failed to acquire dquot type 0 [ 391.098320][ T3168] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.10737: Freeing blocks not in datazone - block = 0, count = 4096 [ 391.117764][ T3168] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.10737: Invalid inode bitmap blk 0 in block_group 0 [ 391.117898][ T3169] team0: Failed to send options change via netlink (err -105) [ 391.135348][ T5613] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:51: lblock 1 mapped to illegal pblock 1 (length 1) [ 391.152256][ T3169] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 391.155417][ T5613] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:51: Failed to release dquot type 0 [ 391.166959][ T3169] team0: Port device dummy0 removed [ 391.174474][ T3168] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 391.186972][ T3168] EXT4-fs (loop1): 1 orphan inode deleted [ 391.194804][ T3168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.225369][ T3155] EXT4-fs: Ignoring removed bh option [ 391.232969][ T3155] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 391.279007][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.378162][ T3183] wg2: left promiscuous mode [ 391.383010][ T3183] bond1: left promiscuous mode [ 391.387908][ T3183] batadv1: left promiscuous mode [ 391.392941][ T3183] batadv2: left promiscuous mode [ 391.408338][ T3183] team1: left promiscuous mode [ 391.428269][ T3192] loop6: detected capacity change from 0 to 2048 [ 391.473779][ T3192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.496531][ T3199] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10751'. [ 391.513730][ T3192] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 391.531304][ T3192] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 391.543675][ T3192] EXT4-fs (loop6): This should not happen!! Data will be lost [ 391.543675][ T3192] [ 391.553463][ T3192] EXT4-fs (loop6): Total free blocks count 0 [ 391.559666][ T3192] EXT4-fs (loop6): Free/Dirty block details [ 391.565597][ T3192] EXT4-fs (loop6): free_blocks=2415919104 [ 391.571370][ T3192] EXT4-fs (loop6): dirty_blocks=48 [ 391.576652][ T3192] EXT4-fs (loop6): Block reservation details [ 391.582638][ T3192] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 391.617227][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.819520][ T3242] loop6: detected capacity change from 0 to 512 [ 391.826451][ T3242] EXT4-fs: Ignoring removed nobh option [ 391.833895][ T3242] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 391.862566][ T3242] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.10769: iget: bad i_size value: 38620345925642 [ 391.884082][ T3242] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.10769: couldn't read orphan inode 15 (err -117) [ 391.942554][ T3242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.966872][ T3260] netlink: 'syz.4.10777': attribute type 13 has an invalid length. [ 391.999031][ T3242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.014680][ T3256] loop3: detected capacity change from 0 to 8192 [ 392.024204][ T3260] gretap0: refused to change device tx_queue_len [ 392.042782][ T3260] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 392.060460][ T3256] bio_check_eod: 103 callbacks suppressed [ 392.060476][ T3256] syz.3.10775: attempt to access beyond end of device [ 392.060476][ T3256] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.079933][ T3256] Buffer I/O error on dev loop3, logical block 57847, async page read [ 392.109799][ T3255] syz.3.10775: attempt to access beyond end of device [ 392.109799][ T3255] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.123498][ T3255] Buffer I/O error on dev loop3, logical block 57847, async page read [ 392.135199][ T3255] syz.3.10775: attempt to access beyond end of device [ 392.135199][ T3255] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.148763][ T3255] Buffer I/O error on dev loop3, logical block 57847, async page read [ 392.157810][ T3276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10783'. [ 392.179080][ T3274] loop1: detected capacity change from 0 to 512 [ 392.180878][ T3255] syz.3.10775: attempt to access beyond end of device [ 392.180878][ T3255] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.199045][ T3255] Buffer I/O error on dev loop3, logical block 57847, async page read [ 392.203887][ T3274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 392.208940][ T3256] syz.3.10775: attempt to access beyond end of device [ 392.208940][ T3256] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.230741][ T3256] Buffer I/O error on dev loop3, logical block 57847, async page read [ 392.244756][ T3274] EXT4-fs (loop1): 1 orphan inode deleted [ 392.250808][ T3274] EXT4-fs (loop1): 1 truncate cleaned up [ 392.256599][ T3256] syz.3.10775: attempt to access beyond end of device [ 392.256599][ T3256] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.270264][ T3256] Buffer I/O error on dev loop3, logical block 57847, async page read [ 392.279056][ T3274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.308549][ T3256] syz.3.10775: attempt to access beyond end of device [ 392.308549][ T3256] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.322200][ T3256] Buffer I/O error on dev loop3, logical block 57847, async page read [ 392.322622][ T3281] loop6: detected capacity change from 0 to 2048 [ 392.336635][ T3256] syz.3.10775: attempt to access beyond end of device [ 392.336635][ T3256] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.350262][ T3256] Buffer I/O error on dev loop3, logical block 57847, async page read [ 392.353674][ T3274] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10782: bg 0: block 360: padding at end of block bitmap is not set [ 392.375283][ T3274] EXT4-fs (loop1): Remounting filesystem read-only [ 392.381851][ T3274] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1597: inode #17: comm syz.1.10782: cleanup dec ref error -117 [ 392.410410][ T3281] loop6: p2 p3 p7 [ 392.425979][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.569076][ T3333] bridge: RTM_NEWNEIGH with invalid ether address [ 392.656779][ T3347] netlink: 'syz.3.10802': attribute type 3 has an invalid length. [ 392.672243][ T3348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10803'. [ 392.682785][ T3347] netlink: 'syz.3.10802': attribute type 3 has an invalid length. [ 392.692633][ T3351] netlink: 'syz.6.10804': attribute type 1 has an invalid length. [ 392.701972][ T3350] lo speed is unknown, defaulting to 1000 [ 392.723055][ T3357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.730307][ T3357] IPv6: NLM_F_CREATE should be set when creating new route [ 392.742571][ T3360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10804'. [ 392.753896][ T3348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.761163][ T3348] IPv6: NLM_F_CREATE should be set when creating new route [ 392.762526][ T3351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.806159][ T3360] bond0 (unregistering): Released all slaves [ 392.927689][ T3471] SELinux: security policydb version 17 (MLS) not backwards compatible [ 392.936611][ T3471] SELinux: failed to load policy [ 392.973609][ T3477] lo speed is unknown, defaulting to 1000 [ 393.720370][ T3519] loop6: detected capacity change from 0 to 512 [ 393.739006][ T3519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.757156][ T3519] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.783517][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.842269][ T3539] loop1: detected capacity change from 0 to 1024 [ 393.847658][ T3545] loop3: detected capacity change from 0 to 128 [ 393.848993][ T3539] EXT4-fs: Ignoring removed nobh option [ 393.862567][ T3539] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 393.878436][ T3539] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.10832: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 393.899577][ T3539] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.10832: couldn't read orphan inode 11 (err -117) [ 393.905774][ T3545] syz.3.10834: attempt to access beyond end of device [ 393.905774][ T3545] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 393.912998][ T3539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.944958][ T3552] netlink: 'syz.6.10836': attribute type 1 has an invalid length. [ 393.960417][ T3552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.978605][ T3552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10836'. [ 393.993074][ T3552] bond0 (unregistering): Released all slaves [ 394.012587][ T3539] netlink: 'syz.1.10832': attribute type 1 has an invalid length. [ 394.020438][ T3539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10832'. [ 394.063063][ T3636] loop3: detected capacity change from 0 to 1024 [ 394.069867][ T3636] EXT4-fs: Ignoring removed orlov option [ 394.077260][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.091036][ T3636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.147284][ T3653] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10847'. [ 394.163575][T13996] IPVS: starting estimator thread 0... [ 394.234351][ T3669] loop1: detected capacity change from 0 to 128 [ 394.262038][ T3659] IPVS: using max 2592 ests per chain, 129600 per kthread [ 394.493455][T29919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.509261][ T3702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10864'. [ 394.543609][ T3702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.553985][ T3702] bond1: (slave bond2): Enslaving as an active interface with an up link [ 394.566846][ T3702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10864'. [ 394.577305][ T3702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.602332][ T3779] loop6: detected capacity change from 0 to 512 [ 394.613462][ T5589] kworker/u8:31: attempt to access beyond end of device [ 394.613462][ T5589] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 394.637388][ T3779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 394.643501][ T3783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10870'. [ 394.672298][ T3779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.689477][ T3779] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.689728][ T3806] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10871'. [ 394.725454][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.762929][ T3814] macsec0: entered allmulticast mode [ 394.830951][ T3812] lo speed is unknown, defaulting to 1000 [ 394.948030][ T3858] tipc: Enabling of bearer rejected, already enabled [ 394.981086][ T3870] veth0: entered promiscuous mode [ 394.993563][ T3870] veth0 (unregistering): left promiscuous mode [ 395.421354][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 395.421367][ T29] audit: type=1326 audit(2000000071.837:18099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.4.10898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x50000 [ 395.461428][ T3920] lo speed is unknown, defaulting to 1000 [ 395.493525][ T29] audit: type=1326 audit(2000000071.879:18100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.4.10898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3377f0ebe9 code=0x50000 [ 395.712970][ T3965] loop1: detected capacity change from 0 to 512 [ 395.714419][ T29] audit: type=1326 audit(2000000072.152:18101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0948fcebe9 code=0x7ffc0000 [ 395.742990][ T29] audit: type=1326 audit(2000000072.152:18102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0948fcebe9 code=0x7ffc0000 [ 395.760744][ T3965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 395.780877][ T29] audit: type=1326 audit(2000000072.226:18103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f0948fcebe9 code=0x7ffc0000 [ 395.804558][ T29] audit: type=1326 audit(2000000072.226:18104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0948fcebe9 code=0x7ffc0000 [ 395.828177][ T29] audit: type=1326 audit(2000000072.226:18105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0948fcebe9 code=0x7ffc0000 [ 395.853903][ T3965] EXT4-fs (loop1): 1 truncate cleaned up [ 395.872600][ T3965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.986216][ T29] audit: type=1326 audit(2000000072.425:18106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0948fcebe9 code=0x7ffc0000 [ 396.010179][ T29] audit: type=1326 audit(2000000072.425:18107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0948fcebe9 code=0x7ffc0000 [ 396.033807][ T29] audit: type=1326 audit(2000000072.425:18108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0948fcebe9 code=0x7ffc0000 [ 396.111622][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.135052][ T3986] syzkaller1: entered promiscuous mode [ 396.140617][ T3986] syzkaller1: entered allmulticast mode [ 396.238153][ T4016] loop3: detected capacity change from 0 to 1024 [ 396.250231][ T4016] EXT4-fs: Ignoring removed orlov option [ 396.271419][ T4024] ip6gre1: entered allmulticast mode [ 396.280542][ T4016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.343003][T29919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.383158][ T4035] netlink: zone id is out of range [ 396.400021][ T4044] loop3: detected capacity change from 0 to 8192 [ 396.406671][ T4035] netlink: zone id is out of range [ 396.411852][ T4035] netlink: zone id is out of range [ 396.432230][ T4044] loop3: p1 p2 p3 p4 [ 396.437325][ T4044] loop3: p3 start 331777 is beyond EOD, truncated [ 396.443810][ T4044] loop3: p4 size 262144 extends beyond EOD, truncated [ 396.629783][ T4088] 9pnet: p9_errstr2errno: server reported unknown error [ 396.891977][ T4132] loop6: detected capacity change from 0 to 1024 [ 396.900210][ T4132] EXT4-fs: Ignoring removed orlov option [ 396.913675][ T4132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.942560][ T4140] tipc: Enabling of bearer rejected, failed to enable media [ 397.062689][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.219676][ T4158] pim6reg1: entered promiscuous mode [ 397.225189][ T4158] pim6reg1: entered allmulticast mode [ 397.321622][ T4174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4174 comm=syz.7.10979 [ 397.339330][ T4171] lo speed is unknown, defaulting to 1000 [ 397.885160][ T4228] loop1: detected capacity change from 0 to 512 [ 397.896695][ T4228] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.10992: corrupted in-inode xattr: invalid ea_ino [ 397.917868][ T4228] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.10992: couldn't read orphan inode 15 (err -117) [ 397.935764][ T4228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.963437][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.485064][ T4274] wireguard0: entered promiscuous mode [ 398.490595][ T4274] wireguard0: entered allmulticast mode [ 398.529705][ T4286] __nla_validate_parse: 6 callbacks suppressed [ 398.529721][ T4286] netlink: 87 bytes leftover after parsing attributes in process `syz.4.11009'. [ 398.550799][ T4288] loop6: detected capacity change from 0 to 1024 [ 398.560630][ T4288] EXT4-fs: Ignoring removed orlov option [ 398.568010][ T4288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.710253][ T4308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11011'. [ 398.745317][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.849735][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11025'. [ 398.866622][ T4342] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 398.895575][ T4349] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11024'. [ 398.912175][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11024'. [ 398.918772][ T4348] loop1: detected capacity change from 0 to 1024 [ 398.921326][ T4349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11024'. [ 398.954422][ T4348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.010496][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.174710][ T4378] syzkaller0: entered promiscuous mode [ 399.180242][ T4378] syzkaller0: entered allmulticast mode [ 399.244457][ T4390] random: crng reseeded on system resumption [ 399.300452][ T4401] veth0: entered promiscuous mode [ 399.307156][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11042'. [ 399.322564][ T4401] veth0 (unregistering): left promiscuous mode [ 399.330340][ T4405] loop3: detected capacity change from 0 to 512 [ 399.352186][ T4405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 399.367325][ T4405] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.432177][ T4405] loop3: detected capacity change from 512 to 64 [ 399.453982][T29919] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory [ 399.472968][T29919] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 399.496628][ T4422] tipc: Enabling of bearer rejected, failed to enable media [ 399.531413][T29919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 399.547090][ T4426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11051'. [ 399.577573][ T4426] netlink: 'syz.1.11051': attribute type 1 has an invalid length. [ 399.675791][ T4420] lo speed is unknown, defaulting to 1000 [ 399.773966][ T4433] lo speed is unknown, defaulting to 1000 [ 399.821700][ T4434] lo speed is unknown, defaulting to 1000 [ 399.881126][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11060'. [ 399.890810][ T4485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11060'. [ 400.307521][ T4434] chnl_net:caif_netlink_parms(): no params data found [ 400.362286][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.369453][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.389171][ T4434] bridge_slave_0: entered allmulticast mode [ 400.411598][ T4434] bridge_slave_0: entered promiscuous mode [ 400.428575][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.435775][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.443307][ T4434] bridge_slave_1: entered allmulticast mode [ 400.450226][ T4434] bridge_slave_1: entered promiscuous mode [ 400.470332][ T4434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.481190][ T4434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.503073][ T4434] team0: Port device team_slave_0 added [ 400.511851][ T4434] team0: Port device team_slave_1 added [ 400.531620][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.538640][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.564721][ T4434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.586007][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.589211][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 400.589235][ T29] audit: type=1400 audit(2000000077.275:18295): avc: denied { read } for pid=4763 comm="syz.4.11073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 400.592987][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.644529][ T4434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.675479][ T4434] hsr_slave_0: entered promiscuous mode [ 400.681501][ T4434] hsr_slave_1: entered promiscuous mode [ 400.687329][ T4434] debugfs: 'hsr0' already exists in 'hsr' [ 400.693150][ T4434] Cannot create hsr debugfs directory [ 400.839170][ T4874] SELinux: failed to load policy [ 400.945123][ T4434] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 400.956631][ T4434] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 400.967904][ T4434] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 400.978056][ T4434] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 401.048803][ T4434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.074088][ T4434] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.093438][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.100552][ T5589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.125283][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.132396][ T5552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.205363][ T4434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.244367][ T29] audit: type=1326 audit(2000000077.958:18296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.11087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 401.268181][ T29] audit: type=1326 audit(2000000077.958:18297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.11087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 401.291929][ T29] audit: type=1326 audit(2000000077.958:18298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.11087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 401.315641][ T29] audit: type=1326 audit(2000000077.958:18299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.11087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 401.360214][ T29] audit: type=1326 audit(2000000077.958:18300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.11087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 401.383797][ T29] audit: type=1326 audit(2000000077.958:18301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.11087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 401.421807][ T4434] veth0_vlan: entered promiscuous mode [ 401.430986][ T4434] veth1_vlan: entered promiscuous mode [ 401.447590][ T4955] netlink: 'syz.1.11094': attribute type 10 has an invalid length. [ 401.449850][ T4434] veth0_macvtap: entered promiscuous mode [ 401.463419][ T4955] team0: Port device dummy0 added [ 401.470234][ T4955] netlink: 'syz.1.11094': attribute type 10 has an invalid length. [ 401.471256][ T4434] veth1_macvtap: entered promiscuous mode [ 401.489980][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.498727][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.508749][ T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.518308][ T4955] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 401.530953][ T4955] team0: Failed to send options change via netlink (err -105) [ 401.538967][ T4955] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 401.548130][ T4955] team0: Port device dummy0 removed [ 401.558198][ T4955] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 401.571333][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.593290][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.610305][ T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.651597][ T4962] Falling back ldisc for ttyS3. [ 401.843957][ T4999] netlink: 'syz.6.11108': attribute type 10 has an invalid length. [ 401.853210][ T4999] team0: Port device dummy0 added [ 401.860672][ T4999] netlink: 'syz.6.11108': attribute type 10 has an invalid length. [ 401.869208][ T4999] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 401.881997][ T4999] team0: Failed to send options change via netlink (err -105) [ 401.890267][ T4999] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 401.899975][ T4999] team0: Port device dummy0 removed [ 401.940672][ T29] audit: type=1326 audit(2000000078.693:18302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 401.964604][ T29] audit: type=1326 audit(2000000078.693:18303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 401.988866][ T29] audit: type=1326 audit(2000000078.693:18304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 402.019431][ T5013] loop1: detected capacity change from 0 to 1024 [ 402.026321][ T5013] EXT4-fs: Ignoring removed orlov option [ 402.036463][ T5013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.237557][ T5031] netlink: 'syz.7.11121': attribute type 13 has an