last executing test programs: 4.714984141s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) set_mempolicy(0x3, &(0x7f0000000040)=0xfd, 0x7) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000080)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)w\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x86p\x98\x9d\x1a\x8b\x88\xff\x05\x86\x9d\xe5.\xfc\xa2v\xb1\xff\xc6\xbd\xfa\xa5\x96|\xcb\xa5[\xabZ\xbd\a\xa1\x8a\xd0\x8b\xebG\xde\x82\xdb\xe3\x9f\x11\xea\x0e}\xeb\x8cX\xeft$\aW\xe7\xe5cL\xf4\xbd9\xcd,\x0fd{', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x20000000, 0x2}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x141e00, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0xd883, 0x10000, 0x10000, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x42793b94}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x73, &(0x7f0000000440)=""/115, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r0, r0, 0xffffffffffffffff, r0, r2, r0, r0, r0], &(0x7f00000005c0)=[{0x2, 0x4, 0xe, 0x5}], 0x10, 0x6}, 0x90) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@x, {0x2, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r5, 0x80047453, &(0x7f0000005280)) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xbd1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0xc00000000000000}}], 0x400000000000172, 0x4000000) 4.65897591s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000090000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$TUNSETIFF(r1, 0x80084503, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setuid(0xee01) shutdown(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x400], [0x0, 0x7fd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd74e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xb062, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x5]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x0, 0x0, 0x60], @devid=r4}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000023c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="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"]) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={r4, 0x5, 0x1, [0x7f, 0x7fffffff, 0x2, 0x4, 0x9], [0x5a0, 0xade, 0x3, 0x4, 0x2, 0x8000000000000001, 0x4, 0xfff, 0x6, 0x7ff, 0x0, 0x3, 0x1, 0x50bb9b81, 0x22a4, 0x7ff, 0x9, 0x203, 0x531, 0x6, 0x4, 0x8001, 0x80000, 0xe, 0x9, 0x8, 0x5, 0x177, 0x8, 0x8, 0x6, 0x7, 0x3, 0x9bb7, 0x7, 0x8, 0x8, 0xfffffffffffffff7, 0x2, 0x8, 0x10000, 0x7f, 0x3c41, 0xf52, 0x10000, 0xffffffffffffeecc, 0xd33, 0xff, 0x2fa2, 0x5, 0x5, 0x1, 0x2, 0x9, 0x2, 0x8, 0x400, 0x2, 0x1, 0x438e000, 0x321, 0x8b2a, 0x0, 0x3069, 0x800, 0xffffffffffff7fff, 0x9, 0x9, 0x100000000, 0x81, 0xf9d, 0x7, 0x100000001, 0x5, 0x4, 0x840c, 0x8, 0x4, 0x4, 0x0, 0x1, 0x202000000000000, 0x1, 0x7, 0xfff, 0xffff, 0x9, 0x9, 0x3, 0x3f, 0x6, 0xafdf, 0x1, 0x3, 0x5, 0x4, 0xffffffff00000000, 0x3, 0x6, 0x6, 0x4, 0x2, 0x0, 0x0, 0x433, 0x6, 0x10001, 0xfffffffffffeffff, 0x0, 0x4, 0x100, 0x80, 0xfffffffffffffffd, 0xc, 0x4, 0x0, 0x101, 0x0, 0x6, 0x20, 0x2]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000007c0)={{r2}, 0x0, 0xc, @unused=[0x1, 0x84c, 0x742, 0x1], @devid=r4}) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000100)={0x2a, 0x1, 0x1}, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 4.426822645s ago: executing program 3: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36a, &(0x7f00000004c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x300) 4.370064563s ago: executing program 3: r0 = socket(0x2000000000000021, 0x0, 0x0) connect$rxrpc(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x21, 0x0, "790cb2aaf2b5720912b0812069fce21d0f395b8a9e97eeb2d30db0735f7bb5b7c692a475567d85db8e1675ca03e40e8ac52cef3cac4da38f5f3c7a87298210dbcf2692aa87cdbdec506eb1e29099ec34"}, 0xd8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000240)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f0000000340)=""/248, 0xf8) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5460, &(0x7f0000000140)=0x3) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x2, 0x0) 3.453398713s ago: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$packet(0x11, 0x2, 0x300) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f0000001040)) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) 2.484556651s ago: executing program 3: fstat(0xffffffffffffffff, &(0x7f0000000480)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000580)=@hci, 0x80, &(0x7f0000001740)=[{&(0x7f0000000600)=""/11, 0xb}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000680)=""/82, 0x52}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x4, 0x0, 0x5e}, 0x13f40) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0xf3e, &(0x7f00000017c0)={0x0, 0x93ed, 0x800}, &(0x7f0000001780)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0x7, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xca04, &(0x7f0000000500)=ANY=[], 0x1, 0x2c1, &(0x7f0000000080)="$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") (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x4000}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xcb8c2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socketpair(0x11, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r6, &(0x7f0000001700)=ANY=[@ANYRES16=r2], 0xffdd) (async) close(r8) (async) close(r7) (async, rerun: 64) io_cancel(0x0, 0x0, 0x0) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) (async) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0001012dbd7000ffdbdf251c100000fc01fd020a0600000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004010) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$cgroup_type(r5, &(0x7f00000003c0), 0x9) 2.419646881s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000004000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r3}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='2', 0x1}], 0x1}, 0x3) recvmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x0) 1.568386841s ago: executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xa, &(0x7f00001c9fff)='\b', 0x19) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xb, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 1.541076045s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee1d28831707923f0"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 1.30837878s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0xf3b, &(0x7f0000000480)={0x0, 0x0, 0x80}, &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) ioprio_set$pid(0x1, 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x400000, 0x0, 0x300, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086604, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_setup(0xf3b, &(0x7f0000000480)={0x0, 0x0, 0x80}, &(0x7f0000000080), &(0x7f0000000540)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) getpid() (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) (async) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x9, &(0x7f0000000240)) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) io_submit(r7, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x400000, 0x0, 0x300, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086604, 0x0) (async) 1.013451025s ago: executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1}], 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0xf07, &(0x7f00000003c0), &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x44, 0x0, 0x1f, 0x0, 0x0}) io_uring_enter(r2, 0x77b7, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10}, {0x10, 0x0, 0xd}], 0x20, 0x500}}], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x35, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x10) syz_io_uring_setup(0x27f3, &(0x7f0000000340), &(0x7f0000000300), &(0x7f0000000100)) io_uring_setup(0x7058, &(0x7f0000000040)) 937.053706ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10010, &(0x7f0000000100), 0x0, 0x670, &(0x7f0000002380)="$eJzs3U1vVF8ZAPDnzktbWrWFGPVvjJAYA4nS0gKGGBMhcUkIvux0U2ghSKGkrdESEkrEjYk7FySuXIgfQxK2fAEXJsa4MCbEKAtRImPunbnttL0zHTpvpf39kqHnnDtzz5kJz5x7zz3nTgBH1qmImI6ITyLiQRIx2bStkv1byp6UPu/NPx/dTB9J1Grf/0cSjx4nG837Shp/Jxov/t9kvehEeXe9q+sP784vLS2uNPIza/cezKyuPzx759787cXbi/fnvjF36eKFi5dmz3X1/o43pa8+/fFPJ3957Ye/+827ZPb3f7qWxOX03WXS97XztaNd1Zx+ZqeiVve2uTz9XC91ue+D4t+T+f+TLcnOAg6sSj3CoxoRn4/JKGcl9UiejF98d9jtA/qnlkTeRwFHTrKv+B/rfUOAAcuPA/Jz+6Lz4AIFZ/TAx+b1lfogQD32qxGRx38lG/OLGMvGBsbfJNvGeZKI6G5kri6t49XLa0/TR7QYhwP6Y+NJPsq9s/9PsticirEsN/6mtC3+S02PtPx7nVf586bDjsZ3zBbxD4Oz8SQivtDo/0ei0/gv55cH8/i/sc/6xT8AAAAAAAD0zosrEfH1ovl/pc35PyMF838mIuJyD+rf+/pfKV+il/SgOqDJ6ysR3yqc/5uHXUyVG7lPZ/MBqsmtO0uL5yLiMxFxJqqjaX52x35LTemzvzrxrFX9zfP/0kda/6uXzdOLS3+v7FiIuzC/Nu/bALr3+knEF7P5vycbJdvn/6T9f1LQ/6fx/aDDOk589fn15nytVnucp4vjvz4XuI27/+2wbqC12m8jThf2/1sdbNL+/hwz2fHATH5UsNuX3zXP+N1un/EP9EDa/4+3jv/R+E49t3m/ntUP2/9IRJxfr7QK/w7iv/j4fyT5QTnff+pn82trK7MRI8nV3eVzH9ZmOKzyeMjjJY3/M19pP/63efzfFIfHImKjwzo/937iL6226f9heNL4X2h//D+VNPr/yPr/zQOBjhNzz6f+kO2p4L5w1zvq/y9kffqZRkk2/gc0lHaVdBqgQ2kuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzkShHxqUhK05vpUml6OmIiIj4b46Wl5dW1r91a/sn9hXRb9vv/pfyXfifr+ST//f+ppvzcjvz5iDgeEb8uH8vy0zeXlxaG/eYBAAAAAAAAAAAAAAAAAADggJjI1vzXRneu/0/9rTzs1gF9V2n83SPexwbRFmCwKvt+ZW20pw0BBm7/8Q987DqP/2pf2wEMXuv4f/uulsnzSdK89V99bhfQfy3i//Kg2wEM3j7P/10ehEOgIP5PDaMdwKC1HdN7tpkquPr/pRt9aRAwQK7/AQAAAADAoXL85Is/JhGx8c1j2SM10thmsj8cbqVhNwAYGnN44eiqLA+7BcCwtD/H3xhYO4Dh2VrX/59a0fbW9/5L+tMgAAAAAAAAAAAAAGCX0590sP5/ZFitA/qp/fp/c/vhMGuz/r8o+N0uAA6R1j/9oe+Hw64atcL1vsDRsVdvb/0/AAAAAAAAAAAAABwAYw/vzi8tLa6srneZiIg/15KIbvfTIvGjgk3f3l7y12qvK11cWS139/LqrpKN+b58PkNNvO/PnqsRcTDeYI8T8X6P5+R33BhiU4f8vQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGz6fwAAAP//u+Yw7w==") open_tree(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40011) creat(0x0, 0x0) unshare(0x20020000) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4c, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x80800, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$binfmt_script(r2, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000040)=0x41) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=""/119, 0x77) 859.803738ms ago: executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) syz_io_uring_setup(0x2ddd, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000380)) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 848.29681ms ago: executing program 2: mkdir(0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000300), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r1) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setsig(r4, 0xa, 0x41) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x88001) mmap$xdp(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x8, 0x20010, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x3000000, &(0x7f0000000780)=ANY=[@ANYBLOB="2c776664666f01", @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC=r4]) open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='.\x00', &(0x7f0000000a00), &(0x7f0000000300)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x0) 833.860572ms ago: executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0xff, 0x0, 0x9, 0x905, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioperm(0x0, 0x0, 0x0) (async) syncfs(0xffffffffffffffff) (async) syslog(0x2, 0x0, 0x0) (async) getsockopt$nfc_llcp(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x20600000) (async) unshare(0x42000000) 819.271574ms ago: executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0)='4', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7ffc1ffb}]}) tee(r4, r3, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 803.404577ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0x2}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x3}}]}, 0x0}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 789.934999ms ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x65, &(0x7f0000000200)=ANY=[], 0x14) 772.057722ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 750.052235ms ago: executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @empty=0x2}, 0x10, &(0x7f0000000540), 0x0, 0x0, 0xfffffffffffffdf3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0020dd2c2986000000011100e2b90990e2b9da787853c78157c38d93329061e53314d8b48f4b518d68b747679abc29ae9afcb81233434db65c549878d20100d75ed54880663c90fefb95ea7d00c78c80157b71cf43cd4eca98"], 0x15c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) tkill(0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001080)='>', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x0, 0x84) creat(&(0x7f0000000440)='./file0\x00', 0x0) 726.320359ms ago: executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) r6 = dup(r5) preadv(r6, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/80, 0x50}], 0x1, 0x0, 0x1000000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, 0x0) 711.804401ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x463) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0xd, &(0x7f0000000080)={0x0, 0x1bc}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r2, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1}}], 0x2, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/127, 0x7f}, {0x0}], 0x2, &(0x7f0000000740)=""/215, 0xd7}, 0x120) shutdown(r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) sendmmsg(r5, &(0x7f0000000080), 0x4000000000001f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x1b, 0xef, 0x0, 0x5, 0x0, 0x0, 0x21a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x2, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, r1, 0x0) 396.866449ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10010, &(0x7f0000000100), 0x0, 0x670, &(0x7f0000002380)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40011) creat(0x0, 0x0) unshare(0x20020000) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4c, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x80800, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$binfmt_script(r2, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000040)=0x41) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=""/119, 0x77) 363.187834ms ago: executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140e, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001e00)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltfilter={0x3c, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0xa}, {0x4, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xc8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x90, 0x70}}]}, 0x3c}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe7, 0x0) 322.41913ms ago: executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaa21aaaa86dd6001010000108800fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000000290780200000000000000"], 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010000000000000000005423000012ca9acc9cb0c7a3bf8ec62e08b2a27a214d86649fc83263818829ea4b5fd9c0782aa7104011a081eb56345a551280738fb9f2a096d2c63af025e3c4a5c194e61e14fe1b55bdd48aab49f9b5d2692df24c14e70400f59441ef8601ed0113cba797a361a00e05d0c0cc7522895ec757e3963740d491c0cc368baba70d141340e5b29a3500c7cb962312e2433112d4d564c92c33b1e9c24ae3c7b5cd3f6ead53cd7c198c9a2820ccf0fe0c7c79a287fd2de3fea451619f2f5f660cd8b880b3d92459e0d2fdda962de139d73493fe9be9b2fdf3d83685d5bc740effb610d4a22d2e6bb0"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000554445d2fb30dfdce33de74cff5fb4a94ac36e7469c16b12e047b3fb24f346f340e2e54fc3eb", @ANYRES16=r7, @ANYBLOB="30012abd7000fcdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x5040) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000634ab92a50ffff85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd63"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x3c}}, 0x1) 280.583517ms ago: executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000ac0)={[], [{@dont_appraise}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, '\\)-(*'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@audit}, {@uid_lt}, {@fowner_gt}]}, 0x1, 0x54b, &(0x7f0000000540)="$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") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="0e000000", 0x4}], 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x10}, 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000500)=@raw=[@alu={0x4, 0x1, 0xb, 0x5, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x5, 0x8, 0x0, 0xc, 0x10}], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x7, 0x5, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x1], &(0x7f00000006c0)=[{0x3, 0x2, 0x2, 0xb}, {0x2, 0x1, 0xb}, {0x3, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x4, 0x9}, {0x2, 0x1, 0x10, 0x2}, {0x4, 0x3, 0xc, 0x1}, {0x5, 0x1, 0x9, 0x2}, {0x3, 0x3, 0xc, 0x5}, {0x3, 0x3, 0x5}, {0x3, 0x5, 0x0, 0x7}], 0x10, 0x3ff}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x4, 0x8, 0x7f, 0x4, 0x1000, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pS \x00'}, 0x20) r8 = open(&(0x7f0000002000)='./bus\x00', 0x103042, 0x0) ftruncate(r8, 0x2007fff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x18, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xfff, 0x41, &(0x7f00000002c0)=""/65, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1ffc, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0x40, 0x29c}, 0x10, 0x27250, r3, 0x6, &(0x7f0000000b00)=[r4, r5, r6, r7, r8, r9], &(0x7f0000000b40)=[{0x0, 0x1, 0xe, 0x7}, {0x3, 0x1, 0x0, 0x9}, {0x3, 0x1, 0x9, 0xa}, {0x2, 0x1, 0x10, 0x5}, {0x5, 0x4, 0xf, 0xc}, {0x0, 0x5, 0xd}], 0x10, 0x7}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r0, 0x2, 0x80000}) r10 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) setsockopt$inet6_int(r10, 0x29, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 236.893673ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010062726964676500003c00028005002d"], 0x6c}}, 0x0) 208.706848ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee1d28831707923f0"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 169.838433ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x2, 0x557, &(0x7f0000000940)="$eJzs3cFvI1cZAPBvJvFudjclKXAolSgVLdotsM6mYduIQwEJwakSUMQJaQmJE0XrxKvEaTfRiqbiioQECCpxgRMXJP4AJNQLd4RUqdwRICpUsnAAqe2gsce7iddOvML2qMnvJ83OvHn2fN+z18/v2RNPAGfWkxFxJSImIuKZiJgp9qfFEvvtJb/d3YM7y/mSRJa99E4SSbGvc6zzxfpScbepiPjGVyO+mzwYd3t37+ZSvV7bKspzzY3k3Szbu7q+sbRWW6ttLizMP7f4/OL1xWtDaedsRLzw5b/99Ie/+soLv/vsK3++8faV7+Vp/TfLXo2udgxTu+mV1mPRMRkRW6MIVpLJVgvbrg90jx7/IQAAGIt8vP/hiPhka/w/ExOt0RwAAABwmmRfmI53k4gMAAAAOLXSiJiOJK0W5/tOF+dmXoqIj8bFtN7Ybn5mtbGzuZLXRcxGJV1dr9euxVTr3IHZqCR5eb44x7ZTfrarvBARj0bET2YutMrV5UZ9pewPPwAAAOCMuNQ1///3TJpWq0XlfsnJAQAAAMMzW3YCAAAAwMiZ/wMAAMDpVsnn/9lAF2RKR58NAAAAMAJfe/HFfMk6179eeXl352bj5asrte2b1Y2d5epyY+tWda3RWGv9Zt/GScerNxq3PhebO7fnmrXt5tz27t6NjcbOZvPG+pFLYAMAAABj9Ogn3vhTEhH7n7/QWnLnirpKRDZx+MaTZWQIjMpDndPz19HlAYzf4ff3CyXmAYyfIT2cXZWyEwBKd9IfAPU9eecPw88FAAAYjcsf6//9/zurpaYGjFjx/X8y0A+AAKfKRNkJAKVpf//3ftZWdjbAOFWOGwGYFMCplw7n+/8TTiVMdCgAAFCy6daSpNViHjAdaVqtRjzSuixgJVldr9euRcSHIuKtmcr5vDzfumdiNA8AAAAAAAAAAAAAAAAAAAAAAAAAA8qyJDIAAADgVItI/965Mtflmaenuz8fOJf8Z6a1johXfv7Sz24vNZtb8/n+f97b33y92P/sw3768OO3h/QxBgAAAHBIZ57emccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDDdPbizfDfLsuzgzvI44/7jSxExW8QvlnbNZEy11lNRiYiL/0pi8tD9koiYGEL8/dci4rFe8ZM8rZgtsjgS/1xEGhEXhhU/HjJ+tONfGkJ8OMveyPufL/Z6/aXxZGvd+/U3WSz/r/79X3qv/5vo0/890u+glaPFx9/8zVzf+K9FPD7Zu//pxE/y4/WI/9SAbfzON/f2+tVlv4y43Kv/S47Gmmtu3Jrb3t27ur6xtFZbq20uLMw/t/j84vXFa3Or6/Va8W/PGD/6+G/fv19674H2Xzym/221v8/j//SA7X/vzdsHH2lvdj0zUYlfZNmVp3o//4/lq08/GL/z3vep4n0gL+ePYfr6t3rGf+LXf3yiX255+1f6tH+qq/3nu9p/ZcD2P/P17/9lwJsCAGOwvbt3c6ler23ZOLwRs+OK9QF7Cs5FeyMfd5aeTxJJ5BtvHalaKj+x9sarxWtsqd55tQ3pyL8vJkejTL6k/ggAABid+4P+7pqknIQAAAAAAAAAAAAAAAAAAADgDDrxZ8D6VaURcX/Pt39wzK+RdcfcL6epAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADH+l8AAAD//9CN1mM=") socket$nl_rdma(0x10, 0x3, 0x14) (async) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) dup(0xffffffffffffffff) (async) socket(0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x20) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x1000}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0xc9c) (async) listen(r4, 0x2) 0s ago: executing program 1: socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) timer_create(0x8, 0x0, &(0x7f0000044000)) iopl(0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff}, 0xe) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) kernel console output (not intermixed with test programs): 231661][T14309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.239063][T14309] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.257477][T14309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.290889][T14284] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.298129][T14284] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.316779][T14284] bridge_slave_0: entered allmulticast mode [ 228.334931][T14284] bridge_slave_0: entered promiscuous mode [ 228.345595][T14284] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.352816][T14284] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.387096][T14312] loop4: detected capacity change from 0 to 32768 [ 228.391409][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.393965][T14284] bridge_slave_1: entered allmulticast mode [ 228.421947][T14284] bridge_slave_1: entered promiscuous mode [ 228.457064][T14284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.469193][T14284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.512529][T14284] team0: Port device team_slave_0 added [ 228.519421][T14284] team0: Port device team_slave_1 added [ 228.534387][T14328] loop2: detected capacity change from 0 to 2048 [ 228.542924][T14284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.550038][T14284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.576041][T14284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.590556][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.599726][T14284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.606747][T14284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.632791][T14284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.654575][T14328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.677200][T14284] hsr_slave_0: entered promiscuous mode [ 228.681402][T14331] loop4: detected capacity change from 0 to 256 [ 228.691807][T14284] hsr_slave_1: entered promiscuous mode [ 228.710778][T14284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.728776][T14284] Cannot create hsr debugfs directory [ 228.730556][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.830769][T14345] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.930462][T14364] loop3: detected capacity change from 0 to 128 [ 228.940038][T14365] loop2: detected capacity change from 0 to 1024 [ 228.948144][T14365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.955041][T14365] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.966549][T14365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.007235][T14369] team0: Device ipvlan2 failed to register rx_handler [ 229.046843][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.095526][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.103081][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.110595][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.118093][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.125566][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.125846][T14381] loop2: detected capacity change from 0 to 128 [ 229.133158][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.133187][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.133213][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.133237][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.133324][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.133350][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.133375][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.191617][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.199227][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.206734][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.214169][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.221587][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.229059][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.236526][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.243947][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.251514][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.258998][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.266396][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.273861][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.281287][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.288732][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.296156][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.303569][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.311024][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.318428][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.325876][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.333291][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.340687][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.348127][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.355510][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.362989][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.370486][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.377927][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.385362][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.392959][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.400440][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.407885][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.415297][T11156] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 229.427728][T11156] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 229.468845][T14384] loop0: detected capacity change from 0 to 512 [ 229.476660][T14384] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 229.487900][T14384] syz-executor.0: attempt to access beyond end of device [ 229.487900][T14384] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 229.501297][T14384] EXT4-fs (loop0): couldn't read superblock of external journal [ 229.726830][T11163] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.731965][T14408] loop4: detected capacity change from 0 to 1024 [ 229.737779][T11163] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 229.742099][T14408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.758213][T14408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.779754][T14408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.780796][T14411] loop0: detected capacity change from 0 to 1024 [ 229.793842][ T4837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.830355][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.846566][ T4837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.895480][T13839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.912244][ T4837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.964162][T14430] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 229.974290][ T4837] bridge_slave_1: left allmulticast mode [ 229.980011][ T4837] bridge_slave_1: left promiscuous mode [ 229.985746][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.017574][ T4837] bridge_slave_0: left allmulticast mode [ 230.023302][ T4837] bridge_slave_0: left promiscuous mode [ 230.029136][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.141707][ T4837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.152793][ T4837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.165527][ T4837] bond0 (unregistering): Released all slaves [ 230.192366][T14460] loop2: detected capacity change from 0 to 1024 [ 230.201799][T14460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.210888][T14460] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 230.222122][T14460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.238336][T14468] loop3: detected capacity change from 0 to 512 [ 230.251499][T14468] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 393: padding at end of block bitmap is not set [ 230.266457][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 230.266473][ T29] audit: type=1326 audit(1719239294.298:103810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 230.283341][T14468] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 230.296981][ T29] audit: type=1326 audit(1719239294.298:103811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 230.337451][T14468] EXT4-fs (loop3): 2 truncates cleaned up [ 230.343559][T14468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.364246][ T4837] hsr_slave_0: left promiscuous mode [ 230.371009][ T4837] hsr_slave_1: left promiscuous mode [ 230.377549][ T4837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.385046][ T4837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.395428][ T4837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.403120][ T4837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.415618][ T4837] veth1_macvtap: left promiscuous mode [ 230.418136][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.421263][ T4837] veth0_macvtap: left promiscuous mode [ 230.436375][ T4837] veth1_vlan: left promiscuous mode [ 230.441667][ T4837] veth0_vlan: left promiscuous mode [ 230.457608][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.564293][ T4837] team0 (unregistering): Port device team_slave_1 removed [ 230.576105][ T4837] team0 (unregistering): Port device team_slave_0 removed [ 231.421542][T14491] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 231.430911][T14040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.461614][T14491] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 231.475839][ T29] audit: type=1326 audit(1719239295.518:103812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 231.501273][ T29] audit: type=1326 audit(1719239295.518:103813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 231.525732][ T29] audit: type=1326 audit(1719239295.518:103814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 231.550086][ T29] audit: type=1326 audit(1719239295.518:103815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 231.574512][ T29] audit: type=1326 audit(1719239295.518:103816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 231.599083][ T29] audit: type=1326 audit(1719239295.518:103817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e0f69dca0 code=0x7ffc0000 [ 231.623359][ T29] audit: type=1326 audit(1719239295.518:103818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5e0f6a0837 code=0x7ffc0000 [ 231.647605][ T29] audit: type=1326 audit(1719239295.518:103819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 231.712463][T14518] loop0: detected capacity change from 0 to 1024 [ 231.760055][T14518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.768773][T14521] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.787977][T14518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 231.807822][T14284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.828622][T14284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.840482][T14518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.879369][T14284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.926352][T14284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.977066][T13057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.027323][T14531] loop3: detected capacity change from 0 to 2048 [ 232.046884][T14536] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 232.061387][T14531] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 232.125636][T14284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.126878][T14543] loop4: detected capacity change from 0 to 128 [ 232.146360][T14284] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.160179][T11165] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.167271][T11165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.183642][T14547] x_tables: duplicate underflow at hook 2 [ 232.196994][T14284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.207509][T14284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.226276][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.233479][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.299350][T14284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.369498][T14284] veth0_vlan: entered promiscuous mode [ 232.382762][T14579] loop2: detected capacity change from 0 to 2048 [ 232.388572][T14284] veth1_vlan: entered promiscuous mode [ 232.422273][T14579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.439149][T14284] veth0_macvtap: entered promiscuous mode [ 232.450673][T14284] veth1_macvtap: entered promiscuous mode [ 232.454708][T14585] loop4: detected capacity change from 0 to 1024 [ 232.474763][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.485474][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.495464][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.505931][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.515771][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.526225][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.536067][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.546605][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.556436][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.563759][T14585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.566866][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.572148][T14579] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 232.582838][T14585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.583387][T14579] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 232.599079][T14585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.601864][T14579] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 232.624722][T14284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.633627][T14579] EXT4-fs (loop2): This should not happen!! Data will be lost [ 232.633627][T14579] [ 232.633646][T14579] EXT4-fs (loop2): Total free blocks count 0 [ 232.633661][T14579] EXT4-fs (loop2): Free/Dirty block details [ 232.633672][T14579] EXT4-fs (loop2): free_blocks=2415919104 [ 232.668849][T14579] EXT4-fs (loop2): dirty_blocks=16 [ 232.674059][T14579] EXT4-fs (loop2): Block reservation details [ 232.680108][T14579] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 232.726453][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.737054][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.746977][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.757530][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.767366][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.777787][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.787620][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.798158][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.808028][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.818521][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.835340][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.836582][T14284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.858460][T14284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.867349][T14284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.876066][T14284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.884938][T14284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.931529][T13839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.973597][T14600] x_tables: duplicate underflow at hook 2 [ 233.103875][T14626] loop0: detected capacity change from 0 to 1024 [ 233.143319][T14626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.154256][T14626] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.202250][T14626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.313717][T13057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.490340][T14649] x_tables: duplicate underflow at hook 2 [ 233.998880][T14657] loop4: detected capacity change from 0 to 2048 [ 234.057738][T14657] loop4: p1 < > p4 [ 234.062151][T14657] loop4: p4 size 8388608 extends beyond EOD, truncated [ 234.140154][T14657] loop4: detected capacity change from 0 to 256 [ 234.165562][T14657] FAT-fs (loop4): Unrecognized mount option "no/ots" or missing value [ 234.403693][T14678] openvswitch: netlink: Key type 16383 is out of range max 32 [ 234.413939][T14682] loop3: detected capacity change from 0 to 512 [ 234.424178][T14682] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 234.447086][T14678] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14678 comm=syz-executor.1 [ 234.453190][T14682] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 234.473821][T14682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.523839][T14040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.851897][T14719] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.876827][T14719] vhci_hcd: invalid port number 20 [ 234.882155][T14719] vhci_hcd: default hub control req: 0000 v14ac i0014 l96 [ 235.007062][T14727] loop2: detected capacity change from 0 to 1024 [ 235.056241][T14731] loop1: detected capacity change from 0 to 512 [ 235.077380][T14727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.107442][T14727] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 235.163216][T14731] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 393: padding at end of block bitmap is not set [ 235.230311][T14727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.391798][T14731] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 235.466790][T14731] EXT4-fs (loop1): 2 truncates cleaned up [ 235.516150][T14731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.561467][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.574647][T14738] loop4: detected capacity change from 0 to 256 [ 235.597922][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.619829][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.632520][T14731] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 235.640983][T14731] hsr0: entered promiscuous mode [ 235.650091][T14741] loop3: detected capacity change from 0 to 2048 [ 235.673392][T14731] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 235.685526][T14731] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 235.701906][T14731] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 235.714500][T14731] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 235.775305][T14741] loop3: detected capacity change from 0 to 1024 [ 235.782750][T14284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.813848][T14741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.877696][T14741] loop3: detected capacity change from 1024 to 96 [ 235.892710][T14741] syz-executor.3: attempt to access beyond end of device [ 235.892710][T14741] loop3: rw=34817, sector=224, nr_sectors = 120 limit=96 [ 235.932635][T14741] syz-executor.3: attempt to access beyond end of device [ 235.932635][T14741] loop3: rw=2051, sector=320, nr_sectors = 32 limit=96 [ 235.959664][T14741] EXT4-fs (loop3): discard request in group:0 block:10 count:16 failed with -5 [ 235.968998][T14741] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 236.048744][ T29] kauditd_printk_skb: 9155 callbacks suppressed [ 236.048761][ T29] audit: type=1326 audit(1719240324.090:112975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe12b6d0a9 code=0x7ffc0000 [ 236.142613][T14741] syz-executor.3: attempt to access beyond end of device [ 236.142613][T14741] loop3: rw=2051, sector=224, nr_sectors = 96 limit=96 [ 236.167893][ T29] audit: type=1326 audit(1719240324.120:112976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fbe12b6d0a9 code=0x7ffc0000 [ 236.170609][T14762] loop4: detected capacity change from 0 to 512 [ 236.204311][T14741] EXT4-fs (loop3): discard request in group:0 block:7 count:48 failed with -5 [ 236.226686][T14741] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 236.239400][T14762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.254304][T14762] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 236.269137][T14762] EXT4-fs (loop4): 1 truncate cleaned up [ 236.275320][T14762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.309621][T13839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.353958][ T29] audit: type=1326 audit(1719240324.390:112977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14764 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7fc00000 [ 236.397320][ T29] audit: type=1326 audit(1719240324.430:112978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14764 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0f69f0a9 code=0x7fc00000 [ 236.505787][T14040] syz-executor.3: attempt to access beyond end of device [ 236.505787][T14040] loop3: rw=2051, sector=160, nr_sectors = 32 limit=96 [ 236.521176][ T29] audit: type=1400 audit(1719240324.540:112979): avc: denied { unlink } for pid=14040 comm="syz-executor.3" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.560474][T14040] EXT4-fs (loop3): discard request in group:0 block:5 count:16 failed with -5 [ 236.581703][T14040] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 236.594801][ T29] audit: type=1326 audit(1719240324.610:112980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe12b6d0a9 code=0x7ffc0000 [ 236.619043][ T29] audit: type=1326 audit(1719240324.610:112981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe12b6d0a9 code=0x7ffc0000 [ 236.657313][T14040] syz-executor.3: attempt to access beyond end of device [ 236.657313][T14040] loop3: rw=2051, sector=192, nr_sectors = 32 limit=96 [ 236.674506][ T29] audit: type=1400 audit(1719240324.690:112982): avc: denied { unlink } for pid=14040 comm="syz-executor.3" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 236.723531][T14040] EXT4-fs (loop3): discard request in group:0 block:6 count:16 failed with -5 [ 236.741356][T14040] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 236.786329][T14040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.801093][T14747] kmmpd-loop3: attempt to access beyond end of device [ 236.801093][T14747] loop3: rw=14337, sector=128, nr_sectors = 2 limit=96 [ 236.814608][T14747] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 236.915743][T14778] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 236.928220][T14778] gretap0: entered promiscuous mode [ 237.054958][ T29] audit: type=1326 audit(1719240325.090:112983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe12b6d0a9 code=0x7ffc0000 [ 237.098425][ T29] audit: type=1326 audit(1719240325.090:112984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe12b6d0a9 code=0x7ffc0000 [ 237.155744][T14785] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.164543][T14785] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.173395][T14785] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.182206][T14785] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.191251][T14785] vxlan0: entered promiscuous mode [ 237.196394][T14785] vxlan0: entered allmulticast mode [ 237.209185][T14785] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.218211][T14785] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.227166][T14785] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.236129][T14785] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.442784][T14796] loop2: detected capacity change from 0 to 1024 [ 237.468888][T14796] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 237.469053][T14799] loop0: detected capacity change from 0 