last executing test programs: 7m20.620488464s ago: executing program 4 (id=5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x45, 0xf}]}) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000600)) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1018658, &(0x7f00000002c0)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noblock_validity}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@debug}, {@bh}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x43, 0xa0, 0xd8, 0x98, 0x188, 0x178, 0x178, 0x188, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xb8, 0xd8, 0x0, {0x0, 0x7a010000}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0xffffff00, 'bond0\x00', 'syzkaller1\x00', {}, {0xff}, 0x1d, 0x1, 0xe}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa385120281f126a6bc52700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 7m19.395462611s ago: executing program 4 (id=15): r0 = syz_io_uring_setup(0xbc0, &(0x7f0000000100)={0x0, 0x5568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 7m19.119385547s ago: executing program 4 (id=17): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008848"], 0x24}}, 0x10) syz_clone(0x800011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="00000000000000000000b90000001000c57b477accffc807f86df83dbbc90600000010860321930d41bd2b23c1e060dbcf11e07d588023f38a24ac39b94a88f0741fc576e91363857af81555d1b1bc47f66c71021c1674832c8a9f593161906f07a0749e958369086388cdecfd24afa7de1ff183bab59d34ae00dafc42302b94c0d23e908cf5fe70b7f534c570b1cca659fcd7c8f58f8a15fd78c506b7b84447be591ee80078847dcebe988000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a300000f7ff0800054000000023200011800e000100636f8f667142251b1076ea516e6e6c696d6974"], 0xa4}}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r11}, 0x10) setgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) 7m18.63421452s ago: executing program 4 (id=25): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet6_sctp(0xa, 0x5, 0x84) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x2}) 7m18.16788969s ago: executing program 4 (id=39): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x2080, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) 7m18.050229815s ago: executing program 32 (id=39): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x2080, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) 5m2.818799568s ago: executing program 1 (id=1547): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x9}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESTART(r4, 0x1265, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3f}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xca}, @NL80211_ATTR_PMKID={0x14, 0x55, "aa7ea5e18a156b3304c03575f87dbe39"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000380)) r6 = eventfd(0x9) io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xfff5, r0, &(0x7f0000000380)="74ce6655f8e224ec989c9ffa6716df8104ac255573cb148f0b014bc677fe6e09f073a29e270454b69a7396a0d18f9f830087563da64fed739f6d252fdc4ca86c555bbf0c", 0x44, 0x9, 0x0, 0x0, r6}, &(0x7f00000004c0)) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 5m2.630041922s ago: executing program 1 (id=1549): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000840) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0xffffffffffffffff) socket$inet(0x10, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000240)=""/207) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1032, 0x20a}}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000021000010400b0090100000000bb000000", @ANYRES32=r5, @ANYBLOB="c303000000000000"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_UNLINKAT={0x24, 0x60, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$xdp(&(0x7f0000556000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x0) 5m2.03105476s ago: executing program 1 (id=1562): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYdaRfSpoNZn25hsQsgmG7KbtglFU/wDBBEVBMEnXwT/AEH6J4hQ0HdRUUTbex/6cG/3sruz/ZHuJindZEP284GTOXNmJt9zdpjZPTOHmQD61vmIuBkRL2q12qWIGM7K0yzFZjPV13v29OFMPSVRq93+XxKRNMvqq4299j9PZpsdi4jvfTvih8nbcSvrG4vTpVJxNZsvVJdWCpX1jcsLS9Pzxfni8uTkxLWp61NXp8a70s6hiLjxzX/94qe/+9aNP335/t/v/GfsR0lWHvGqHd3WbHqu8Vm0DEbE6l4E64GBrD25VkGbfQ0AwMHR+p3/hYi4FMMx0Pg1BwAAABwmta8NxUdJRA0AAAA4tNLGGNgkzWfjAIYiTfP55hjez8SJtFSuVL80V15bnm2OlR2JXDq3UCqOZ2OFRyKX1OcnGvlX81e2zE9GxOmI+Pnw8cZ8fqZcmu31xQ8AAADoEye39P8/HG72/wEAAIBDZqTXFQAAAAD2nP4/AAAAHH76/wAAAHCofefWrXqqtd5/PXtvfW2xfO/ybLGymF9am8nPlFdX8vPl8nzjmX1LO/2/Urm88pVYXntQqBYr1UJlfePOUnltuXpn4Y1XYAMAAAD76PTnH/8tiYjNrx5vpLojva4UsC8G32Xlf+5dPYD9N9DrCgA9807f/8Chkut1BYCeSyLiN9ss7zh45897Ux8AAKD7Rj/b/v5/uuO1gc10n6oI7BHX/6B/uf8P/cv9f+hfuRgIHXnob8kOy9///n+t9k4VAgAAum6okZI0n93zH4o0zecjTjVeC5BL5hZKxfGI+FRE/HU4d7Q+P9HYMtmxzwAAAAAAAAAAAAAAAAAAAAAAAAAANNVqSdQAAACAQy0i/XeSvf9rdPji0NbrA0eS58ONaUTc//XtXz6YrlZXJ+rl/39ZXv1VVn6lF1cwAAAAgK1a/fRWPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuunZ04czrbSfcf/79YgYaRd/MI41psciFxEnPkhi8LXtkogY6EL8zUcR8Y0ftImf1KsVI1kt2sU/3q34Z9q1f/v4aUSc7EJ86GeP6+efm+2OvzTON6Zbj7+jL7cd7EL8zue/9OX5b6DN8V8vO7XLGGef/KHQMf6jiLOD7c8/rfhJh/PfhV3Gv/v9jY1Oy2q/jRht+/2TvBGrUF1aKVTWNy4vLE3PF+eLy5OTE9emrk9dnRovzC2UitnftjF+9rk/vtiu/Sc6xB/Zof0Xd9n+j588ePrpZjbXLv7Yhfb7/0yH+Gm2/7+Y5evLR1v5zWb+ded+/5dz27V/tkP7d9r/Y7ts/6Xv/uQfu1wVANgHlfWNxelSqbja15n3+jTqP4sORCtkdsrUss5bq+THB6ViBzDTOiae9+bEBAAAdN3bfeDduLt3FQIAAAAAAAAAAAAAAAAAAIA+1J1nhrWeib390/VaNpuTt56FDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS58EAAD//43V0Tc=") bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000feff00004b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10402, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000003c0)=""/46, 0x2e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r9], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 5m1.143471975s ago: executing program 1 (id=1587): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x1000, 0x6, 0x2d2}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x40, r0, 0x13, {0x7, 0x200}, 