invalid length. [ 402.254073][ T5031] gretap0: refused to change device tx_queue_len [ 402.261037][ T5031] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 402.391385][ T5041] netlink: 'syz.4.11125': attribute type 10 has an invalid length. [ 402.410654][ T5041] team0: Port device dummy0 added [ 402.430851][ T5041] netlink: 'syz.4.11125': attribute type 10 has an invalid length. [ 402.442924][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.449077][ T5041] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 402.469095][ T5041] team0: Failed to send options change via netlink (err -105) [ 402.485057][ T5041] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 402.495186][ T5041] team0: Port device dummy0 removed [ 402.505278][ T5041] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 402.617952][ T5064] syzkaller0: entered promiscuous mode [ 402.623658][ T5064] syzkaller0: entered allmulticast mode [ 402.706424][T14003] hid (null): global environment stack underflow [ 402.713263][T14003] hid (null): report_id 0 is invalid [ 402.730065][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.737650][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.745117][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.752528][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.759923][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.767345][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.774875][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.782356][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.790052][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.797565][T14003] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 402.805207][T14003] hid-generic 0000:0000:0000.001A: global environment stack underflow [ 402.813643][T14003] hid-generic 0000:0000:0000.001A: item 0 4 1 11 parsing failed [ 402.830834][T14003] hid-generic 0000:0000:0000.001A: probe with driver hid-generic failed with error -22 [ 402.980657][ T5096] netlink: 'syz.8.11143': attribute type 10 has an invalid length. [ 402.996150][ T5096] team0: Port device dummy0 added [ 403.012896][ T5096] netlink: 'syz.8.11143': attribute type 10 has an invalid length. [ 403.023729][ T5096] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 403.060131][ T5096] team0: Failed to send options change via netlink (err -105) [ 403.077346][ T5096] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 403.106049][ T5096] team0: Port device dummy0 removed [ 403.124229][ T5096] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 403.289266][ T5113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.296581][ T5113] IPv6: NLM_F_CREATE should be set when creating new route [ 403.329890][ T5113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.337154][ T5113] IPv6: NLM_F_CREATE should be set when creating new route [ 403.922360][ T5140] bond0: (slave dummy0): Releasing backup interface [ 403.934492][ T5140] team0: Failed to send options change via netlink (err -105) [ 403.942050][ T5140] team0: Port device dummy0 added [ 403.953845][ T5140] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 403.964507][ T5140] team0: Failed to send options change via netlink (err -105) [ 403.979875][ T5140] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 403.996766][ T5140] team0: Port device dummy0 removed [ 404.005053][ T5140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 404.077219][ T5150] loop8: detected capacity change from 0 to 2048 [ 404.125109][ T5150] loop8: p2 p3 p7 [ 404.265214][ T5181] loop6: detected capacity change from 0 to 1024 [ 404.287517][ T5181] EXT4-fs: Ignoring removed bh option [ 404.293515][ T5181] EXT4-fs: inline encryption not supported [ 404.310733][ T5181] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 404.337068][ T5185] team0: Port device dummy0 added [ 404.344222][ T5181] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 404.357255][ T5192] validate_nla: 3 callbacks suppressed [ 404.357271][ T5192] netlink: 'syz.4.11176': attribute type 1 has an invalid length. [ 404.376249][ T5185] netlink: 'syz.7.11173': attribute type 10 has an invalid length. [ 404.386494][ T5181] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.11171: lblock 2 mapped to illegal pblock 2 (length 1) [ 404.400956][ T5185] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 404.402919][ T5181] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.11171: lblock 0 mapped to illegal pblock 48 (length 1) [ 404.427189][ T5197] __nla_validate_parse: 7 callbacks suppressed [ 404.427204][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11176'. [ 404.442883][ T5185] team0: Failed to send options change via netlink (err -105) [ 404.445727][ T5181] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.11171: Failed to acquire dquot type 0 [ 404.450551][ T5185] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 404.470580][ T5181] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 404.480274][ T5181] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.11171: mark_inode_dirty error [ 404.480399][ T5185] team0: Port device dummy0 removed [ 404.491911][ T5181] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 404.521854][ T5181] EXT4-fs (loop6): 1 orphan inode deleted [ 404.523258][ T5192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.528001][ T5181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.547421][ T5562] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 404.570024][ T5197] bond3 (unregistering): Released all slaves [ 404.578502][ T5562] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:17: Failed to release dquot type 0 [ 404.590096][ T5181] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm syz.6.11171: lblock 1 mapped to illegal pblock 1 (length 1) [ 404.619339][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.632421][T29160] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 404.638572][ T5266] loop8: detected capacity change from 0 to 512 [ 404.652786][T29160] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 404.663173][T29160] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 404.667123][ T5266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.708327][ T5266] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.733206][ T5266] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.787711][ T5280] bridge0: port 3(macsec1) entered blocking state [ 404.794282][ T5280] bridge0: port 3(macsec1) entered disabled state [ 404.819510][ T5273] loop6: detected capacity change from 0 to 1024 [ 404.828485][ T5273] EXT4-fs: Ignoring removed bh option [ 404.834397][ T5280] macsec1: entered allmulticast mode [ 404.839724][ T5280] bridge0: entered allmulticast mode [ 404.848082][ T5273] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 404.859952][ T5280] macsec1: left allmulticast mode [ 404.865103][ T5280] bridge0: left allmulticast mode [ 404.872585][ T5273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 404.881082][ T5273] System zones: 0-1, 3-12 [ 404.892139][ T5273] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.11190: lblock 1 mapped to illegal pblock 1 (length 1) [ 404.906640][ T5273] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.11190: Failed to acquire dquot type 0 [ 404.918353][ T5273] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.11190: Freeing blocks not in datazone - block = 0, count = 4096 [ 404.932199][ T5273] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.11190: Invalid inode bitmap blk 0 in block_group 0 [ 404.932322][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.954149][ T41] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 404.954229][ T5273] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 404.954354][ T5273] EXT4-fs (loop6): 1 orphan inode deleted [ 404.969154][ T41] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 404.984976][ T5273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.038281][ T5273] EXT4-fs: Ignoring removed bh option [ 405.043925][ T5293] loop8: detected capacity change from 0 to 1024 [ 405.044337][ T5273] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 405.056045][ T5293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.070752][ T5293] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.119709][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.139259][ T5302] netlink: 'syz.4.11197': attribute type 1 has an invalid length. [ 405.170617][ T5302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.186054][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11197'. [ 405.205919][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.223691][ T5344] netlink: 'syz.7.11191': attribute type 1 has an invalid length. [ 405.243891][ T5302] bond3 (unregistering): Released all slaves [ 405.273271][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11191'. [ 405.274367][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.295192][ T5415] bond0 (unregistering): Released all slaves [ 405.309391][ T5382] syzkaller1: entered promiscuous mode [ 405.314937][ T5382] syzkaller1: entered allmulticast mode [ 405.346192][ T5458] netlink: 256 bytes leftover after parsing attributes in process `syz.6.11204'. [ 405.620493][ T5494] netlink: 'syz.7.11206': attribute type 1 has an invalid length. [ 405.630160][ T5496] netlink: 'syz.6.11217': attribute type 10 has an invalid length. [ 405.646328][ T5494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.660827][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11206'. [ 405.673349][ T5496] team0: Port device dummy0 added [ 405.680525][ T5496] netlink: 'syz.6.11217': attribute type 10 has an invalid length. [ 405.701236][ T5494] bond0 (unregistering): Released all slaves [ 405.742568][ T5496] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 405.760757][ T5603] netlink: 'syz.1.11208': attribute type 1 has an invalid length. [ 405.768719][ T5496] team0: Failed to send options change via netlink (err -105) [ 405.779352][ T5496] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 405.800094][ T5496] team0: Port device dummy0 removed [ 405.817211][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11208'. [ 405.867203][ T5603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.903014][ T5634] bond1 (unregistering): Released all slaves [ 405.929393][ T5633] macsec0: entered allmulticast mode [ 405.992207][ T5714] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11214'. [ 406.037516][ T5716] loop1: detected capacity change from 0 to 512 [ 406.062361][ T5716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.067312][ T5714] wg2: left promiscuous mode [ 406.075678][ T5714] wg2: left allmulticast mode [ 406.082791][ T5714] geneve2: left promiscuous mode [ 406.160293][ T5716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.183027][ T5716] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.236496][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.308946][ T5735] lo speed is unknown, defaulting to 1000 [ 406.361405][ T5746] lo speed is unknown, defaulting to 1000 [ 406.465057][ T5783] loop1: detected capacity change from 0 to 128 [ 406.542306][ T5783] bio_check_eod: 110 callbacks suppressed [ 406.542353][ T5783] syz.1.11228: attempt to access beyond end of device [ 406.542353][ T5783] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 406.807973][ T5638] loop8: detected capacity change from 0 to 1024 [ 406.838631][ T5638] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.918518][ T5827] netlink: 2 bytes leftover after parsing attributes in process `syz.7.11235'. [ 406.989221][ T5827] wg2: left allmulticast mode [ 406.996116][ T5827] macsec0: left