to 1024 [ 237.485130][T14801] x_tables: duplicate underflow at hook 2 [ 237.504296][T14799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.513170][T14799] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 237.529028][T14799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.542811][T14803] loop3: detected capacity change from 0 to 512 [ 237.555735][T14803] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 237.589719][T14803] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 237.605874][T14803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.653226][T14040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.704115][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.713916][T13057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.741843][T14826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14826 comm=syz-executor.1 [ 237.894475][T14838] loop2: detected capacity change from 0 to 512 [ 237.896317][T14841] x_tables: duplicate underflow at hook 2 [ 237.907186][T14838] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 237.921159][T14838] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 237.938831][T14838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.960430][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.974558][T14847] loop0: detected capacity change from 0 to 512 [ 237.985538][T14847] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 238.001023][T14847] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 238.014633][T14847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.076399][T13057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.078291][T14863] loop1: detected capacity change from 0 to 2048 [ 238.142355][T14863] loop1: p1 p2 p3 [ 238.147348][T14863] loop1: p3 size 2164260864 extends beyond EOD, truncated [ 238.256174][T14884] x_tables: duplicate underflow at hook 2 [ 238.285807][T14887] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 238.358273][T14897] loop1: detected capacity change from 0 to 512 [ 238.365873][T14901] loop2: detected capacity change from 0 to 1024 [ 238.377429][T14897] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 238.394091][T14897] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 238.407472][T14897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.458466][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.460143][T14284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.468304][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.488308][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.498296][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.508296][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.509585][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.518310][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.559403][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.578874][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.594277][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.618312][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.629992][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.641626][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.653091][T14933] x_tables: duplicate underflow at hook 2 [ 238.668292][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.678298][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.688549][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.698622][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.709259][T14937] loop1: detected capacity change from 0 to 512 [ 238.723157][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.728351][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.748298][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.768293][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.778498][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.793494][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.812170][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.830164][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.845367][T14959] loop1: detected capacity change from 0 to 512 [ 238.858307][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.864364][T14959] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 238.885190][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.885391][T14959] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 238.906053][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.906900][T14959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.919445][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.938396][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.958296][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.968298][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.978723][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.997143][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.009903][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.038581][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.053205][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.082321][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.090952][T14284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.098778][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.118578][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.134591][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.148594][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.168920][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.188715][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.218316][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.229520][T14984] x_tables: duplicate underflow at hook 2 [ 239.248350][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.258869][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.268635][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.278292][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.291847][T14912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 239.454061][T14989] chnl_net:caif_netlink_parms(): no params data found [ 239.510643][T14989] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.518229][T14989] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.524458][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.525581][T14989] bridge_slave_0: entered allmulticast mode [ 239.542830][T14989] bridge_slave_0: entered promiscuous mode [ 239.566372][T15026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.587498][T14989] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.594623][T14989] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.602016][T14989] bridge_slave_1: entered allmulticast mode [ 239.608557][T14989] bridge_slave_1: entered promiscuous mode [ 239.648312][T15026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.668119][T14989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.693708][T14989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.702896][T15033] loop3: detected capacity change from 0 to 1024 [ 239.704087][T15033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.721455][T15033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 239.733175][T15033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.741303][T15035] loop2: detected capacity change from 0 to 1024 [ 239.748667][T15026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.769021][T15035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.782640][T14989] team0: Port device team_slave_0 added [ 239.806308][T14989] team0: Port device team_slave_1 added [ 239.822417][T15026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.835781][T15035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 239.852608][T14989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.859595][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.885561][T14989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.898667][T14040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.898832][T14989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.913355][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.914669][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.949620][T14989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.977099][T14989] hsr_slave_0: entered promiscuous mode [ 239.983536][T14989] hsr_slave_1: entered promiscuous mode [ 239.996785][T14989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.000670][T15042] x_tables: duplicate underflow at hook 2 [ 240.013279][T14989] Cannot create hsr debugfs directory [ 240.022094][T15026] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.033533][T15026] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.044961][T15026] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.061895][T15026] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.134192][T15061] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 240.190558][T14989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.202568][T15057] loop3: detected capacity change from 0 to 8192 [ 240.213470][T15057] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.233653][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.241200][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.248639][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.256056][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.263457][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.270958][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.278601][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.285999][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.293388][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.300778][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.308277][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.315682][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.323541][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.331333][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.338761][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.346126][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.353516][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.360965][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.368371][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.375768][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.383184][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.390599][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.398071][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.405604][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.413006][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.420518][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.428053][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.435440][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.442879][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.450297][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.457736][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.465149][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.472556][ T3179] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 240.480859][ T3179] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 240.492467][T14989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.558748][T14989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.585031][T15082] loop2: detected capacity change from 0 to 256 [ 240.592714][T15082] FAT-fs (loop2): Unrecognized mount option "shor=)R1tname=winW' [ 240.592714][T15082] 9*i95" or missing value [ 240.614936][T14989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.639988][T15091] x_tables: duplicate underflow at hook 2 [ 240.747834][T14989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.756684][T14989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.768961][T14989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.783165][T15107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.792666][T14989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.854887][T14989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.872196][T14989] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.887856][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.894987][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.917642][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.924763][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.952433][T14989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.963587][T14989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.043056][T14989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.056039][T15134] x_tables: duplicate underflow at hook 2 [ 241.134178][T14989] veth0_vlan: entered promiscuous mode [ 241.143949][T14989] veth1_vlan: entered promiscuous mode [ 241.154704][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 241.154718][ T29] audit: type=1326 audit(1719240329.190:113069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.180804][T14989] veth0_macvtap: entered promiscuous mode [ 241.195750][ T29] audit: type=1326 audit(1719240329.230:113070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.220098][ T29] audit: type=1326 audit(1719240329.230:113071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.222993][T14989] veth1_macvtap: entered promiscuous mode [ 241.244443][ T29] audit: type=1326 audit(1719240329.230:113072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.274535][ T29] audit: type=1326 audit(1719240329.230:113073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.298935][ T29] audit: type=1326 audit(1719240329.230:113074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.310733][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.323292][ T29] audit: type=1326 audit(1719240329.230:113075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.333696][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.333715][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.333753][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.333771][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.333786][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.333804][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.358016][ T29] audit: type=1326 audit(1719240329.230:113076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.367775][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.367800][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.367818][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.367903][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.378505][ T29] audit: type=1326 audit(1719240329.230:113077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.388092][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.391661][T14989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.398692][ T29] audit: type=1326 audit(1719240329.230:113078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 241.412240][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.559848][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.569747][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.580169][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.590095][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.594416][T15157] loop3: detected capacity change from 0 to 512 [ 241.600770][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.600800][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.600816][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.600833][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.600897][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.600915][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.600993][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.685878][T15157] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.692371][T15157] EXT4-fs: Invalid want_extra_isize 49 [ 241.699368][T14989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.713915][T14989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.722780][T14989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.731674][T14989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.740686][T14989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.875305][T15175] loop4: detected capacity change from 0 to 1024 [ 241.883208][T15175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.908492][T15175] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 241.935813][T15175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.949011][T15181] loop1: detected capacity change from 0 to 1024 [ 241.975462][T15183] loop0: detected capacity change from 0 to 8192 [ 241.984639][T15183] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.990678][T15181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.019569][T14989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.039773][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.049190][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.122732][T15195] loop1: detected capacity change from 0 to 2048 [ 242.185750][T15198] loop0: detected capacity change from 0 to 1024 [ 243.017259][ C1] sched: RT throttling activated [ 243.037572][T15198] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 243.053927][T15195] GPT:first_usable_lbas don't match. [ 243.059280][T15195] GPT:34 != 290 [ 243.062733][T15195] GPT: Use GNU Parted to correct GPT errors. [ 243.068872][T15195] loop1: p1 p2 p3 [ 243.316577][T15223] syzkaller0: entered promiscuous mode [ 243.322160][T15223] syzkaller0: entered allmulticast mode [ 243.355116][T15236] loop3: detected capacity change from 0 to 1024 [ 243.370664][T15234] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.382309][T15236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.389701][T15236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.425371][T15248] loop2: detected capacity change from 0 to 1024 [ 243.433489][T15248] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 243.544616][T15261] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.547380][T15265] loop3: detected capacity change from 0 to 128 [ 243.559395][T15263] x_tables: unsorted entry at hook 2 [ 243.580023][T15263] loop2: detected capacity change from 0 to 512 [ 243.589720][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.597230][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.604858][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.612514][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.620015][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.627544][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.635003][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.642415][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.649823][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.657210][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.664689][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.672138][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.673275][T15263] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 243.679543][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.679569][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.679593][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.709926][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.717369][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.724766][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.732183][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.739592][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.747072][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.754490][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.761964][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.769411][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.776797][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.784220][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.791631][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.799052][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.806506][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.813918][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.821330][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.828815][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.830642][T15263] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 243.836192][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.849936][T15263] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 18: invalid block bitmap [ 243.852428][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.866983][T15263] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 243.872530][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.883473][T15263] EXT4-fs (loop2): 1 truncate cleaned up [ 243.888587][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.894636][T15263] ext2 filesystem being mounted at /root/syzkaller-testdir4214350796/syzkaller.3gSBI4/81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.901570][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.923833][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.931349][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.938809][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.946247][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.953691][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.958279][T15263] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 243.961102][ T3175] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 243.976794][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.992278][ T3175] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 243.998238][T15263] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 244.075881][T15284] loop4: detected capacity change from 0 to 256 [ 244.162581][T15294] loop3: detected capacity change from 0 to 1024 [ 244.174412][T15294] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 244.252862][T15306] loop3: detected capacity change from 0 to 512 [ 244.290890][T15306] ext4 filesystem being mounted at /root/syzkaller-testdir866475619/syzkaller.dHv0lg/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.528075][T15340] loop1: detected capacity change from 0 to 1024 [ 245.216597][T15380] loop0: detected capacity change from 0 to 256 [ 245.229262][T15380] FAT-fs (loop0): invalid media value (0x00) [ 245.235349][T15380] FAT-fs (loop0): Can't find a valid FAT filesystem [ 245.549538][T15406] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.600224][T15433] loop2: detected capacity change from 0 to 1024 [ 246.627786][T15435] loop1: detected capacity change from 0 to 256 [ 246.842718][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 246.842731][ T29] audit: type=1326 audit(1719240846.887:113133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b37c0a9 code=0x7ffc0000 [ 246.888123][T15456] loop2: detected capacity change from 0 to 512 [ 246.889324][ T29] audit: type=1326 audit(1719240846.887:113134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f633b37c0a9 code=0x7ffc0000 [ 246.908121][T15456] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 246.988760][T15456] EXT4-fs (loop2): invalid journal inode [ 247.033141][T15456] sctp: [Deprecated]: syz-executor.2 (pid 15456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.033141][T15456] Use struct sctp_sack_info instead [ 247.066020][T15456] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 247.074375][T15456] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 247.103554][T15456] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.106554][T15462] loop4: detected capacity change from 0 to 512 [ 247.154381][T15462] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 247.177821][ T29] audit: type=1326 audit(1719240847.207:113135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b37c0a9 code=0x7ffc0000 [ 247.202707][ T29] audit: type=1326 audit(1719240847.207:113136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b37c0a9 code=0x7ffc0000 [ 247.243192][T15462] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 247.267358][ T29] audit: type=1326 audit(1719240847.297:113137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x0 [ 247.422302][ T29] audit: type=1326 audit(1719240847.467:113138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0612c3d0a9 code=0x0 [ 247.504179][ T29] audit: type=1326 audit(1719240847.547:113139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f633b37c0a9 code=0x7ffc0000 [ 247.529333][ T29] audit: type=1326 audit(1719240847.547:113140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b37c0a9 code=0x7ffc0000 [ 247.553674][ T29] audit: type=1326 audit(1719240847.547:113141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b37c0a9 code=0x7ffc0000 [ 247.578015][ T29] audit: type=1326 audit(1719240847.547:113142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f633b37c0a9 code=0x7ffc0000 [ 247.625004][T15481] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 247.634071][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.721658][T15486] loop0: detected capacity change from 0 to 2048 [ 247.769330][T15486] GPT:first_usable_lbas don't match. [ 247.774784][T15486] GPT:34 != 290 [ 247.778305][T15486] GPT: Use GNU Parted to correct GPT errors. [ 247.784422][T15486] loop0: p1 p2 p3 [ 248.262259][T15505] loop7: detected capacity change from 0 to 16384 [ 248.448700][T15505] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 248.765468][T15559] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 248.797325][T15562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64794 sclass=netlink_route_socket pid=15562 comm=syz-executor.0 [ 248.800281][T15559] gretap0: left promiscuous mode [ 248.829758][T15555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15555 comm=syz-executor.0 [ 249.020210][T15559] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.027548][T15559] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.213379][T15559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.260960][T15559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.314798][T15559] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.323835][T15559] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.332859][T15559] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.341793][T15559] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.405706][T15564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.418798][T15564] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.458669][T15564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.474232][T15568] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.577608][T15575] loop3: detected capacity change from 0 to 512 [ 249.599420][T15575] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 249.637030][T15575] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 249.705378][T15575] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #18: comm syz-executor.3: Siphash requires key [ 249.736685][T15575] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #18: comm syz-executor.3: Siphash requires key [ 249.780196][T15575] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #18: comm syz-executor.3: Siphash requires key [ 249.801256][T15589] loop1: detected capacity change from 0 to 1024 [ 249.813734][T15589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.909433][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.203030][T15624] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 250.211335][T15624] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.245010][T15626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.544618][T15640] loop0: detected capacity change from 0 to 512 [ 250.553010][T15640] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 250.562831][T15640] EXT4-fs (loop0): invalid journal inode [ 250.612805][T15640] sctp: [Deprecated]: syz-executor.0 (pid 15640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.612805][T15640] Use struct sctp_sack_info instead [ 250.651417][T15645] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.714172][T15650] loop0: detected capacity change from 0 to 1024 [ 250.723105][T15650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.730502][T15650] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.742235][T15652] loop1: detected capacity change from 0 to 512 [ 250.750357][T15652] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 250.900674][T15665] loop4: detected capacity change from 0 to 512 [ 250.912839][T15665] ext4 filesystem being mounted at /root/syzkaller-testdir3458552015/syzkaller.fHYOST/112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.980751][T15674] loop0: detected capacity change from 0 to 512 [ 250.990723][T15674] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 251.000021][T15674] EXT4-fs (loop0): invalid journal inode [ 251.055721][T15674] sctp: [Deprecated]: syz-executor.0 (pid 15674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.055721][T15674] Use struct sctp_sack_info instead [ 