0xa}, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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") r5 = open(&(0x7f00000003c0)='./file1\x00', 0x321e42, 0x1) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x20000000) getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000000801ed0000000000000000050040010900010073797a3000000500030088000000144bdb0fd1000240000000020800014000000003000000e5000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) syz_io_uring_setup(0x4e0, 0x0, &(0x7f0000000640), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) syz_open_procfs(r7, &(0x7f0000000380)='net/anycast6\x00') r8 = socket(0x2a, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES8=r2, @ANYRESHEX=r2, @ANYRES32=r9], 0x5c}, 0x1, 0x0, 0x0, 0x2004}, 0x4008880) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000002c0)) ioctl$KDSETKEYCODE(r10, 0x4b4d, &(0x7f0000002900)={0x6, 0x2}) socket(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r12, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m0.214017634s ago: executing program 1 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r2, &(0x7f0000000280)=""/176, 0xb0) 4m58.922407021s ago: executing program 1 (id=1608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x45cd4718, 0xfffffffa}]}}}}}}}, 0x0) 4m58.922156461s ago: executing program 33 (id=1608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x45cd4718, 0xfffffffa}]}}}}}}}, 0x0) 8.124950601s ago: executing program 0 (id=5417): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0xa6ea) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) 8.020783364s ago: executing program 0 (id=5419): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @b={0x2, 0x4, 0x1, 0x10, {0x1, "cf"}, 0x2}}, 0xa) 8.020460155s ago: executing program 0 (id=5420): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e]}}, 0x0, 0x4b, 0x0, 0x1, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r3, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000070601080000000039000000080000000500010006000000a76a907f784e078c3376eb71f5018fb915f7c9319b2cc7a9cba8870f1f007bb72bded73bddcdbe9535e0ac491734d1c487dfaf546244f3a27a4194f58741a5592cfbd88afd52a140753b07af647699a06dac69d0f650a657a1df4a5df2665b09ffe991bca1777d8504c5ee740f29f45e4f9cd7164c1b2f21991ecca0aaf5a44aace02d8cc4e226bba656bac67a72"], 0x1c}}, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) 7.170912445s ago: executing program 0 (id=5438): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbJKmTauJIPjjFBA0ULoxNbYKHioeRLBQ0LPtstmGmk22ZDelCQEtIngRVDwIeunZH/Xm1R9X/S88iKVqWqx4kMhsZtpts5smbZKt7ucD07w3b7bvfffNvHm7M8wG0LNG038KEY9FxAdJxHC2PomIgWaqP+LY2nbXV5bL6ZLE6uprvyfNba6tLJej5TWp/Vnm0Yj4/t2Ig4X19dYXl2ZK1Wplfi3bFxFnx+uLS4fOzJamK9OVuSMTk5OHjz579Mj2xfrnT0sHLn/48lNfHfv7nUcuvf9DEsfiQFbWGsd2GY3R7D0ZSN/CW7y03ZV1WdLtBnBXCtnB1x/pGDAcfc0UAPB/9lZErAIAPSZx/geAHpN/D3BtZbmcL939RmJ3XXkxIvauxZ9f31wr6c+u2e1tXgcdupbccmUkiYiRbah/NCI+++aNL9Ildug6JEA7b1+IiFMjo+vH/2TdPQtb9fQGZXuyv6O3rTf+we75Np3/PNdu/le4Mf+JNvOfwTbH7t244/G/bxsq2UA6/3uh5d626y3xZ0b6stwDzTnfQHL6TLWSjm0PRsRYDAym+YkN6hi7+s/VTmWt878/Pnrz87T+9O/NLQq/9g/e+pqpUqN0LzG3unIh4vH+dvEnN/o/6TD/PbHJOl55/r1PO5Wl8afx5sv6+CO7O2lnrF6MeLJt/9+8oy1NjTdmO9yfON7cHcbznaKNr3/+ZKhT/a39ny5p/flngd2Q9v/QxvGPJK33a9bXjv2t+PHi8Hedyu4cf/v9f0/yejOdzyPOlxqN+YmIPcmr69cfvvnaPJ9vn8Y/9kT743+j/T/9THhqk/H3X/7tyw3j39/d/p/aUv+3S6SDdIeimVL10vWZvk71b67/J5upsWzNZsa/Ti29PXEv7x0AAAAAAAAAAAAAAAAAAAAAAAAAbFYhIg5EUijeSBcKxeLab3g/HEOFaq3eOHi6tjA3Fc3fyh6JgUL+qMvhluehTmTPw8/zh2/LPxMRD0XEx4P7kvw5ilNdjh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvs7/P5/6pfBbrcOANgxe7vdAABg1zn/A0Dvcf4HgN7j/A8Avcf5HwB6j/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zE8ePpsvrXynI5zU+dW1yYqZ07NFWpzxRnF8rFcm3+bHG6VpuuVorl2uyd/r9qrXZ2MuYWzo83KvXGeH1x6eRsbWGucfLMbGm6crIysCtRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW1BeXZkrVamVe4i4Sq/dHM7qf6Mt2p/ulPbuaSO6PZmxzossDEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/xL8BAAD//7KsH7I=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(0x0, 0x4600, 0xe898d2275f586839) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0x1b) 7.087984925s ago: executing program 0 (id=5439): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") getcwd(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 6.859858245s ago: executing program 0 (id=5442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x1, 0x6, 0x6}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) 6.859498845s ago: executing program 34 (id=5442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x1, 0x6, 0x6}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) 4.716777481s ago: executing program 3 (id=5484): setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x5, &(0x7f0000000000)={0x3, 0xf}, &(0x7f0000000280)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000300)=""/231, 0xe7, 0x42, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$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") 3.48400455s ago: executing program 3 (id=5496): bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000010380)={&(0x7f0000010280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000010340)={&(0x7f0000010300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0400289d7000fddbdf2501000000a2e3b7c96e505594c04b9672e632d7def6"], 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x4008040) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc0100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000002000000cd0000000000000048000200636263286165732900"/204], 0x1a0}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) pipe2$watch_queue(0x0, 0x80) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)='sk', 0x2}], 0x1, &(0x7f0000000b80)}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000240), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x100000001) 3.063334835s ago: executing program 2 (id=5508): socket$inet6(0xa, 0x805, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semop(r1, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000200000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640fffffffc08001340000003"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0x5, 