allmulticast mode [ 407.001756][ T5827] batadv1: left allmulticast mode [ 407.006932][ T5827] batadv2: left allmulticast mode [ 407.023389][ T5827] team1: left allmulticast mode [ 407.082582][ T5831] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11237'. [ 407.128610][ T41] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 407.193166][ T5833] lo speed is unknown, defaulting to 1000 [ 407.214503][ T41] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 304 with error 28 [ 407.227067][ T41] EXT4-fs (loop8): This should not happen!! Data will be lost [ 407.227067][ T41] [ 407.236809][ T41] EXT4-fs (loop8): Total free blocks count 0 [ 407.242788][ T41] EXT4-fs (loop8): Free/Dirty block details [ 407.248729][ T41] EXT4-fs (loop8): free_blocks=4293918720 [ 407.254494][ T41] EXT4-fs (loop8): dirty_blocks=304 [ 407.259695][ T41] EXT4-fs (loop8): Block reservation details [ 407.265782][ T41] EXT4-fs (loop8): i_reserved_data_blocks=19 [ 407.383392][ T5862] loop1: detected capacity change from 0 to 1024 [ 407.396023][ T5862] EXT4-fs: Ignoring removed orlov option [ 407.674820][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 407.674836][ T29] audit: type=1326 audit(2000000084.708:18379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.778062][ T29] audit: type=1326 audit(2000000084.708:18380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.802293][ T29] audit: type=1326 audit(2000000084.708:18381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.826063][ T29] audit: type=1326 audit(2000000084.708:18382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.849664][ T29] audit: type=1326 audit(2000000084.708:18383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.873328][ T29] audit: type=1326 audit(2000000084.708:18384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.896908][ T29] audit: type=1326 audit(2000000084.708:18385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.920557][ T29] audit: type=1326 audit(2000000084.708:18386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.944376][ T29] audit: type=1326 audit(2000000084.708:18387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 407.967986][ T29] audit: type=1326 audit(2000000084.708:18388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.7.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 408.065052][ T5902] lo speed is unknown, defaulting to 1000 [ 408.116323][ T5922] bridge0: port 1(macsec1) entered blocking state [ 408.122930][ T5922] bridge0: port 1(macsec1) entered disabled state [ 408.131634][ T5922] macsec1: entered allmulticast mode [ 408.137065][ T5922] bridge0: entered allmulticast mode [ 408.148592][ T5929] netlink: 2 bytes leftover after parsing attributes in process `syz.8.11265'. [ 408.161917][ T5922] macsec1: left allmulticast mode [ 408.167040][ T5922] bridge0: left allmulticast mode [ 408.241613][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.248868][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.321821][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.332225][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.404326][ T5569] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.435640][ T5970] loop6: detected capacity change from 0 to 1024 [ 408.456990][ T5970] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.472153][ T5569] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.490171][ T5569] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.509298][ T5976] hub 8-0:1.0: USB hub found [ 408.521123][ T5569] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.529300][ T5976] hub 8-0:1.0: 8 ports detected [ 408.602529][ T5569] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:24: bg 0: block 393: padding at end of block bitmap is not set [ 408.629622][ T6003] loop8: detected capacity change from 0 to 512 [ 408.639291][ T5569] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1280 with max blocks 4 with error 117 [ 408.652026][ T5569] EXT4-fs (loop6): This should not happen!! Data will be lost [ 408.652026][ T5569] [ 408.666747][ T6003] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 408.677926][ T6003] EXT4-fs (loop8): orphan cleanup on readonly fs [ 408.686950][ T6003] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 408.706608][ T6003] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 408.729447][ T6003] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11277: bg 0: block 40: padding at end of block bitmap is not set [ 408.748016][ T6003] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 408.771241][ T6003] EXT4-fs (loop8): 1 truncate cleaned up [ 408.783693][ T6011] loop6: detected capacity change from 0 to 8192 [ 408.834377][ T6011] loop6: p1 p2 p3 p4 [ 408.846799][ T6011] loop6: p3 start 331777 is beyond EOD, truncated [ 408.853475][ T6011] loop6: p4 size 262144 extends beyond EOD, truncated [ 408.880164][ T6028] lo speed is unknown, defaulting to 1000 [ 409.034317][ T6079] loop6: detected capacity change from 0 to 512 [ 409.041614][ T6079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 409.060855][ T6079] EXT4-fs (loop6): 1 truncate cleaned up [ 409.067594][ T6079] EXT4-fs mount: 8 callbacks suppressed [ 409.067611][ T6079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.130116][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.907831][ T6125] __nla_validate_parse: 2 callbacks suppressed [ 409.907846][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11301'. [ 410.068764][ T6158] bridge0: port 3(macsec1) entered blocking state [ 410.075318][ T6158] bridge0: port 3(macsec1) entered disabled state [ 410.085444][ T6158] macsec1: entered allmulticast mode [ 410.090835][ T6158] bridge0: entered allmulticast mode [ 410.096740][ T6158] macsec1: left allmulticast mode [ 410.101896][ T6158] bridge0: left allmulticast mode [ 410.121508][ T6164] wireguard1: entered promiscuous mode [ 410.127054][ T6164] wireguard1: entered allmulticast mode [ 410.954476][ T6215] loop8: detected capacity change from 0 to 128 [ 410.964468][ T6216] lo speed is unknown, defaulting to 1000 [ 410.976659][ T6215] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 410.984648][ T6215] FAT-fs (loop8): Filesystem has been set read-only [ 410.996184][ T6215] syz.8.11328: attempt to access beyond end of device [ 410.996184][ T6215] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 411.201285][ T6254] loop6: detected capacity change from 0 to 512 [ 411.210924][ T6254] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 411.222876][ T6254] EXT4-fs (loop6): 1 truncate cleaned up [ 411.239133][ T6254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.300955][T29160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.871755][ T6292] netlink: 'syz.1.11343': attribute type 10 has an invalid length. [ 411.897677][ T6292] bond0: (slave dummy0): Releasing backup interface [ 411.914979][ T6292] team0: Failed to send options change via netlink (err -105) [ 411.922535][ T6292] team0: Port device dummy0 added [ 411.928426][ T6293] netlink: 'syz.1.11343': attribute type 10 has an invalid length. [ 411.937048][ T6293] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 411.947868][ T6293] team0: Failed to send options change via netlink (err -105) [ 411.955504][ T6293] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 411.964620][ T6293] team0: Port device dummy0 removed [ 411.971503][ T6293] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 412.551748][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 412.551830][ T29] audit: type=1326 audit(2000000345.835:18800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.8.11347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 412.581794][ T29] audit: type=1326 audit(2000000345.835:18801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.8.11347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 412.589946][ T6308] blk_print_req_error: 58 callbacks suppressed [ 412.589961][ T6308] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.605566][ T29] audit: type=1326 audit(2000000345.835:18802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.8.11347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 412.614002][ T6308] FAT-fs (loop15): unable to read boot sector [ 412.690697][ T29] audit: type=1326 audit(2000000345.866:18803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.7.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 412.714466][ T29] audit: type=1326 audit(2000000345.866:18804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.7.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 412.738059][ T29] audit: type=1326 audit(2000000345.866:18805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.7.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 412.762199][ T29] audit: type=1326 audit(2000000345.866:18806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.7.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 412.778667][ T6315] lo speed is unknown, defaulting to 1000 [ 412.786086][ T29] audit: type=1326 audit(2000000345.866:18807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.7.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 412.815828][ T29] audit: type=1326 audit(2000000345.866:18808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.7.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 412.839551][ T29] audit: type=1326 audit(2000000345.866:18809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.7.11349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 412.967282][ T6342] loop8: detected capacity change from 0 to 512 [ 412.980894][ T6342] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 412.995444][ T6342] EXT4-fs (loop8): 1 truncate cleaned up [ 413.002185][ T6342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.091977][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.213772][ T6356] loop8: detected capacity change from 0 to 128 [ 414.237742][ T6380] lo speed is unknown, defaulting to 1000 [ 414.282808][ T6399] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11369'. [ 414.324262][ T6425] netlink: 'syz.4.11370': attribute type 10 has an invalid length. [ 414.338303][ T6437] loop1: detected capacity change from 0 to 512 [ 414.358392][ T6425] bond0: (slave dummy0): Releasing backup interface [ 414.367930][ T6425] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 414.377196][ T6425] team0: Failed to send options change via netlink (err -105) [ 414.384868][ T6425] team0: Port device dummy0 added [ 414.391108][ T6437] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 414.399218][ T6437] EXT4-fs (loop1): orphan cleanup on readonly fs [ 414.409621][ T6425] netlink: 'syz.4.11370': attribute type 10 has an invalid length. [ 414.415434][ T6437] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 414.418209][ T6425] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 414.442287][ T6437] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 414.451282][ T6437] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11368: bg 0: block 40: padding at end of block bitmap is not set [ 414.452005][ T6425] team0: Failed to send options change via netlink (err -105) [ 414.466472][ T6437] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 414.478600][ T6425] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 414.482576][ T6437] EXT4-fs (loop1): 1 truncate cleaned up [ 414.491385][ T6425] team0: Port device dummy0 removed [ 414.496959][ T6437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 414.506054][ T6425] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 414.534933][ T6380] chnl_net:caif_netlink_parms(): no params data found [ 414.557466][ T6519] loop8: detected capacity change from 0 to 256 [ 414.611998][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.630454][ T6556] loop8: detected capacity change from 0 to 512 [ 414.640798][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.648039][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.655703][ T6556] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11376: bg 0: block 248: padding at end of block bitmap is not set [ 414.656628][ T6380] bridge_slave_0: entered allmulticast mode [ 414.670700][ T6556] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.11376: Failed to acquire dquot type 1 [ 414.688785][ T6556] EXT4-fs (loop8): 1 truncate cleaned up [ 414.695164][ T6556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.707931][ T6556] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.719226][ T6380] bridge_slave_0: entered promiscuous mode [ 414.721949][ T6556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.726548][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.741052][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.748663][ T6380] bridge_slave_1: entered allmulticast mode [ 414.756431][ T6380] bridge_slave_1: entered promiscuous mode [ 414.764491][ T6592] tipc: Enabling of bearer rejected, failed to enable media [ 414.805231][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.816416][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.820953][ T6620] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.842176][ T6620] FAT-fs (loop17): unable to read boot sector [ 414.849802][ T6380] team0: Port device team_slave_0 added [ 414.860019][ T6380] team0: Port device team_slave_1 added [ 414.878319][ T6620] loop8: detected capacity change from 0 to 164 [ 414.891030][ T6660] loop1: detected capacity change from 0 to 128 [ 414.906850][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.913982][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.940051][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.955983][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.962993][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.989143][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.010933][ T6622] lo speed is unknown, defaulting to 1000 [ 415.022349][ T6380] hsr_slave_0: entered promiscuous mode [ 415.027409][ T6660] FAT-fs (loop1): Directory bread(block 32) failed [ 415.037635][ T6380] hsr_slave_1: entered promiscuous mode [ 415.043610][ T6380] debugfs: 'hsr0' already exists in 'hsr' [ 415.049446][ T6380] Cannot create hsr debugfs directory [ 415.065196][ T6717] netlink: 'syz.7.11385': attribute type 10 has an invalid length. [ 415.073722][ T6660] FAT-fs (loop1): Directory bread(block 33) failed [ 415.082755][ T6660] FAT-fs (loop1): Directory bread(block 34) failed [ 415.090695][ T6717] team0: Port device dummy0 added [ 415.097955][ T6717] netlink: 'syz.7.11385': attribute type 10 has an invalid length. [ 415.121188][ T6660] FAT-fs (loop1): Directory bread(block 35) failed [ 415.129351][ T6717] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 415.147614][ T6660] FAT-fs (loop1): Directory bread(block 36) failed [ 415.155553][ T6660] FAT-fs (loop1): Directory bread(block 37) failed [ 415.163404][ T6660] FAT-fs (loop1): Directory bread(block 38) failed [ 415.178866][ T6717] team0: Failed to send options change via netlink (err -105) [ 415.186443][ T6717] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 415.197310][ T6660] FAT-fs (loop1): Directory bread(block 39) failed [ 415.204306][ T6660] FAT-fs (loop1): Directory bread(block 40) failed [ 415.206603][ T6717] team0: Port device dummy0 removed [ 415.251775][ T6660] FAT-fs (loop1): Directory bread(block 41) failed [ 415.375132][ T6380] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.426068][ T6380] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.440051][ T6622] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 415.448695][ T6622] FAT-fs (loop1): Filesystem has been set read-only [ 415.466724][ T6622] syz.1.11380: attempt to access beyond end of device [ 415.466724][ T6622] loop1: rw=2049, sector=4184, nr_sectors = 8 limit=128 [ 415.488781][ T6822] loop8: detected capacity change from 0 to 512 [ 415.509428][ T6822] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 415.520769][ T6622] syz.1.11380: attempt to access beyond end of device [ 415.520769][ T6622] loop1: rw=2049, sector=4200, nr_sectors = 4 limit=128 [ 415.537839][ T6622] Buffer I/O error on dev loop1, logical block 1050, lost async page write [ 415.538056][ T6822] EXT4-fs (loop8): mount failed [ 415.551785][ T6622] syz.1.11380: attempt to access beyond end of device [ 415.551785][ T6622] loop1: rw=2049, sector=4208, nr_sectors = 4 limit=128 [ 415.565450][ T6622] Buffer I/O error on dev loop1, logical block 1052, lost async page write [ 415.575395][ T6380] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.587373][ T6622] syz.1.11380: attempt to access beyond end of device [ 415.587373][ T6622] loop1: rw=2049, sector=4220, nr_sectors = 4 limit=128 [ 415.601216][ T6622] Buffer I/O error on dev loop1, logical block 1055, lost async page write [ 415.635876][ T6622] syz.1.11380: attempt to access beyond end of device [ 415.635876][ T6622] loop1: rw=2049, sector=4228, nr_sectors = 4 limit=128 [ 415.649564][ T6622] Buffer I/O error on dev loop1, logical block 1057, lost async page write [ 415.659349][ T6380] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.678666][ T6622] syz.1.11380: attempt to access beyond end of device [ 415.678666][ T6622] loop1: rw=2049, sector=4240, nr_sectors = 4 limit=128 [ 415.692335][ T6622] Buffer I/O error on dev loop1, logical block 1060, lost async page write [ 415.714592][ T6622] syz.1.11380: attempt to access beyond end of device [ 415.714592][ T6622] loop1: rw=2049, sector=4248, nr_sectors = 4 limit=128 [ 415.728267][ T6622] Buffer I/O error on dev loop1, logical block 1062, lost async page write [ 415.783110][ T6622] syz.1.11380: attempt to access beyond end of device [ 415.783110][ T6622] loop1: rw=2049, sector=4252, nr_sectors = 4 limit=128 [ 415.801321][ T6380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 415.912993][ T6380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 415.939190][ T6380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 415.986550][ T6380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.016862][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11402'. [ 416.032538][ T6868] loop1: detected capacity change from 0 to 1024 [ 416.056023][ T6868] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 416.064178][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.067049][ T6868] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 416.082567][ T6380] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.094933][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.102078][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.132503][ T6868] JBD2: no valid journal superblock found [ 416.138377][ T6868] EXT4-fs (loop1): Could not load journal inode [ 416.160294][ T5569] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.167395][ T5569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.210151][ T6380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.279565][ T6905] netlink: 'syz.4.11412': attribute type 1 has an invalid length. [ 416.306571][ T6905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.327387][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11412'. [ 416.339195][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.362043][ T6905] bond3 (unregistering): Released all slaves [ 416.503993][ T7004] loop8: detected capacity change from 0 to 128 [ 416.536459][ T7004] EXT4-fs: test_dummy_encryption option not supported [ 416.593471][ T7004] loop8: detected capacity change from 0 to 128 [ 416.605294][ T6380] veth0_vlan: entered promiscuous mode [ 416.627192][ T6380] veth1_vlan: entered promiscuous mode [ 416.670390][ T6380] veth0_macvtap: entered promiscuous mode [ 416.677768][ T6380] veth1_macvtap: entered promiscuous mode [ 416.691011][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.711080][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.720940][ T5606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.746372][ T5606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.785574][ T5606] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.802500][ T5606] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.846239][ T7051] serio: Serial port ptm0 [ 416.951867][ T7074] wireguard1: entered promiscuous mode [ 416.957514][ T7074] wireguard1: entered allmulticast mode [ 416.976308][ T7077] bridge0: port 1(macsec1) entered blocking state [ 416.982844][ T7077] bridge0: port 1(macsec1) entered disabled state [ 416.989736][ T7077] macsec1: entered allmulticast mode [ 416.995158][ T7077] bridge0: entered allmulticast mode [ 417.001540][ T7077] macsec1: left allmulticast mode [ 417.006680][ T7077] bridge0: left allmulticast mode [ 417.157361][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11438'. [ 417.157841][ T7104] loop1: detected capacity change from 0 to 1024 [ 417.190149][ T7104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.199781][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11442'. [ 417.218164][ T7104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.243235][ T7117] tipc: Enabling of bearer rejected, failed to enable media [ 417.305173][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.415779][ T7122] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.11443' sets config #0 [ 417.472675][ T29] kauditd_printk_skb: 854 callbacks suppressed [ 417.472691][ T29] audit: type=1400 audit(2000000350.989:19660): avc: denied { getopt } for pid=7140 comm="syz.7.11454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.766773][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812a8e7e00: rx timeout, send abort [ 417.775097][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812a8e6a00: rx timeout, send abort [ 417.783433][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812a8e7e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 417.797784][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812a8e6a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 417.929565][ T7203] bridge0: entered promiscuous mode [ 417.942802][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11475'. [ 417.960421][ T7203] bridge0: port 3(macsec1) entered blocking state [ 417.967001][ T7203] bridge0: port 3(macsec1) entered disabled state [ 417.985657][ T7203] macsec1: entered allmulticast mode [ 417.991062][ T7203] bridge0: entered allmulticast mode [ 418.014602][ T7203] macsec1: left allmulticast mode [ 418.019786][ T7203] bridge0: left allmulticast mode [ 418.026911][ T7203] bridge0: left promiscuous mode [ 418.049574][ T7210] bridge2: entered allmulticast mode [ 418.109996][ T7223] wireguard0: entered promiscuous mode [ 418.115653][ T7223] wireguard0: entered allmulticast mode [ 418.343992][ T7249] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11483'. [ 418.392637][ T7257] loop5: detected capacity change from 0 to 2048 [ 418.419901][ T7257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.439821][ T7257] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 418.455192][ T7257] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 418.467676][ T7257] EXT4-fs (loop5): This should not happen!! Data will be lost [ 418.467676][ T7257] [ 418.477464][ T7257] EXT4-fs (loop5): Total free blocks count 0 [ 418.483828][ T7257] EXT4-fs (loop5): Free/Dirty block details [ 418.489732][ T7257] EXT4-fs (loop5): free_blocks=2415919104 [ 