251.080956][T15674] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 251.089134][T15674] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 251.097782][T15674] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.121714][T15683] loop3: detected capacity change from 0 to 2048 [ 251.170384][T15687] syzkaller0: entered promiscuous mode [ 251.175948][T15687] syzkaller0: entered allmulticast mode [ 251.187182][T15687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.202382][T15683] loop3: p1 < > p3 [ 251.211922][T15695] macvlan2: entered allmulticast mode [ 251.219683][T15683] loop3: p3 size 134217728 extends beyond EOD, truncated [ 251.225630][T15695] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 251.231133][T15693] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 251.285245][T15702] loop4: detected capacity change from 0 to 256 [ 251.294170][T15702] FAT-fs (loop4): Unrecognized mount option "dz<" or missing value [ 251.337349][T15704] loop3: detected capacity change from 2048 to 0 [ 251.345449][ C1] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.418274][T15724] loop4: detected capacity change from 0 to 512 [ 251.426254][T15724] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 251.435527][T15724] EXT4-fs (loop4): invalid journal inode [ 251.513202][T15724] sctp: [Deprecated]: syz-executor.4 (pid 15724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.513202][T15724] Use struct sctp_sack_info instead [ 251.565077][T15724] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 251.573239][T15724] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 251.583727][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.884046][T15770] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 251.955598][ T29] kauditd_printk_skb: 1048 callbacks suppressed [ 251.955615][ T29] audit: type=1326 audit(1719242387.996:114191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 252.014861][ T29] audit: type=1326 audit(1719242387.996:114192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 252.036124][T15779] loop4: detected capacity change from 0 to 512 [ 252.039092][ T29] audit: type=1326 audit(1719242387.996:114193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 252.063346][T15779] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 252.069454][ T29] audit: type=1326 audit(1719242388.036:114194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 252.091638][T15779] EXT4-fs (loop4): invalid journal inode [ 252.101912][ T29] audit: type=1326 audit(1719242388.036:114195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 252.101948][ T29] audit: type=1326 audit(1719242388.036:114196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 252.204695][T15779] sctp: [Deprecated]: syz-executor.4 (pid 15779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.204695][T15779] Use struct sctp_sack_info instead [ 252.235290][ T29] audit: type=1326 audit(1719242388.276:114197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15781 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x0 [ 252.262907][T15779] validate_nla: 3 callbacks suppressed [ 252.262922][T15779] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 252.276564][T15779] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 252.297405][T15779] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.464951][T15796] loop1: detected capacity change from 0 to 1024 [ 252.508908][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 252.581970][T15796] loop1: detected capacity change from 0 to 1024 [ 252.618924][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 252.673430][T15796] loop1: detected capacity change from 0 to 1024 [ 252.681509][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 252.694955][T15803] loop3: detected capacity change from 0 to 512 [ 252.705087][T15803] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 252.719713][T15803] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 252.732653][T15803] EXT4-fs mount: 21 callbacks suppressed [ 252.732665][T15803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.744187][T15796] loop1: detected capacity change from 0 to 1024 [ 252.758280][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 252.771868][T14040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.802526][T15814] loop2: detected capacity change from 0 to 2048 [ 252.823423][T15796] loop1: detected capacity change from 0 to 1024 [ 252.831651][T15816] loop3: detected capacity change from 0 to 1024 [ 252.832585][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 252.839725][T15816] EXT4-fs: Ignoring removed i_version option [ 252.854237][T15816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 252.860908][T15814] Alternate GPT is invalid, using primary GPT. [ 252.865342][T15816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.869468][T15814] loop2: p2 p3 p7 [ 252.895547][T15814] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.902839][T15814] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.926348][T15796] loop1: detected capacity change from 0 to 1024 [ 252.941213][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 252.967835][T15814] 9pnet: p9_errstr2errno: server reported unknown error @hQIte [ 253.006619][T15796] loop1: detected capacity change from 0 to 1024 [ 253.033448][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.050286][ T29] audit: type=1400 audit(1719242389.096:114198): avc: denied { create } for pid=15815 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 253.078375][T15816] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #12: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=301989902, rec_len=0, size=56 fake=0 [ 253.083877][T15796] loop1: detected capacity change from 0 to 1024 [ 253.112799][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.160061][T14040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.183298][T15796] loop1: detected capacity change from 0 to 1024 [ 253.205522][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.231723][T15832] loop3: detected capacity change from 0 to 512 [ 253.256756][T15832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.263666][T15796] loop1: detected capacity change from 0 to 1024 [ 253.276222][T15832] ext4 filesystem being mounted at /root/syzkaller-testdir866475619/syzkaller.dHv0lg/109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.291801][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.307394][T15830] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 253.335205][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.352513][T15832] loop3: detected capacity change from 512 to 0 [ 253.356084][T15842] syz-executor.3: attempt to access beyond end of device [ 253.356084][T15842] loop3: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 253.374443][T15842] EXT4-fs error (device loop3): __ext4_find_entry:1684: inode #2: comm syz-executor.3: reading directory lblock 0 [ 253.376352][T15796] loop1: detected capacity change from 0 to 1024 [ 253.386561][T15842] syz-executor.3: attempt to access beyond end of device [ 253.386561][T15842] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 253.406446][T15842] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 253.411986][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.415287][T15842] EXT4-fs (loop3): I/O error while writing superblock [ 253.441538][T15844] loop0: detected capacity change from 0 to 512 [ 253.450599][T15844] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 253.466041][T15844] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 253.479149][T15844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.493403][T15796] loop1: detected capacity change from 0 to 1024 [ 253.501772][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.526093][T14040] syz-executor.3: attempt to access beyond end of device [ 253.526093][T14040] loop3: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 253.555087][T15796] loop1: detected capacity change from 0 to 1024 [ 253.562838][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.563876][T14040] syz-executor.3: attempt to access beyond end of device [ 253.563876][T14040] loop3: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 253.586455][T14040] syz-executor.3: attempt to access beyond end of device [ 253.586455][T14040] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 253.586528][T13057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.602451][T14040] syz-executor.3: attempt to access beyond end of device [ 253.602451][T14040] loop3: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 253.629167][T15796] loop1: detected capacity change from 0 to 1024 [ 253.635999][T14040] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor.3: unable to read itable block [ 253.649235][T14040] syz-executor.3: attempt to access beyond end of device [ 253.649235][T14040] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 253.662935][T14040] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 253.671258][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.672311][T14040] EXT4-fs (loop3): I/O error while writing superblock [ 253.687313][T14040] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 253.698630][T14040] syz-executor.3: attempt to access beyond end of device [ 253.698630][T14040] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 253.712276][T14040] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 253.714508][T15858] loop0: detected capacity change from 0 to 512 [ 253.724852][T14040] EXT4-fs (loop3): I/O error while writing superblock [ 253.733616][T14040] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 253.734517][T15796] loop1: detected capacity change from 0 to 1024 [ 253.745364][T14040] syz-executor.3: attempt to access beyond end of device [ 253.745364][T14040] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 253.754429][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.765206][T14040] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 253.768291][T14040] EXT4-fs (loop3): I/O error while writing superblock [ 253.791917][ T36] kworker/u8:2: attempt to access beyond end of device [ 253.791917][ T36] loop3: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 253.806434][ T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #3: block 34: comm kworker/u8:2: unable to read itable block [ 253.822125][T15858] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 253.830045][ T36] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 253.840617][ T36] EXT4-fs (loop3): I/O error while writing superblock [ 253.847630][ T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:2: unable to read itable block [ 253.863095][ T36] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 253.878858][T15796] loop1: detected capacity change from 0 to 1024 [ 253.885754][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.895077][ T36] EXT4-fs (loop3): I/O error while writing superblock [ 253.903685][ T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:2: unable to read itable block [ 253.904035][T15865] loop4: detected capacity change from 0 to 1024 [ 253.917746][ T36] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 253.932622][ T36] EXT4-fs (loop3): I/O error while writing superblock [ 253.940159][T14040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.940653][T15865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.960663][T14040] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 253.964644][T15796] loop1: detected capacity change from 0 to 1024 [ 253.968959][T14040] EXT4-fs (loop3): I/O error while writing superblock [ 253.976428][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 253.994332][T15837] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 253.998149][T15865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.016242][T15865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.043222][T15796] loop1: detected capacity change from 0 to 1024 [ 254.051193][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 254.107709][T15796] loop1: detected capacity change from 0 to 1024 [ 254.116573][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 254.125981][ T29] audit: type=1400 audit(1719242390.156:114199): avc: denied { setattr } for pid=15874 comm="syz-executor.4" name="NETLINK" dev="sockfs" ino=54175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.165009][ T29] audit: type=1326 audit(1719242390.206:114200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0f69c827 code=0x7ffc0000 [ 254.203260][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.204477][T15796] loop1: detected capacity change from 0 to 1024 [ 254.210716][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.221191][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 254.224387][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.241077][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.248532][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.255906][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.263335][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.270796][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.278203][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.285589][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.292998][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.300400][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.307834][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.315327][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.322775][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.330267][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.337725][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.345119][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.352538][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.359999][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.367481][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.374999][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.382402][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.389789][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.397708][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.405109][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.412903][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.420429][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.427889][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.435290][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.442783][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.450214][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.457658][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.465098][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.472497][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.479990][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.487477][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.494862][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.502335][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.509808][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.517303][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.524735][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.532122][ T4026] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 254.541183][ T4026] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 254.582450][T15796] loop1: detected capacity change from 0 to 1024 [ 254.589642][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 254.643645][T15796] loop1: detected capacity change from 0 to 1024 [ 254.651688][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 254.687836][T15907] loop4: detected capacity change from 0 to 8192 [ 254.703506][T15796] loop1: detected capacity change from 0 to 1024 [ 254.711474][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 254.734581][T15907] loop4: p1 p2 [ 254.742661][T15907] loop4: p1 start 16777472 is beyond EOD, truncated [ 254.749332][T15907] loop4: p2 start 67698708 is beyond EOD, truncated [ 254.774739][T15796] loop1: detected capacity change from 0 to 1024 [ 254.788023][T15907] veth1_macvtap: left promiscuous mode [ 254.843688][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 254.927135][T15796] loop1: detected capacity change from 0 to 1024 [ 254.958466][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 255.002841][T15796] loop1: detected capacity change from 0 to 1024 [ 255.017366][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 255.063743][T15796] loop1: detected capacity change from 0 to 1024 [ 255.071271][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 255.105340][T15921] chnl_net:caif_netlink_parms(): no params data found [ 255.127822][T15796] loop1: detected capacity change from 0 to 1024 [ 255.139523][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 255.166058][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.173163][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.187491][T15921] bridge_slave_0: entered allmulticast mode [ 255.194133][T15921] bridge_slave_0: entered promiscuous mode [ 255.201712][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.208872][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.222577][T15796] loop1: detected capacity change from 0 to 1024 [ 255.224740][T15921] bridge_slave_1: entered allmulticast mode [ 255.235712][T15921] bridge_slave_1: entered promiscuous mode [ 255.236961][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 255.261557][T15921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.273874][T15921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.276941][T15796] loop1: detected capacity change from 0 to 1024 [ 255.291318][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 255.314205][T15921] team0: Port device team_slave_0 added [ 255.321128][T15921] team0: Port device team_slave_1 added [ 255.340392][T15921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.347431][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.366423][T15796] loop1: detected capacity change from 0 to 1024 [ 255.373336][T15921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.375122][T15921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.382601][T15796] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 255.390207][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.432287][T15921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.461958][T15921] hsr_slave_0: entered promiscuous mode [ 255.468620][T15921] hsr_slave_1: entered promiscuous mode [ 255.474951][T15921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.482639][T15921] Cannot create hsr debugfs directory [ 255.626923][T15977] loop2: detected capacity change from 0 to 512 [ 255.636001][T15977] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 255.636001][T15977] [ 255.646856][T15977] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 255.656013][T15977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 255.694205][T15982] loop1: detected capacity change from 0 to 2048 [ 255.704698][T15982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.722662][T15982] loop7: detected capacity change from 0 to 16384 [ 255.768539][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.785649][T14989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.794747][T15921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.803720][T15921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.812586][T15921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.821611][T15921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.866652][T15921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.881314][T15921] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.891449][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.898613][T11331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.910077][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.917368][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.951889][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.961744][ T36] bridge_slave_1: left allmulticast mode [ 255.967633][ T36] bridge_slave_1: left promiscuous mode [ 255.973521][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.984023][ T36] bridge_slave_0: left promiscuous mode [ 255.989677][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.071602][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.089485][T16004] loop1: detected capacity change from 0 to 1024 [ 256.127202][T16004] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 256.170143][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.180054][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.200741][ T36] bond0 (unregistering): Released all slaves [ 256.215782][T15921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.226340][T15921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.244472][T16002] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 256.296479][T16014] tipc: Started in network mode [ 256.301585][T16014] tipc: Node identity , cluster identity 4711 [ 256.307706][T16014] tipc: Failed to set node id, please configure manually [ 256.314866][T16014] tipc: Enabling of bearer rejected, failed to enable media [ 256.325620][ T36] hsr_slave_0: left promiscuous mode [ 256.333820][ T36] hsr_slave_1: left promiscuous mode [ 256.339779][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.347927][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.423096][ T36] team0 (unregistering): Port device team_slave_1 removed [ 256.443781][ T36] team0 (unregistering): Port device team_slave_0 removed [ 256.480250][ T36] bridge_slave_0 (unregistering): left allmulticast mode [ 256.534014][T15921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.664122][T15921] veth0_vlan: entered promiscuous mode [ 256.675431][T15921] veth1_vlan: entered promiscuous mode [ 256.691958][T15921] veth0_macvtap: entered promiscuous mode [ 256.699929][T15921] veth1_macvtap: entered promiscuous mode [ 256.711105][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.721767][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.731676][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.742171][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.752009][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.762431][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.772356][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.782850][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.792734][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.803192][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.813012][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.823418][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.834130][T15921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.844801][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.855259][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.865177][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.875639][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.885469][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.895968][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.905816][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.916283][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.926118][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.936553][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.946372][T15921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.956890][T15921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.969784][T15921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.981009][T15921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.989846][T15921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.998616][T15921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.007402][T15921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.078916][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 257.078934][ T29] audit: type=1400 audit(1719242905.127:114261): avc: denied { create } for pid=16038 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=decnet_socket permissive=1 [ 257.118555][ T29] audit: type=1400 audit(1719242905.167:114262): avc: denied { create } for pid=16038 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=dccp_socket permissive=1 [ 257.139386][ T29] audit: type=1400 audit(1719242905.167:114263): avc: denied { setopt } for pid=16038 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=dccp_socket permissive=1 [ 257.166949][ T29] audit: type=1400 audit(1719242905.167:114264): avc: denied { connect } for pid=16038 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=dccp_socket permissive=1 [ 257.187351][T16043] loop1: detected capacity change from 0 to 256 [ 257.187861][ T29] audit: type=1400 audit(1719242905.167:114265): avc: denied { name_connect } for pid=16038 comm="syz-executor.1" dest=20000 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 257.195544][T16043] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 257.216406][ T29] audit: type=1326 audit(1719242905.187:114266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16037 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 257.216471][ T29] audit: type=1326 audit(1719242905.197:114267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16037 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 257.273750][ T29] audit: type=1326 audit(1719242905.197:114268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16037 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 257.297905][ T29] audit: type=1326 audit(1719242905.197:114269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16037 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 257.322618][ T29] audit: type=1326 audit(1719242905.197:114270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16037 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 257.383839][T16049] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 257.420073][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.470105][T16062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=16062 comm=syz-executor.2 [ 257.521284][T16067] loop0: detected capacity change from 0 to 764 [ 257.528731][T16062] FAT-fs (loop2): unable to read boot sector [ 257.547546][T16067] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 257.556344][T16067] Symlink component flag not implemented [ 257.562136][T16067] Symlink component flag not implemented [ 257.568610][T16079] hub 6-0:1.0: USB hub found [ 257.574625][T16067] Symlink component flag not implemented (128) [ 257.580834][T16067] Symlink component flag not implemented (122) [ 257.586102][T16079] hub 6-0:1.0: 8 ports detected [ 257.645912][T16085] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 257.654202][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.654249][T16084] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 257.671820][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.713428][T16090] loop4: detected capacity change from 0 to 1024 [ 257.721313][T16090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.728642][T16090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.740018][T16090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.874764][T13839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.576927][T16116] loop2: detected capacity change from 0 to 512 [ 258.598002][T16116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.614734][T16113] loop3: detected capacity change from 0 to 512 [ 258.649927][T16113] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 258.674706][T16116] ext4 filesystem being mounted at /root/syzkaller-testdir4214350796/syzkaller.3gSBI4/118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.707547][T16113] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 258.740703][T16115] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 258.758192][T16113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.769990][T16115] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 258.822814][T16115] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 258.845559][T15921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.867096][T16115] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 258.889291][T16115] SELinux: Context system_u:object_r:root_t:s0 is not valid (left unmapped). [ 258.966458][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.167083][T16142] loop4: detected capacity change from 0 to 8192 [ 259.208636][T16142] loop4: p4 < > [ 259.289677][T16147] loop1: detected capacity change from 0 to 512 [ 259.889234][T16165] loop3: detected capacity change from 0 to 512 [ 259.905545][T16165] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 259.920422][T16165] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 259.933128][T16165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.976216][T15921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.369099][T16224] loop2: detected capacity change from 0 to 256 [ 260.376794][T16224] FAT-fs (loop2): Unrecognized