0x1ff]) socket$kcm(0x2, 0x2, 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 2.503274137s ago: executing program 3 (id=5514): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000feff00004b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10402, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x24400, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000001c0)={'gre0\x00', r1, 0x8, 0x1, 0x6, 0x1, {{0x3c, 0x4, 0x3, 0x7, 0xf0, 0x81, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x3a, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x3c, 0xb, 0x3, 0x8, [{@multicast2}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x3}, {@loopback, 0x9}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xe5d}]}, @rr={0x7, 0xf, 0xf8, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @cipso={0x86, 0x39, 0x1, [{0x6, 0x12, "94116b289840051e43b8370071304bf0"}, {0x7, 0xf, "e41742a23778a2a8b70f0e2d1a"}, {0x0, 0xd, "5fdb8341a682c3b14476c8"}, {0x7, 0x5, "df937d"}]}, @timestamp={0x44, 0x8, 0x78, 0x0, 0xc, [0x101]}, @ssrr={0x89, 0x13, 0x44, [@broadcast, @multicast2, @broadcast, @private=0xa010102]}, @timestamp={0x44, 0x1c, 0x15, 0x0, 0x8, [0x12, 0x5, 0x4, 0x10, 0x1, 0xb]}, @lsrr={0x83, 0x13, 0xa2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote]}]}}}}}) socket$inet6(0xa, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') 1.912843683s ago: executing program 2 (id=5522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) alarm(0x2) 1.865811019s ago: executing program 2 (id=5524): bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000010380)={&(0x7f0000010280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000010340)={&(0x7f0000010300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0400289d7000fddbdf2501000000a2e3b7c96e505594c04b9672e632d7def6"], 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x4008040) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc0100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000002000000cd0000000000000048000200636263286165732900"/204], 0x1a0}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) pipe2$watch_queue(0x0, 0x80) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)='sk', 0x2}], 0x1, &(0x7f0000000b80)}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000240), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x100000001) 1.62964087s ago: executing program 3 (id=5531): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) preadv2(r0, &(0x7f0000000180), 0x0, 0x8000, 0x9, 0x1b) 1.527649603s ago: executing program 5 (id=5535): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0x5, 0x1ff]) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000001100)=""/120) 1.480009079s ago: executing program 3 (id=5537): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.479864249s ago: executing program 5 (id=5538): socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000403400000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000840) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 1.47627395s ago: executing program 6 (id=5539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.456212882s ago: executing program 5 (id=5540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 1.436996735s ago: executing program 3 (id=5541): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000feff00004b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10402, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x24400, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10402, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x24400, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 1.042022396s ago: executing program 6 (id=5553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000900)="bada30fbc99b5400040000ea0756", 0xe, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 998.704701ms ago: executing program 36 (id=5553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000900)="bada30fbc99b5400040000ea0756", 0xe, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 991.697222ms ago: executing program 2 (id=5555): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e]}}, 0x0, 0x4b, 0x0, 0x1, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r3, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000070601080000000039000000080000000500010006000000a76a907f784e078c3376eb71f5018fb915f7c9319b2cc7a9cba8870f1f007bb72bded73bddcdbe9535e0ac491734d1c487dfaf546244f3a27a4194f58741a5592cfbd88afd52a140753b07af647699a06dac69d0f650a657a1df4a5df2665b09ffe991bca1777d8504c5ee740f29f45e4f9cd7164c1b2f21991ecca0aaf5a44aace02d8cc4e226bba656bac67a72"], 0x1c}}, 0x0) 526.798132ms ago: executing program 5 (id=5562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) alarm(0x2) 500.674895ms ago: executing program 5 (id=5563): syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@block={'block', 0x3d, 0xc00}}, {@overriderock}, {@nocompress}]}, 0x1, 0x1045, &(0x7f0000001140)="$eJzs3Vl0nGd9+PHfTLxMbBYDxnHyD2RwSHCMcbQkNsZhUbQ4CrIVLDnEbMGxZSMi28EOS8wWln/3DWhL6V5aqLuRUkrpLXdtL3rR03O46W25LOpGS0uh5zd6JCuObcnYslw/n48OaDzzzLzvOD76vs+rmXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhG/0BXV3cjRob37n+kfWH9A/tG91zk9tnH+0aj86jfWHC7EY38X7RasXHmqo3Pa8zd+oL8/02xfubR1kcrv7fi9NoN63a9ZEVz9v4X2aGr4tRTpx8/ODU1cXK5d2SZ7B7cOzw2Orynb/dge3hstL1z+/auux8YGmsPDY8Mjh0YGx/c0+7fN9g3Prqvvbn/rnb3zp297cFtB0b379090DcyOHvljtf0dHVtbz+47aHBvn1jo3vvfnDbWP8DwyMjw3t3d8bkzTlmR/5DfPPweHt8sG9Pu31kcmqid6GdzEHdixnUs9Cgnq6enu7unp7u7ffuvHdHV9eK51zRdY54zojl/0fL8lqSn+Pwo2iW/sdIDMfe2B+PRPu8X/0xEPtiNPZc4PZitv933D140e3O7/+tM1fduu5s/18cnf5vmHm0DRfq/wX25ep9nYqn4nQ8HgdjKqZiIk4u+x5d3a/dMRh7YzjGYjSGY0/0da5pl2vasTO2x/boikfjgRiKsWjHUAzHSAzGWByIsRiPwc6/qP7YF4PRF+MxGvuiHZujP+6KdnTHztgZvdGOwdgWB2I09sfe2B0D0dd5lCMx2fl7773IPs4N6l7MoJ6LDNJ/Lt9S/SiHS/bD2f4DAPW4f7BP/wGgMnvH9nX16D8AVGXc/B8AAAAAAAAAAAAAAAAAAAAAAAAAAACutEY04x8i4ot3Tjfmr0zZ6iz4f8G7rWp07tmMxsxavtHa3rujf6h7aKCrq6uru3uw+6rs/ZwXxejYeF+7/8SxJ05OnDo1cbi9//jkoROHJxb9CJd7/0t037pvr167Yd2unfmHLUcnjk+eOjF57ODRJdsgAMyzIprx7Yi47ZnpxitKy2PL/oGh9sjD7eHjR07MG9ucXSbgMlu5wLHFUlt1Vbem7QBcg1ZGM3oj4puPTDc2ZePLMUDz1Z2FAZd79y6oc96hEdE5Z6GxAHBJVkUzRiPi8Iu+0rg9Im6I62B+38pjgs6T2D8w1HkiU5MHjz8ZnXMYN8yMWnfunWbPfVzjxxLrIt6U+7rKmo0A/OhWRzO+GhHHXtiKV3Z+HwAAXO9a0Zw5hx7TjTuWe2cAAAAAAAAAAAAAAAAAAAAAAAAAAADgOtGIZuyIiNba6UbXvOsvb/3/3qGBq7L3c6z/DwCXYEU047tl/f9u6/9fedoOwDVoZTSjv6z/32P9fwCowqpoxqNl/f9e6/9f+8cS1v8H4ApYHc34Zln//x7r/wNAFVrRjJnX/U037l3unQEAAAAAAAAAAAAAAAAAAAAAAAAAAIDrxI3RjNUR0Rz4QGddmfnr0s9fYeZ5Cyw3kzdvK5cXsybfyrLWYLORX1fwCQEAC2pFM+7rXJpu9C33zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXtGY0428jovGt6UY0IuLpiHbMfO9a7p0DAJZGoxn/GBEv+/vprH/ct+7bq9duWLdrZ0TcEDd0Dgka88ePjo33tftPHHvi5MSpUxOH2/uPTx46cXhisZtr9Q/sG92zFE9kUVYt8f6vuuw9bOUx2TxbOju8f2Cos9NTkwePP5lXNxs3XPamAKhXK5rx/c6l6UZjuXcGALgqVjaa8fyIeOx7Z+bmnStm5vwrZv7U1fxh8aX1Z+emrXKwMHvMMHve4CUXuXze44stRyeOT546MXns4NGFJuGtsl0zXwC4PI1GM/4qInY/trHT1Uasee456DLuOxGx4zPtMi7W5LjZE96rO3FvHZmcmth26MTU4Rz/2Yj46y/fWsY3V+X4clARK8+O78qxz0TEt74+OzY6Y1eXsa2zY7tz7I6IOPi1Z49tlbE3nh3bk2M3RcTU55499sYyds3Zsb1L+7cMANeWnP9/MCI+v/XMXJsvNv+fncOPl+9LPf9fOe9OrbLdlVfqyQNApXKO/Ddl/r9ygfn/30XEMz+4tYybmUuvKbevnTefv/rPAgC4FDn/fyh7/oUzc+fyy/y/TLPPzv8/ve7sHP5w+b7U8//V58z/c7s3XaknDwCVyv7fHxE9B87M/b59Mf2fnfcvdf9b5/Q/t7vxSj15AKhU9v/tETH20Jm519Atpv+bby/3L39eqv7feE7/c7s3X7FnDwB1yv7nfPrhG8/MvS7+Wur/Gv0HgCsu+/+qiPj6X56ZO6e/mP7fUt4dsNTn/9ee0//c7suv2LMHgDo1Yn1jpswr46WdS0PDI4Newg8AAADXk876PutnT/c3XhoN838AAAC43jRiQ/n9/5q4aebSkZiMqZiw/D8AAABcLzq//98ws5xfROOmaJj/AwAAwPVmU+f9/533AHQ+/rcVpzsf17Oi2Tk30GgsPKKxNTbOjNhYVgU6XEbMnF9orBkaHhnc1j86sqs77ux8ykDnnQbnfbSVnbcfbImbZ0bdXD6TaM2zH7GVo7q37eqOLXHLzMhbZj6R8PbN5xnZs+iRvTkSAK53mxbo8WL6vyVumxlx28ynAq645Txl7VJWALhWbOq8/r/zGoAL9n+BEY17Fpj/v3juJQXb4lCciKk4HFs77zbovOLgvI+6Zt7LELYucDbg7Nju2LrALP/s2J5LGNt71f+7AMBS2rRAhxfT/60LzP/XeEkhAFxTTj11+vGDU1MTJ5fwwnI/RwDg2VQaAAAAAAAAAAAAAACufVfj/X8uuODC/7ULy/2TCVhqzWjGP0VE41vTjXYjIp6OaMfMd5/WAwDXp+z/d0r/X6H/AFCF7P906f8m/QeAKmT//7n0/3b9B4AqZP//pfT/lfoPAFXI/v9r6f8d+g8AVcj+/1vp/536DwBVyP7/e+n/q/QfAKqQ/f9u6f9m/QeAKmT//6P0/y79B4AqZP//s/R/i/4DQBWy/98r/X+1/gNAFbL//1X6v1X/AaAK2f//Lv1/jf4DQBWy/98v/d+m/wBQhez//5T+363/AFCF7P8PSv+79B8AqpD9/2Hpf7f+A0AVsv9R+t+j/wBQhex/o/S/V/8BoArNcgYg+3+P/gNAFbL+N5T+36v/AFCF7P+K0v/t+g8AVcj+ryz936H/AFCF7P+q0v/X6j8AVCH7v7r0f6f+A0AVsv+t0v/X6T8AVCH7f2Pp/y79B4AqZP/XlP7fp/8AUIXs/9rS/9frPwBUIfv/vNL/N+g/AFQh+//80v836j8AVCH7/4LS/zfpPwBUIfv/wtL/Pv0HgCpk/9eV/t+v/wBQhez/i0r/+/UfAKqQ/X9x6f+A/gNAFbL/Lyn9H9R/AKhC9n996f+Q/gNAFbL/Ly39363/AFCF7P+G0v8H9B8AqpD9v6n0f1j/AaAK2f+Npf8P6j8AVCH7f3Pp/5v1HwCqkP2/pfR/RP8BoArZ//9X+r9H/wGgCtn/W0v/9+o/AFQh+/+y0v9R/QeAKmT/X176/5D+A0AVsv+3lf6/Rf8BoArZ/3bp/z79B4AqZP9fUfo/pv8AUIXs/6bS/3H9B4AqZP9vL/3fr/8AUIXs/ytL/x/WfwCoQvb/jtL/t+o/AFQh+39n6f8j+g8AVcj+v6r0/4D+A0AVsv+bS//fpv8AUIXs/12l/2/XfwCoQvZ/S+n/O/QfAKqQ/X916f879R8AqpD931r6/y79B4AqZP9fU/r/qP4DQBWy/9tK/9+t/wBQhez/3aX/B/UfAKqQ/e8q/X9M/wGgCtn/7tL/Q/oPAFXI/veU/h/WfwCoQva/t/R/Qv8BoArZ/3tK/4/oPwBUIft/b+n/Uf0HgCpk/7eX/r9H/wGgCtn/HaX/k/oPAFXI/r+29P+9+g8AVcj+7yz9f1z/AaAK2f/Xlf5P6T8AVCH7v6v0/5j+A0AVsv/3lf4f138AqEL2//Wl/yf0HwCqkP1/Q+n/E/oPAFXI/r+x9P99+g8AVcj+v6n0/6T+A0AVsv99pf+n9B8AqpD9v7/0/0n9B4AqZP/7S//fr/8AUIXs/0Dp/wf0HwCqkP0fLP3/oP4DQBWy/0Ol/x/SfwCoQvZ/d+n/U/oPAFXI/j9Q+n9a/wGgCtn/4dL/D+s/AFQh+/9g6f9H9B8AqpD9f3Pp/0f1HwCqkP0fKf3/mP4DQBWy/3tK/z+u/wBQhez/3tL/p/UfAKqQ/R8t/f+E/gNAFbL/D5X+f1L/AaAK2f+3lP5/Sv8BoArZ/32l/5/WfwCoQvZ/rPT//+s/AFQh+z9e+v9j+g8AVcj+7y/9/3H9B4AqZP8fLv3/Cf0HgCpk/99a+v+T+g8AVcj+P1L6/1P6DwBVyP4fKP3/af0HgCpk/99W+v8z+g8AVcj+v730/2f1HwCqkP1/R+n/z+k/AFQh+//O0v+f138AqEL2/12l/7+g/wBQhez/o6X/n9F/AKhC9v/dpf+f1X8AqEL2/2Dp/+f0HwCqkP1/rPT/F/UfAKqQ/T9U+v9L+g8AVcj+Hy79/2X9B4AqZP8nSv8/r/8AUIXs/5HS/1/RfwCoQvb/aOn/F/QfAKqQ/X9P6f+v6j8AVCH7P1n6/2v6DwBVyP6/t/T/1/UfAKqQ/X+89P839B8AqpD9nyr9/039B4AqZP+Plf7/lv4DQBWy/8dL/39b/wGgCtn/E6X/v6P/AFCF7P8Tpf9f1H8AqEL2/32l/7+r/wBQhez/ydL/39N/AKhC9v9U6f+X9B8AqpD9f7L0/8v6DwBVyP6/v/T/9/UfAKqQ/f9A6f8Z/QeAKmT/P1j6/wf6DwBVyP5/qPT/D/UfAKqQ/X+q9P+P9B8AqpD9P136/8f6DwBVyP5/uPT/T/QfAKqQ/f9I6f9X9B8AqpD9/2jp/zP6DwBVyP5/rPT/T/UfAKqQ/f946f9X9R8AqpD9f7r0/8/0HwCqkP3/ROn/1/QfAKqQ/f9k6f+f6z8AVCH7/6nS/6/rPwBUIfv/6dL/v9B/AKjC/wYAAP//aB9Xnw==") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10208, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket(0x28, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000540)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={0x0}}, 0x4004000) r5 = socket(0x2, 0x80805, 0x0) bind$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='block_bio_complete\x00', r2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) clock_settime(0x0, 0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x6, 0x8002, 0xffffffffffffffff, &(0x7f0000000440)}]) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x11, 0xa, 0x8) 493.711586ms ago: executing program 7 (id=5564): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) unshare(0x22020600) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff0000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r2 = fcntl$getown(r1, 0x9) r3 = getpid() tgkill(r2, r3, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x82, 0x0, 0x1, 0x0, 0x6, 0x81612, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x1, 0xe}, 0xa1e0, 0x2, 0x80000001, 0x8, 0x6, 0x51db, 0xaf5, 0x0, 0x8, 0x0, 0x9}, r3, 0x8, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffef0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) connect$unix(r6, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x6f798083, 0x0, 0x0, 0x9}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 315.636739ms ago: executing program 7 (id=5565): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 288.007203ms ago: executing program 7 (id=5566): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x266, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000001080)={@desc={0x1, 0x0, @desc1}}) 183.088596ms ago: executing program 7 (id=5567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 