418.495471][ T7257] EXT4-fs (loop5): dirty_blocks=16 [ 418.500634][ T7257] EXT4-fs (loop5): Block reservation details [ 418.506678][ T7257] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 418.525772][ T6380] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.570986][ T6380] EXT4-fs error (device loop5): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.591366][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 418.622543][ T6380] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.644914][ T7271] loop8: detected capacity change from 0 to 8192 [ 418.651979][ T6380] EXT4-fs error (device loop5): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.672424][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 418.684470][ T6380] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.707021][ T6380] EXT4-fs error (device loop5): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.727461][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 418.739581][ T7271] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 418.750388][ T6380] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.772819][ T6380] EXT4-fs error (device loop5): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.793069][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 418.805008][ T6380] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 418.827562][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 418.843460][ T29] audit: type=1326 audit(2000000352.428:19661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 418.843571][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 418.867163][ T29] audit: type=1326 audit(2000000352.428:19662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 418.881917][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 418.902263][ T29] audit: type=1326 audit(2000000352.428:19663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 418.917068][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 418.937415][ T29] audit: type=1326 audit(2000000352.428:19664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 418.937453][ T29] audit: type=1326 audit(2000000352.428:19665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 418.937479][ T29] audit: type=1326 audit(2000000352.428:19666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 419.019991][ T29] audit: type=1326 audit(2000000352.428:19667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 419.020589][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 419.043727][ T29] audit: type=1326 audit(2000000352.428:19668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 419.066461][ T6380] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..' [ 419.079295][ T29] audit: type=1326 audit(2000000352.428:19669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7276 comm="syz.7.11496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 420.064637][ T7319] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.11506' sets config #0 [ 420.116037][ T7327] loop8: detected capacity change from 0 to 128 [ 420.155774][ T7327] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.174691][ T7327] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 420.205209][ T4434] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.332402][ T6380] Trying to write to read-only block-device loop5 [ 420.346211][ T5606] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.357321][ T6380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.400800][ T5606] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.490291][ T5606] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.547462][ T5606] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.650710][ T5606] bridge_slave_1: left allmulticast mode [ 420.656435][ T5606] bridge_slave_1: left promiscuous mode [ 420.662084][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.690146][ T5606] bridge_slave_0: left allmulticast mode [ 420.695860][ T5606] bridge_slave_0: left promiscuous mode [ 420.701612][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.857615][ T5606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.875298][ T5606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.894409][ T5606] bond0 (unregistering): Released all slaves [ 420.948480][ T7351] lo speed is unknown, defaulting to 1000 [ 421.030168][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11523'. [ 421.087180][ T5606] hsr_slave_0: left promiscuous mode [ 421.105373][ T5606] hsr_slave_1: left promiscuous mode [ 421.111057][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.118514][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.141403][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.148812][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.166153][ T5606] veth1_macvtap: left promiscuous mode [ 421.179236][ T5606] veth0_macvtap: left promiscuous mode [ 421.194845][ T5606] veth1_vlan: left promiscuous mode [ 421.200213][ T5606] veth0_vlan: left promiscuous mode [ 421.326259][ T5606] team0 (unregistering): Port device team_slave_1 removed [ 421.336816][ T5606] team0 (unregistering): Port device team_slave_0 removed [ 421.379230][ T7415] netlink: 664 bytes leftover after parsing attributes in process `syz.8.11526'. [ 421.525137][ T7351] chnl_net:caif_netlink_parms(): no params data found [ 421.558815][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11532'. [ 421.631534][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.638854][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.654230][ T7351] bridge_slave_0: entered allmulticast mode [ 421.664175][ T7351] bridge_slave_0: entered promiscuous mode [ 421.671366][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.678766][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.686804][ T7351] bridge_slave_1: entered allmulticast mode [ 421.693359][ T7351] bridge_slave_1: entered promiscuous mode [ 421.725254][ T7351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.744678][ T7351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.762889][ T7427] lo speed is unknown, defaulting to 1000 [ 421.807553][ T7351] team0: Port device team_slave_0 added [ 421.814593][ T7351] team0: Port device team_slave_1 added [ 421.827975][ T7639] wireguard1: entered promiscuous mode [ 421.833485][ T7639] wireguard1: entered allmulticast mode [ 421.872682][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.879720][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.905852][ T7351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.919365][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.926370][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.952432][ T7351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.998292][ T7351] hsr_slave_0: entered promiscuous mode [ 422.007046][ T7351] hsr_slave_1: entered promiscuous mode [ 422.013301][ T7351] debugfs: 'hsr0' already exists in 'hsr' [ 422.019097][ T7351] Cannot create hsr debugfs directory [ 422.270048][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 422.270060][ T29] audit: type=1326 audit(2000000356.029:19687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.4.11550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 422.300463][ T29] audit: type=1326 audit(2000000356.029:19688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.4.11550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3377f0ebe9 code=0x7ffc0000 [ 422.357015][ T7822] netlink: 5 bytes leftover after parsing attributes in process `syz.8.11556'. [ 422.366872][ T7822] 0ªî{X¹¦: renamed from gretap0 [ 422.378619][ T7822] 0ªî{X¹¦: entered allmulticast mode [ 422.386471][ T7822] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 422.413087][ T7826] wireguard0: entered promiscuous mode [ 422.418709][ T7826] wireguard0: entered allmulticast mode [ 422.562475][ T7351] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 422.591508][ T7351] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 422.614818][ T7351] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 422.633897][ T7351] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 422.671282][ T7866] loop8: detected capacity change from 0 to 1024 [ 422.681049][ T7866] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 422.692190][ T7866] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 422.706560][ T7866] JBD2: no valid journal superblock found [ 422.712454][ T7866] EXT4-fs (loop8): Could not load journal inode [ 422.776361][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.802239][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.816728][ T29] audit: type=1326 audit(2000000356.595:19689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.7.11572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 422.822291][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.840490][ T29] audit: type=1326 audit(2000000356.595:19690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.7.11572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 422.847410][ T5552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.863309][ T7351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.871008][ T29] audit: type=1326 audit(2000000356.595:19691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.7.11572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 422.878304][ T7351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.888501][ T29] audit: type=1326 audit(2000000356.595:19692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.7.11572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 422.946738][ T29] audit: type=1326 audit(2000000356.595:19693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.7.11572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 422.952689][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.977847][ T5552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.980441][ T29] audit: type=1326 audit(2000000356.595:19694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.7.11572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 423.008916][ T29] audit: type=1326 audit(2000000356.595:19695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.7.11572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 423.032668][ T29] audit: type=1326 audit(2000000356.595:19696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7890 comm="syz.7.11572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7ffc0000 [ 423.102560][ T7351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.228214][ T7351] veth0_vlan: entered promiscuous mode [ 423.238950][ T7351] veth1_vlan: entered promiscuous mode [ 423.254550][ T7351] veth0_macvtap: entered promiscuous mode [ 423.261950][ T7351] veth1_macvtap: entered promiscuous mode [ 423.272971][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.283882][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.297342][ T5552] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.306856][ T5552] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.315933][ T5552] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.326430][ T5552] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.423355][ T7921] wireguard0: entered promiscuous mode [ 423.428913][ T7921] wireguard0: entered allmulticast mode [ 423.695933][ T7946] loop9: detected capacity change from 0 to 1024 [ 423.703651][ T7946] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 423.714753][ T7946] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 423.731881][ T7946] JBD2: no valid journal superblock found [ 423.737652][ T7946] EXT4-fs (loop9): Could not load journal inode [ 423.839494][ T7955] loop9: detected capacity change from 0 to 1024 [ 423.849528][ T7955] EXT4-fs: Ignoring