mount option "0x000000000000ee00tbMԍ" or missing value [ 260.462431][T16226] syzkaller0: entered promiscuous mode [ 260.468068][T16226] syzkaller0: entered allmulticast mode [ 260.604843][T16230] loop2: detected capacity change from 0 to 256 [ 260.648103][T16230] FAT-fs (loop2): Directory bread(block 64) failed [ 260.664928][T16230] FAT-fs (loop2): Directory bread(block 65) failed [ 260.682458][T16230] FAT-fs (loop2): Directory bread(block 66) failed [ 260.697395][T16230] FAT-fs (loop2): Directory bread(block 67) failed [ 260.714250][T16230] FAT-fs (loop2): Directory bread(block 68) failed [ 260.727448][T16230] FAT-fs (loop2): Directory bread(block 69) failed [ 260.744321][T16230] FAT-fs (loop2): Directory bread(block 70) failed [ 260.757312][T16230] FAT-fs (loop2): Directory bread(block 71) failed [ 260.774853][T16230] FAT-fs (loop2): Directory bread(block 72) failed [ 260.784993][T16230] FAT-fs (loop2): Directory bread(block 73) failed [ 261.128364][T16249] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 261.143755][T16249] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 261.212637][T16261] loop2: detected capacity change from 0 to 164 [ 261.222363][T16261] Unable to read rock-ridge attributes [ 261.249507][T16256] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 261.284266][T16265] Unable to read rock-ridge attributes [ 262.106607][T16284] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 262.155528][T16284] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.262737][T16289] loop0: detected capacity change from 0 to 512 [ 262.281019][T16289] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 262.297611][T16289] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 262.314426][T16289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.324487][T16296] loop4: detected capacity change from 0 to 512 [ 262.334767][T16296] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.348104][T16296] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 262.367297][T16296] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 262.375410][T16296] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec118, mo2=0002] [ 262.384427][T13057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.386398][T16296] EXT4-fs (loop4): orphan cleanup on readonly fs [ 262.400902][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.410552][T16296] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 262.426956][T16296] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 262.442407][T16296] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 262.456552][T16296] __quota_error: 60 callbacks suppressed [ 262.456569][T16296] Quota error (device loop4): write_blk: dquota write failed [ 262.469893][T16296] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 262.480115][T16296] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 1 [ 262.493049][T16296] EXT4-fs (loop4): 1 orphan inode deleted [ 262.498992][ T4849] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 262.508019][ T4849] EXT4-fs error (device loop4): ext4_release_dquot:6883: comm kworker/u8:28: Failed to release dquot type 1 [ 262.522164][T16296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.542445][T13839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.615992][T16317] loop4: detected capacity change from 0 to 512 [ 262.623617][T16317] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 262.633248][T16317] EXT4-fs (loop4): invalid journal inode [ 262.701294][ T29] audit: type=1326 audit(1719246494.744:114331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 262.727562][ T29] audit: type=1326 audit(1719246494.744:114332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 262.751798][ T29] audit: type=1326 audit(1719246494.744:114333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 262.778968][T16317] sctp: [Deprecated]: syz-executor.4 (pid 16317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.778968][T16317] Use struct sctp_sack_info instead [ 262.800815][T16317] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 262.808992][T16317] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 262.819011][T16317] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.853766][ T29] audit: type=1326 audit(1719246494.894:114334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 262.879630][ T29] audit: type=1326 audit(1719246494.894:114335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a27570a9 code=0x7ffc0000 [ 262.905332][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.024725][T16332] loop1: detected capacity change from 0 to 512 [ 263.035168][T16332] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 263.049511][T16332] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 263.108051][T16332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.126426][ T29] audit: type=1326 audit(1719247007.171:114336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 263.151074][ T29] audit: type=1326 audit(1719247007.171:114337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f0612c3d0a9 code=0x7ffc0000 [ 263.224467][T14989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.516339][T16348] loop2: detected capacity change from 0 to 512 [ 263.560251][T16348] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 263.577127][T16348] EXT4-fs (loop2): invalid journal inode [ 263.626641][T16348] sctp: [Deprecated]: syz-executor.2 (pid 16348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.626641][T16348] Use struct sctp_sack_info instead [ 263.662274][T16348] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 263.670559][T16348] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 263.679154][T16348] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.801984][T16370] loop2: detected capacity change from 0 to 2048 [ 263.815342][T16370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.845965][T16370] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 9: comm syz-executor.2: path /root/syzkaller-testdir4214350796/syzkaller.3gSBI4/142/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 263.902654][T13780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.918593][T16379] loop3: detected capacity change from 0 to 128 [ 264.430678][T16419] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 264.453178][T16419] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.454045][T16408] loop1: detected capacity change from 0 to 2048 [ 264.468862][T16419] bond0: (slave team0): Enslaving as an active interface with an up link [ 264.495975][T16408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.568205][T14989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.583541][T16447] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.844689][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.856338][T16482] vxlan0: entered allmulticast mode [ 264.982999][T16476] loop0: detected capacity change from 0 to 2048 [ 265.000184][T16476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.038771][T13057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.544482][T16503] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.616810][T16508] loop4: detected capacity change from 0 to 512 [ 265.624210][T16508] ext4: Unknown parameter '' [ 265.695892][T16514] loop4: detected capacity change from 0 to 1024 [ 265.729392][T16514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.783555][T13839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.838064][T16524] loop3: detected capacity change from 0 to 259 [ 265.902136][T16529] loop4: detected capacity change from 0 to 1024 [ 265.910108][T16529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.917062][T16529] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 265.930140][T16529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.033686][T13839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.118824][T16539] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 266.127010][T16539] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.154658][T16541] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 266.433894][T16566] loop0: detected capacity change from 0 to 1024 [ 266.443016][T16566] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 266.445766][T16564] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.460981][T16564] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.553679][T16579] loop0: detected capacity change from 0 to 512 [ 266.562652][T16579] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 266.571705][T16579] EXT4-fs (loop0): invalid journal inode [ 266.579950][T16581] loop4: detected capacity change from 0 to 256 [ 266.643545][T16579] sctp: [Deprecated]: syz-executor.0 (pid 16579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.643545][T16579] Use struct sctp_sack_info instead [ 266.664755][T16579] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 266.672890][T16579] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 266.682402][T16579] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.196110][T16602] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 267.387766][T16613] loop4: detected capacity change from 0 to 1024 [ 267.395572][T16613] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 267.572623][T16635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16635 comm=syz-executor.1 [ 267.661170][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 267.661187][ T29] audit: type=1326 audit(1719248547.703:114349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0f69c827 code=0x7ffc0000 [ 267.692252][ T29] audit: type=1326 audit(1719248547.703:114350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e0f6624e9 code=0x7ffc0000 [ 267.716452][ T29] audit: type=1326 audit(1719248547.703:114351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0f69c827 code=0x7ffc0000 [ 267.740531][ T29] audit: type=1326 audit(1719248547.703:114352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e0f6624e9 code=0x7ffc0000 [ 267.764761][ T29] audit: type=1326 audit(1719248547.703:114353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0f69c827 code=0x7ffc0000 [ 267.788926][ T29] audit: type=1326 audit(1719248547.703:114354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e0f6624e9 code=0x7ffc0000 [ 267.813059][ T29] audit: type=1326 audit(1719248547.703:114355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f69f0a9 code=0x7ffc0000 [ 267.837218][ T29] audit: type=1326 audit(1719248547.703:114356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0f69c827 code=0x7ffc0000 [ 267.861460][ T29] audit: type=1326 audit(1719248547.703:114357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e0f6624e9 code=0x7ffc0000 [ 267.885564][ T29] audit: type=1326 audit(1719248547.703:114358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0f69c827 code=0x7ffc0000 [ 267.925756][T16649] loop2: detected capacity change from 0 to 1024 [ 267.933844][T16649] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 267.957488][T16651] macsec0: entered promiscuous mode [ 267.963947][T16651] veth1_macvtap: left promiscuous mode [ 267.980676][T16651] macsec0 (unregistering): left promiscuous mode [ 268.042027][T16659] loop2: detected capacity change from 0 to 512 [ 268.049942][T16651] __nla_validate_parse: 3 callbacks suppressed [ 268.049957][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.049970][T16659] ext2: Unknown parameter 'dont_appraise' [ 268.084773][T16661] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.153891][T16666] loop1: detected capacity change from 0 to 512 [ 268.163135][T16666] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 268.171242][T16666] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 268.225550][T16666] System zones: 0-1, 15-15, 18-18, 34-34 [ 268.231432][T16666] EXT4-fs (loop1): orphan cleanup on readonly fs [ 268.237906][T16666] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 268.252474][T16666] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 268.259611][T16666] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 268.274425][T16666] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 268.284818][T16666] EXT4-fs (loop1): 1 truncate cleaned up [ 268.290987][T16666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.313851][T14989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.325120][T14989] ================================================================== [ 268.333234][T14989] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 268.340699][T14989] [ 268.343016][T14989] read-write to 0xffff888237d2b410 of 1 bytes by task 16664 on cpu 1: [ 268.351165][T14989] mlock_new_folio+0x114/0x200 [ 268.355924][T14989] folio_add_lru_vma+0x15d/0x170 [ 268.360864][T14989] handle_mm_fault+0x2411/0x2a80 [ 268.365808][T14989] __get_user_pages+0x49d/0xf10 [ 268.370680][T14989] __mm_populate+0x25b/0x3b0 [ 268.375296][T14989] __se_sys_mlockall+0x2c5/0x370 [ 268.380247][T14989] __x64_sys_mlockall+0x1f/0x30 [ 268.385098][T14989] x64_sys_call+0x2a79/0x2d70 [ 268.389791][T14989] do_syscall_64+0xc9/0x1c0 [ 268.394302][T14989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.400204][T14989] [ 268.402522][T14989] read to 0xffff888237d2b410 of 1 bytes by task 14989 on cpu 0: [ 268.410147][T14989] need_mlock_drain+0x30/0x50 [ 268.414822][T14989] __lru_add_drain_all+0x235/0x410 [ 268.419941][T14989] lru_add_drain_all+0x10/0x20 [ 268.424707][T14989] invalidate_bdev+0x47/0x70 [ 268.429310][T14989] ext4_put_super+0x51b/0x7e0 [ 268.434014][T14989] generic_shutdown_super+0xde/0x210 [ 268.439319][T14989] kill_block_super+0x2a/0x70 [ 268.444014][T14989] ext4_kill_sb+0x44/0x80 [ 268.448358][T14989] deactivate_locked_super+0x7d/0x1c0 [ 268.453735][T14989] deactivate_super+0x9f/0xb0 [ 268.458422][T14989] cleanup_mnt+0x268/0x2e0 [ 268.462847][T14989] __cleanup_mnt+0x19/0x20 [ 268.467272][T14989] task_work_run+0x13a/0x1a0 [ 268.471880][T14989] syscall_exit_to_user_mode+0xbe/0x130 [ 268.477430][T14989] do_syscall_64+0xd6/0x1c0 [ 268.481954][T14989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.487849][T14989] [ 268.490165][T14989] value changed: 0x05 -> 0x0a [ 268.494835][T14989] [ 268.497151][T14989] Reported by Kernel Concurrency Sanitizer on: [ 268.503293][T14989] CPU: 0 PID: 14989 Comm: syz-executor.1 Not tainted 6.10.0-rc5-syzkaller #0 [ 268.512054][T14989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 2024/06/24 17:11:00 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 268.522108][T14989] ==================================================================