136.041052ms ago: executing program 2 (id=5568): socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa2000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x3f, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 168.44µs ago: executing program 7 (id=5569): r0 = io_uring_setup(0x2e01, &(0x7f0000000700)={0x0, 0xafd3, 0x1000, 0x2, 0x2d2}) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r0}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 0s ago: executing program 7 (id=5570): r0 = io_uring_setup(0x1c10, &(0x7f0000000580)={0x0, 0x3239, 0x80, 0x3, 0x34}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r1, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) kernel console output (not intermixed with test programs): ] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4875: Invalid inode table block 0 in block_group 0 [ 453.204143][T19067] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 453.213961][T19067] EXT4-fs error (device loop2): ext4_quota_write:7375: inode #3: comm syz.2.4875: mark_inode_dirty error [ 453.225707][T19067] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4875: Failed to acquire dquot type 0 [ 453.237265][T19067] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4875: Invalid inode table block 0 in block_group 0 [ 453.250397][T19067] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 453.260187][T19067] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.4875: mark_inode_dirty error [ 453.272392][T19067] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4875: Invalid inode table block 0 in block_group 0 [ 453.285804][T19067] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 453.295716][T19067] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 453.299899][T19075] loop3: detected capacity change from 0 to 1024 [ 453.310982][T19067] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4875: Invalid inode table block 0 in block_group 0 [ 453.315586][T19075] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 453.325873][T19067] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 453.340068][T19075] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 453.344516][T19067] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.4875: mark_inode_dirty error [ 453.352844][T19075] EXT4-fs (loop3): orphan cleanup on readonly fs [ 453.363540][T19067] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 453.376578][T19075] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.4878: Invalid inode table block 0 in block_group 0 [ 453.378998][T19067] EXT4-fs (loop2): 1 truncate cleaned up [ 453.392300][T19075] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 453.406646][T19075] EXT4-fs error (device loop3): ext4_quota_write:7375: inode #3: comm syz.3.4878: mark_inode_dirty error [ 453.418560][T19075] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4878: Failed to acquire dquot type 0 [ 453.430136][T19075] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.4878: Invalid inode table block 0 in block_group 0 [ 453.443240][T19075] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 453.452975][T19075] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.4878: mark_inode_dirty error [ 453.476577][T19075] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.4878: Invalid inode table block 0 in block_group 0 [ 453.489861][T19075] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 453.500614][T19075] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 453.501140][T19075] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.4878: Invalid inode table block 0 in block_group 0 [ 453.502820][T19075] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 453.512063][T19075] EXT4-fs error (device loop3): ext4_truncate:4635: inode #15: comm syz.3.4878: mark_inode_dirty error [ 453.512231][T19075] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 453.512356][T19075] EXT4-fs (loop3): 1 truncate cleaned up [ 453.532358][T19080] wireguard0: entered promiscuous mode [ 453.532382][T19080] wireguard0: entered allmulticast mode [ 453.598119][T19084] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 453.598187][T19084] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 453.619916][T19088] hub 2-0:1.0: USB hub found [ 453.626980][T19088] hub 2-0:1.0: 8 ports detected [ 453.684072][T19094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4884'. [ 453.691210][T19094] batadv1: entered promiscuous mode [ 453.801852][T19097] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.837279][T19097] bond4 (unregistering): Released all slaves [ 453.926813][T19092] Set syz1 is full, maxelem 768 reached [ 453.959288][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.959317][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.959380][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.959420][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.959448][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.959474][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.959497][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x1 [ 453.959558][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.959654][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.959685][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 453.976209][ T3393] hid-generic 0000:0000:FFFFFFFC.