removed orlov option [ 423.875814][ T7955] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.127839][ T7351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.149487][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11591'. [ 424.840942][ T8012] syzkaller0: entered promiscuous mode [ 424.846727][ T8012] syzkaller0: entered allmulticast mode [ 424.880744][ T8038] loop1: detected capacity change from 0 to 1024 [ 424.890295][ T8038] EXT4-fs: Ignoring removed orlov option [ 424.901182][ T8043] netlink: 5 bytes leftover after parsing attributes in process `syz.7.11603'. [ 424.906528][ T8038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.923104][ T8043] 0ªî{X¹¦: renamed from gretap0 [ 424.934528][ T8043] 0ªî{X¹¦: entered allmulticast mode [ 424.952969][ T8043] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 425.210838][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.240801][ T8100] loop1: detected capacity change from 0 to 2048 [ 425.268971][ T8100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.463591][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.525225][ T8154] netlink: 'syz.1.11611': attribute type 1 has an invalid length. [ 425.538679][ T8154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.555702][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11611'. [ 425.569502][ T8154] bond1 (unregistering): Released all slaves [ 425.586695][ T8191] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 425.636435][ T8233] loop1: detected capacity change from 0 to 512 [ 425.644011][ T8233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 425.648753][ T8236] veth0_vlan: entered allmulticast mode [ 425.658519][ T8233] EXT4-fs (loop1): 1 truncate cleaned up [ 425.671410][ T8236] veth0_vlan: left promiscuous mode [ 425.676694][ T8236] veth0_vlan: entered promiscuous mode [ 425.682651][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.707501][ T8233] ext4: Unknown parameter 'VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø' [ 425.736890][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.754854][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11621'. [ 425.776704][ T8249] team1: entered promiscuous mode [ 425.781910][ T8249] team1: entered allmulticast mode [ 425.853795][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11624'. [ 425.945794][ T8295] team1: entered promiscuous mode [ 425.950874][ T8295] team1: entered allmulticast mode [ 425.997281][ T8350] netlink: 'syz.8.11627': attribute type 1 has an invalid length. [ 426.023021][ T8350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.058935][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11627'. [ 426.073132][ T8350] bond1 (unregistering): Released all slaves [ 426.211518][ T8440] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11633'. [ 426.220768][ T8440] netem: unknown loss type 12 [ 426.458613][ T8483] loop8: detected capacity change from 0 to 512 [ 426.465433][ T8483] msdos: Bad value for 'uid' [ 426.470323][ T8483] msdos: Bad value for 'uid' [ 426.659220][ T8535] loop1: detected capacity change from 0 to 164 [ 426.668165][ T8535] ISOFS: unable to read i-node block [ 426.673563][ T8535] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 426.684341][ T8535] @: renamed from vlan0 [ 426.786883][ T3391] hid_parser_main: 14 callbacks suppressed [ 426.786900][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.800573][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.813787][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.821283][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.828732][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.836171][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.843625][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.851052][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.858532][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.865996][ T3391] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.874150][ T3391] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 426.944784][ T8593] loop1: detected capacity change from 0 to 2048 [ 426.951752][ T8593] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.001390][ T8593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.112804][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.273375][ T8635] loop1: detected capacity change from 0 to 1024 [ 427.284195][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 427.284210][ T29] audit: type=1326 audit(2000000361.288:19734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 427.315352][ T8635] EXT4-fs: Ignoring removed nobh option [ 427.320967][ T8635] EXT4-fs: Ignoring removed bh option [ 427.327430][ T29] audit: type=1326 audit(2000000361.330:19735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 427.351129][ T29] audit: type=1326 audit(2000000361.341:19736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 427.360174][ T8640] loop8: detected capacity change from 0 to 128 [ 427.374801][ T29] audit: type=1326 audit(2000000361.341:19737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 427.404665][ T29] audit: type=1326 audit(2000000361.341:19738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 427.428576][ T29] audit: type=1326 audit(2000000361.341:19739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff0d333ebe9 code=0x7ffc0000 [ 427.452240][ T29] audit: type=1326 audit(2000000361.341:19740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0d333ec23 code=0x7ffc0000 [ 427.481224][ T8635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.481409][ T29] audit: type=1326 audit(2000000361.341:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0d333d69f code=0x7ffc0000 [ 427.517432][ T29] audit: type=1326 audit(2000000361.341:19742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff0d333ec77 code=0x7ffc0000 [ 427.540946][ T29] audit: type=1326 audit(2000000361.372:19743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0d333d550 code=0x7ffc0000 [ 427.546458][ T8635] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.11661: Allocating blocks 385-513 which overlap fs metadata [ 427.600867][ T8639] Process accounting resumed [ 427.609109][ T8639] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 427.616673][ T8639] FAT-fs (loop8): Filesystem has been set read-only [ 427.634058][ T8635] EXT4-fs (loop1): pa ffff888107287e00: logic 16, phys. 129, len 24 [ 427.642344][ T8635] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 427.655692][T13996] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 427.690609][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.917127][ T8701] tipc: Enabling of bearer rejected, failed to enable media [ 428.027118][ T8720] loop9: detected capacity change from 0 to 128 [ 428.129767][ T8744] vhci_hcd: invalid port number 96 [ 428.135036][ T8744] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 428.176322][ T8753] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11687'. [ 428.403121][ T8810] loop1: detected capacity change from 0 to 128 [ 428.443021][ T8810] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.472330][ T8810] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 428.599912][T32710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.713104][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11710'. [ 428.715091][ T8849] lo speed is unknown, defaulting to 1000 [ 428.976144][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11718'. [ 428.987334][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11718'. [ 429.143074][ T8954] loop9: detected capacity change from 0 to 2048 [ 429.194959][ T8954] Alternate GPT is invalid, using primary GPT. [ 429.201409][ T8954] loop9: p1 p2 p3 [ 429.273795][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11733'. [ 429.288118][ T8974] netem: change failed [ 429.295419][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11724'. [ 429.327291][ T8977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.342023][ T9010] veth0_to_team: entered promiscuous mode [ 429.343855][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11724'. [ 429.376812][ T8977] bond1 (unregistering): Released all slaves [ 429.560915][ T9078] loop8: detected capacity change from 0 to 512 [ 429.584684][ T9078] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 429.613264][ T9078] EXT4-fs (loop8): 1 truncate cleaned up [ 429.638751][ T9078] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.683317][ T9078] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 429.683317][ T9078] program syz.8.11738 not setting count and/or reply_len properly [ 429.790344][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.123229][ T9180] vhci_hcd: invalid port number 96 [ 430.128500][ T9180] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 430.277569][ T9202] loop9: detected capacity change from 0 to 4096 [ 430.289328][ T9202] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 430.311487][ T9202] System zones: 0-5 [ 430.319976][ T9217] netlink: 'syz.7.11775': attribute type 5 has an invalid length. [ 430.334583][ T9202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.425670][ T7351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.525699][ T9262] loop9: detected capacity change from 0 to 512 [ 430.548009][ T9262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.578905][ T9262] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.793349][ T9312] bridge: RTM_NEWNEIGH with invalid ether address [ 430.915679][ T9334] __nla_validate_parse: 8 callbacks suppressed [ 430.915698][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11798'. [ 430.935704][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11798'. [ 431.199491][ T9382] loop1: detected capacity change from 0 to 2048 [ 431.236988][ T9389] netlink: 'syz.4.11812': attribute type 1 has an invalid length. [ 431.253701][ T9389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.262740][ T9382] Alternate GPT is invalid, using primary GPT. [ 431.269136][ T9382] loop1: p1 p2 p3 [ 431.275973][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11812'. [ 431.292919][ T9389] bond3 (unregistering): Released all slaves [ 431.335275][ T7351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.368873][ T9465] loop8: detected capacity change from 0 to 1024 [ 431.376331][ T9465] EXT4-fs: Ignoring removed nobh option [ 431.382794][ T9465] EXT4-fs: Ignoring removed bh option [ 431.403416][ T9465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.431441][ T9465] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.11815: Allocating blocks 385-513 which overlap fs metadata [ 431.451675][ T9465] EXT4-fs (loop8): pa ffff888107210150: logic 16, phys. 129, len 24 [ 431.459807][ T9465] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 431.503634][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.188002][ T9513] netlink: 248 bytes leftover after parsing attributes in process `syz.1.11827'. [ 432.198966][ T9521] bridge: RTM_NEWNEIGH with invalid ether address [ 432.252931][ T9536] loop9: detected capacity change from 0 to 1764 [ 432.262303][ T9536] netlink: 'syz.9.11834': attribute type 4 has an invalid length. [ 432.299017][ T9543] loop8: detected capacity change from 0 to 2048 [ 432.355548][ T9543] Alternate GPT is invalid, using primary GPT. [ 432.361979][ T9543] loop8: p1 p2 p3 [ 432.397753][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11840'. [ 432.532663][ T9581] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 432.578826][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11853'. [ 432.594837][ T9591] team2: entered promiscuous mode [ 432.599955][ T9591] team2: entered allmulticast mode [ 432.621846][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11854'. [ 432.656544][ T9634] loop1: detected capacity change from 0 to 2048 [ 432.680454][ T9634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.799386][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.825026][ T9652] loop1: detected capacity change from 0 to 256 [ 432.832060][ T9652] msdos: Bad value for 'uid' [ 432.836694][ T9652] msdos: Bad value for 'uid' [ 433.117671][ T9672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9672 comm=syz.1.11864 [ 433.139859][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11866'. [ 433.184249][ T9681] netlink: 'syz.1.11868': attribute type 10 has an invalid length. [ 433.197799][ T9681] bond0: (slave dummy0): Releasing backup interface [ 433.210873][ T9681] team0: Failed to send options change via netlink (err -105) [ 433.218396][ T9681] team0: Port device dummy0 added [ 433.232260][ T9681] netlink: 'syz.1.11868': attribute type 10 has an invalid length. [ 433.241188][ T9681] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 433.254792][ T9681] team0: Failed to send options change via netlink (err -105) [ 433.264272][ T9681] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 433.292493][ T9681] team0: Port device dummy0 removed [ 433.303447][ T9681] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 433.356758][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 433.356774][ T29] audit: type=1326 audit(2000000367.671:19860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.386839][ T29] audit: type=1326 audit(2000000367.671:19861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.412039][ T29] audit: type=1326 audit(2000000367.734:19862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.435795][ T29] audit: type=1326 audit(2000000367.734:19863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.459478][ T29] audit: type=1326 audit(2000000367.734:19864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.497977][ T29] audit: type=1326 audit(2000000367.797:19865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.521676][ T29] audit: type=1326 audit(2000000367.797:19866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.545310][ T29] audit: type=1326 audit(2000000367.797:19867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.568889][ T29] audit: type=1326 audit(2000000367.797:19868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.592548][ T29] audit: type=1326 audit(2000000367.797:19869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.1.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee6febe9 code=0x7ffc0000 [ 433.767305][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11880'. [ 433.776586][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11880'. [ 434.470044][ T9735] bond1: entered promiscuous mode [ 434.475185][ T9735] bond1: entered allmulticast mode [ 434.481325][ T9735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.496459][ T9735] bond1 (unregistering): Released all slaves [ 434.581376][ T9812] loop9: detected capacity change from 0 to 512 [ 434.632052][ T9816] syzkaller0: entered allmulticast mode [ 434.641523][ T9820] sch_fq: defrate 4294967295 ignored. [ 434.666507][ T9816] syzkaller0 (unregistering): left allmulticast mode [ 434.690826][ T9829] loop8: detected capacity change from 0 to 512 [ 434.701515][ T9829] EXT4-fs (loop8): unsupported inode size: 0 [ 434.707715][ T9829] EXT4-fs (loop8): blocksize: 4096 [ 434.727434][ T9831] loop1: detected capacity change from 0 to 4096 [ 434.875694][ T9864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9864 comm=syz.4.11913 [ 435.163186][ T9896] netlink: 'syz.1.11928': attribute type 2 has an invalid length. [ 435.171362][ T9896] netlink: 'syz.1.11928': attribute type 1 has an invalid length. [ 435.262411][ T9913] siw: device registration error -23 [ 435.348696][ T9931] loop9: detected capacity change from 0 to 2048 [ 435.376184][ T9931] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.598919][ T9959] bond0: (slave dummy0): Releasing backup interface [ 435.611579][ T9959] batman_adv: batadv0: Adding interface: dummy0 [ 435.617987][ T9959] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.643636][ T9959] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 435.872513][ T7351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.981312][ T9986] sch_fq: defrate 4294967295 ignored. [ 436.300203][T10017] block device autoloading is deprecated and will be removed. [ 436.413371][T10027] loop8: detected capacity change from 0 to 1024 [ 436.430142][T10027] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.436649][T10027] EXT4-fs: Ignoring removed bh option [ 436.471372][T10027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.525197][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.557020][T10038] loop8: detected capacity change from 0 to 1024 [ 436.564663][T10038] EXT4-fs: Ignoring removed orlov option [ 436.576569][T10038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.603298][T10044] __nla_validate_parse: 4 callbacks suppressed [ 436.603315][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11979'. [ 436.639054][T10044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.646488][T10044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.656034][T10044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.663719][T10044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.846304][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.871469][T10075] loop8: detected capacity change from 0 to 512 [ 436.881114][T10075] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 436.892335][T10075] EXT4-fs (loop8): 1 truncate cleaned up [ 436.901534][T10075] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.928776][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.949014][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11991'. [ 436.958310][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11991'. [ 436.967608][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11991'. [ 436.976875][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11991'. [ 437.141597][T10099] siw: device registration error -23 [ 437.166861][T10105] loop8: detected capacity change from 0 to 1024 [ 437.173843][T10105] EXT4-fs: Ignoring removed bh option [ 437.179495][T10105] EXT4-fs: inline encryption not supported [ 437.185937][T10105] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 437.197532][T10105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 437.206551][T10105] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.11998: lblock 2 mapped to illegal pblock 2 (length 1) [ 437.223161][T10105] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.11998: lblock 0 mapped to illegal pblock 48 (length 1) [ 437.237947][T10105] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.11998: Failed to acquire dquot type 0 [ 437.252033][T10105] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 437.261710][T10105] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.11998: mark_inode_dirty error [ 437.273650][T10105] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 437.284050][T10105] EXT4-fs (loop8): 1 orphan inode deleted [ 437.290184][T10105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.302960][ T5606] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:44: lblock 1 mapped to illegal pblock 1 (length 1) [ 437.319930][ T5606] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:44: Failed to release dquot type 0 [ 437.335382][T10105] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.11998: lblock 0 mapped to illegal pblock 48 (length 1) [ 437.358286][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.735456][T10143] loop1: detected capacity change from 0 to 512 [ 437.774322][T10143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.786967][T10143] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.912489][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12012'. [ 438.279621][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 438.279655][ T29] audit: type=1326 audit(2000000372.836:20019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.7.12026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd430ebe9 code=0x7fc00000 [ 438.478543][T10203] loop8: detected capacity change from 0 to 512 [ 438.486035][T10203] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 438.495864][T10203] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 438.506583][T10203] EXT4-fs error (device loop8): ext4_orphan_get:1392: comm syz.8.12031: inode #15: comm syz.8.12031: iget: illegal inode # [ 438.519972][T10203] EXT4-fs (loop8): Remounting filesystem read-only [ 438.527186][T10203] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.552594][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.571717][T32710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.771273][T10214] loop8: detected capacity change from 0 to 2048 [ 438.793216][T10214] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.853368][T10214] ================================================================== [ 438.861480][T10214] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 438.868846][T10214] [ 438.871162][T10214] read-write to 0xffff888107321d90 of 8 bytes by task 5569 on cpu 1: [ 438.879204][T10214] __xa_clear_mark+0xf5/0x1e0 [ 438.883870][T10214] __folio_end_writeback+0x177/0x470 [ 438.889137][T10214] folio_end_writeback+0x71/0x3d0 [ 438.894180][T10214] ext4_finish_bio+0x459/0x8c0 [ 438.899016][T10214] ext4_release_io_end+0x9f/0x1f0 [ 438.904109][T10214] ext4_end_io_end+0x18d/0x240 [ 438.908860][T10214] ext4_end_io_rsv_work+0x151/0x1e0 [ 438.914061][T10214] process_scheduled_works+0x4ce/0x9d0 [ 438.919526][T10214] worker_thread+0x582/0x770 [ 438.924120][T10214] kthread+0x486/0x510 [ 438.928174][T10214] ret_from_fork+0xda/0x150 [ 438.932662][T10214] ret_from_fork_asm+0x1a/0x30 [ 438.937412][T10214] [ 438.939746][T10214] read to 0xffff888107321d90 of 8 bytes by task 10214 on cpu 0: [ 438.947386][T10214] xas_find_marked+0x218/0x620 [ 438.952165][T10214] find_get_entry+0x5d/0x380 [ 438.956762][T10214] filemap_get_folios_tag+0x13b/0x210 [ 438.962114][T10214] file_write_and_wait_range+0x1ea/0x2c0 [ 438.967819][T10214] generic_buffers_fsync_noflush+0x45/0x120 [ 438.973716][T10214] ext4_sync_file+0x1ab/0x690 [ 438.978569][T10214] vfs_fsync_range+0x10d/0x130 [ 438.983343][T10214] ext4_buffered_write_iter+0x34f/0x3c0 [ 438.988881][T10214] ext4_file_write_iter+0xdbf/0xf00 [ 438.994075][T10214] do_iter_readv_writev+0x499/0x540 [ 438.999272][T10214] vfs_writev+0x2df/0x8b0 [ 439.003601][T10214] __se_sys_pwritev2+0xfc/0x1c0 [ 439.008464][T10214] __x64_sys_pwritev2+0x67/0x80 [ 439.013442][T10214] x64_sys_call+0x2c55/0x2ff0 [ 439.018107][T10214] do_syscall_64+0xd2/0x200 [ 439.022979][T10214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.028865][T10214] [ 439.031172][T10214] value changed: 0xffffe00000000000 -> 0xff00000000000000 [ 439.038269][T10214] [ 439.040597][T10214] Reported by Kernel Concurrency Sanitizer on: [ 439.046865][T10214] CPU: 0 UID: 0 PID: 10214 Comm: syz.8.12033 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 439.058315][T10214] Tainted: [W]=WARN [ 439.062188][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.072234][T10214] ================================================================== [ 439.082506][ T29] audit: type=1326 audit(2000000373.686:20020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.7.12026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dd430ebe9 code=0x7fc00000 [ 439.150938][ T4434] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.