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 454.045476][T19112] loop3: detected capacity change from 0 to 1024 [ 454.047611][T19112] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 454.180222][T19112] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 454.180416][T19112] EXT4-fs (loop3): orphan cleanup on readonly fs [ 454.182368][T19112] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.4890: Invalid inode table block 0 in block_group 0 [ 454.209261][T19112] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 454.209434][T19112] EXT4-fs error (device loop3): ext4_quota_write:7375: inode #3: comm syz.3.4890: mark_inode_dirty error [ 454.209595][T19112] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4890: Failed to acquire dquot type 0 [ 454.209729][T19112] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.4890: Invalid inode table block 0 in block_group 0 [ 454.210066][T19112] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 454.251566][T19110] netlink: 'syz.2.4889': attribute type 1 has an invalid length. [ 454.267699][T19112] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.4890: mark_inode_dirty error [ 454.285919][T19116] loop6: detected capacity change from 0 to 512 [ 454.286827][T19116] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 454.287612][T19112] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.4890: Invalid inode table block 0 in block_group 0 [ 454.287778][T19112] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 454.287887][T19112] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 454.287972][T19112] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.4890: Invalid inode table block 0 in block_group 0 [ 454.288120][T19112] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 454.288193][T19112] EXT4-fs error (device loop3): ext4_truncate:4635: inode #15: comm syz.3.4890: mark_inode_dirty error [ 454.288324][T19112] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 454.288392][T19112] EXT4-fs (loop3): 1 truncate cleaned up [ 454.346256][T19116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 454.346580][T19116] EXT4-fs (loop6): orphan cleanup on readonly fs [ 454.428874][T19116] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 454.443880][T19116] EXT4-fs (loop6): Remounting filesystem read-only [ 454.450529][T19116] EXT4-fs (loop6): 1 truncate cleaned up [ 454.456467][T18743] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 454.467086][T18743] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 454.499039][T19124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4895'. [ 454.512220][T19124] batadv1: entered promiscuous mode [ 454.559633][T18743] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 454.660171][T19123] netlink: 'syz.3.4892': attribute type 1 has an invalid length. [ 454.713737][T19135] loop0: detected capacity change from 0 to 2048 [ 454.794019][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4898'. [ 454.993900][T19151] netlink: 'syz.3.4903': attribute type 1 has an invalid length. [ 455.041712][T19153] loop2: detected capacity change from 0 to 1024 [ 455.052144][T19153] EXT4-fs: Ignoring removed orlov option [ 455.065043][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4905'. [ 455.074064][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4905'. [ 455.083100][T19157] hub 2-0:1.0: USB hub found [ 455.088493][T19157] hub 2-0:1.0: 8 ports detected [ 455.132185][T19158] loop3: detected capacity change from 0 to 2048 [ 455.138317][T19163] batadv1: entered promiscuous mode [ 455.197975][T19171] loop0: detected capacity change from 0 to 1024 [ 455.205085][T19171] EXT4-fs: Ignoring removed nobh option [ 455.210990][T19171] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 455.230154][T19171] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 455.243202][T19171] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.4909: inode #4294967295: comm syz.0.4909: iget: illegal inode # [ 455.258005][T19171] EXT4-fs (loop0): no journal found [ 455.263268][T19171] EXT4-fs (loop0): can't get journal size [ 455.270585][T19171] EXT4-fs (loop0): failed to initialize system zone (-22) [ 455.278042][T19171] EXT4-fs (loop0): mount failed [ 455.317774][T19176] batadv1: entered promiscuous mode [ 455.330861][T19178] loop0: detected capacity change from 0 to 512 [ 455.338257][T19178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 455.352642][T19178] EXT4-fs (loop0): 1 truncate cleaned up [ 455.476533][T19182] netlink: 'syz.6.4912': attribute type 1 has an invalid length. [ 455.549412][T19182] loop6: detected capacity change from 0 to 8192 [ 455.572304][T19182] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 455.633859][T19189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.643152][T19189] bond5 (unregistering): Released all slaves [ 455.679245][T19192] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.695691][T19192] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 455.738660][T19192] EXT4-fs (loop6): orphan cleanup on readonly fs [ 455.752501][T19192] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 455.813884][T19192] EXT4-fs (loop6): Remounting filesystem read-only [ 455.823249][T19192] EXT4-fs (loop6): 1 truncate cleaned up [ 455.829522][T18803] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 455.840657][T18803] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 455.865056][T18803] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 455.899043][T19202] netlink: 'syz.3.4920': attribute type 4 has an invalid length. [ 455.920820][T19204] batadv1: entered promiscuous mode [ 456.108938][T19211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 456.276198][T19221] netlink: 'syz.0.4927': attribute type 1 has an invalid length. [ 456.331354][T19221] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 456.378541][T19219] Set syz1 is full, maxelem 768 reached [ 456.389882][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 456.389900][ T29] audit: type=1326 audit(1768282868.223:37746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.419917][ T29] audit: type=1326 audit(1768282868.223:37747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.443784][ T29] audit: type=1326 audit(1768282868.223:37748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.467900][ T29] audit: type=1326 audit(1768282868.223:37749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.491650][ T29] audit: type=1326 audit(1768282868.223:37750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.515300][ T29] audit: type=1326 audit(1768282868.223:37751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.539166][ T29] audit: type=1326 audit(1768282868.223:37752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.562871][ T29] audit: type=1326 audit(1768282868.223:37753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.586786][ T29] audit: type=1326 audit(1768282868.233:37754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.610431][ T29] audit: type=1326 audit(1768282868.233:37755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.3.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357774f749 code=0x7ffc0000 [ 456.614651][T19233] 8021q: adding VLAN 0 to HW filter on device bond6 [ 456.645263][T19233] bond6 (unregistering): Released all slaves [ 456.769436][T19245] netlink: 'syz.0.4933': attribute type 4 has an invalid length. [ 456.769997][T19247] batadv1: entered promiscuous mode [ 456.847576][T19250] EXT4-fs: Ignoring removed nobh option [ 456.853748][T19250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 456.862740][T19250] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 456.872793][T19250] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.4935: inode #4294967295: comm syz.0.4935: iget: illegal inode # [ 456.889260][T19250] EXT4-fs (loop0): no journal found [ 456.894631][T19250] EXT4-fs (loop0): can't get journal size [ 456.901631][T19250] EXT4-fs (loop0): failed to initialize system zone (-22) [ 456.909326][T19250] EXT4-fs (loop0): mount failed [ 456.945295][T19258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 456.990270][T19264] netlink: 'syz.0.4939': attribute type 1 has an invalid length. [ 457.033924][T19264] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.099022][T19268] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 457.110760][T19268] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 457.119570][T19268] EXT4-fs (loop0): orphan cleanup on readonly fs [ 457.127468][T19268] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 457.142604][T19268] EXT4-fs (loop0): Remounting filesystem read-only [ 457.149282][T19268] EXT4-fs (loop0): 1 truncate cleaned up [ 457.155188][T18803] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 457.165773][T18803] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 457.176444][T18803] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 457.232669][T19276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.241405][T19273] Alternate GPT is invalid, using primary GPT. [ 457.243393][T19276] bond5 (unregistering): Released all slaves [ 457.247878][T19273] loop5: p1 p2 p3 [ 457.257516][T19273] loop5: partition table partially beyond EOD, truncated [ 457.293392][T19282] hub 2-0:1.0: USB hub found [ 457.298273][T19282] hub 2-0:1.0: 8 ports detected [ 457.334128][T19284] netlink: 'syz.3.4945': attribute type 4 has an invalid length. [ 457.464781][T19292] netlink: 'syz.2.4948': attribute type 13 has an invalid length. [ 457.542085][T19299] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 457.577139][T19299] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 457.598812][T19299] EXT4-fs (loop2): orphan cleanup on readonly fs [ 457.615642][T19299] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4950: Invalid inode table block 0 in block_group 0 [ 457.640608][T19299] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 457.650371][T19299] EXT4-fs error (device loop2): ext4_quota_write:7375: inode #3: comm syz.2.4950: mark_inode_dirty error [ 457.661969][T19299] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4950: Failed to acquire dquot type 0 [ 457.673632][T19299] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4950: Invalid inode table block 0 in block_group 0 [ 457.689281][T19304] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.695811][T19304] EXT4-fs: test_dummy_encryption option not supported [ 457.702841][T19299] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 457.714962][T19299] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.4950: mark_inode_dirty error [ 457.726712][T19299] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4950: Invalid inode table block 0 in block_group 0 [ 457.739854][T19299] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 457.750247][T19299] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 457.760563][T19299] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4950: Invalid inode table block 0 in block_group 0 [ 457.773901][T19299] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 457.784004][T19299] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.4950: mark_inode_dirty error [ 457.795863][T19299] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 457.805017][T19299] EXT4-fs (loop2): 1 truncate cleaned up [ 457.879704][T19324] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 457.888793][T19321] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4959: inode has both inline data and extents flags [ 457.902714][T19321] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4959: couldn't read orphan inode 15 (err -117) [ 457.916213][T19324] ext2 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.916577][T19317] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.939571][T19321] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 457.999915][T19329] FAT-fs (loop2): IO charset cp852 not found [ 458.017742][T19328] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.034310][T19336] rock: directory entry would overflow storage [ 458.040630][T19336] rock: sig=0x4543, size=28, remaining=18 [ 458.049650][T19328] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 458.072025][T19340] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 458.106044][T19342] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.4967: Directory hole found for htree leaf block 0 [ 458.133324][T19342] EXT4-fs (loop3): Remounting filesystem read-only [ 458.178627][T19355] set_capacity_and_notify: 24 callbacks suppressed [ 458.178646][T19355] loop5: detected capacity change from 0 to 512 [ 458.192673][T19353] loop2: detected capacity change from 0 to 1024 [ 458.200605][T19353] EXT4-fs: inline encryption not supported [ 458.224219][T19353] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.4972: Allocating blocks 385-513 which overlap fs metadata [ 458.231587][T19355] EXT4-fs error (device loop5): ext4_get_first_dir_block:3527: inode #12: comm syz.5.4973: Directory block failed checksum [ 458.257714][T19352] EXT4-fs (loop2): pa ffff8881082e8bd0: logic 16, phys. 129, len 24 [ 458.266116][T19352] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 458.278344][T19365] loop3: detected capacity change from 0 to 512 [ 458.288581][T19365] EXT4-fs: dax option not supported [ 458.297228][T19367] loop0: detected capacity change from 0 to 512 [ 458.311743][T19367] EXT4-fs: Ignoring removed bh option [ 458.329185][T19365] binfmt_misc: register: failed to install interpreter file ./file2 [ 458.338795][T19367] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 458.348498][T19370] loop5: detected capacity change from 0 to 164 [ 458.364156][T19370] rock: directory entry would overflow storage [ 458.370380][T19370] rock: sig=0x66, size=4, remaining=3 [ 458.373997][T19367] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.4976: corrupted in-inode xattr: e_value size too large [ 458.378960][T19370] rock: directory entry would overflow storage [ 458.396265][T19370] rock: sig=0x66, size=4, remaining=3 [ 458.417073][T19376] loop3: detected capacity change from 0 to 512 [ 458.424263][T19376] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.425413][T19373] loop6: detected capacity change from 0 to 2048 [ 458.441143][T19377] loop2: detected capacity change from 0 to 512 [ 458.444438][T19367] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4976: couldn't read orphan inode 15 (err -117) [ 458.455293][T19377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 458.463071][T19376] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 458.482897][T19380] loop5: detected capacity change from 0 to 256 [ 458.489478][T19376] EXT4-fs (loop3): orphan cleanup on readonly fs [ 458.496654][T19376] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 458.511896][T19376] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 458.516154][T19373] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 458.534007][T19376] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 458.534882][T19373] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 458.560948][T19373] EXT4-fs (loop6): This should not happen!! Data will be lost [ 458.560948][T19373] [ 458.563312][T19377] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.4978: invalid indirect mapped block 32768 (level 2) [ 458.570905][T19373] EXT4-fs (loop6): Total free blocks count 0 [ 458.590320][T19373] EXT4-fs (loop6): Free/Dirty block details [ 458.594754][T19377] EXT4-fs (loop2): Remounting filesystem read-only [ 458.596494][T19373] EXT4-fs (loop6): free_blocks=2415919504 [ 458.603217][T19377] EXT4-fs (loop2): 1 orphan inode deleted [ 458.608636][T19373] EXT4-fs (loop6): dirty_blocks=48 [ 458.608654][T19373] EXT4-fs (loop6): Block reservation details [ 458.614475][T19377] EXT4-fs (loop2): 1 truncate cleaned up [ 458.618352][T19376] EXT4-fs (loop3): Remounting filesystem read-only [ 458.619681][T19373] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 458.625929][T19376] EXT4-fs (loop3): 1 truncate cleaned up [ 458.659640][T19380] FAT-fs (loop5): codepage cp950 not found [ 458.707586][T19391] loop5: detected capacity change from 0 to 512 [ 458.714600][T19391] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 458.737504][T18743] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 458.749810][T18743] EXT4-fs (loop6): This should not happen!! Data will be lost [ 458.749810][T18743] [ 458.760371][T19391] EXT4-fs (loop5): 1 truncate cleaned up [ 458.769624][T19391] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.4986: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 458.802427][T19391] EXT4-fs (loop5): Remounting filesystem read-only [ 458.809918][T19391] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.4986: Deleting old file: nlink 5, error=-117 [ 458.810576][T19394] FAT-fs (loop3): codepage cp869 not found [ 458.839394][T19399] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.867825][T19403] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 458.877513][T19406] EXT4-fs: Ignoring removed mblk_io_submit option [ 458.886041][T19399] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 458.923446][T19410] EXT4-fs: inline encryption not supported [ 458.940008][T19410] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 458.955388][T19410] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.4991: lblock 2 mapped to illegal pblock 2 (length 1) [ 458.967307][T19406] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4989: bg 0: block 234: padding at end of block bitmap is not set [ 458.984354][T19414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 458.985041][T19410] EXT4-fs (loop5): Remounting filesystem read-only [ 458.996037][T19414] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4992: bad orphan inode 11 [ 459.009993][T19406] EXT4-fs (loop0): Remounting filesystem read-only [ 459.017144][T19414] ext4_test_bit(bit=10, block=4) = 1 [ 459.022509][T19414] is_bad_inode(inode)=0 [ 459.026740][T19414] NEXT_ORPHAN(inode)=2080374784 [ 459.031633][T19414] max_ino=32 [ 459.034577][T19410] EXT4-fs (loop5): 1 orphan inode deleted [ 459.035059][T19414] i_nlink=0 [ 459.043908][T19414] EXT4-fs (loop3): 1 truncate cleaned up [ 459.052461][T19414] EXT4-fs (loop3): shut down requested (1) [ 459.079516][T19418] FAT-fs (loop6): codepage cp866 not found [ 459.142465][T19429] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 459.153967][T19429] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 459.164456][T19429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 459.167476][T19425] EXT4-fs (loop3): 1 orphan inode deleted [ 459.172664][T19429] System zones: 0-2, 18-18, 34-34 [ 459.185472][T19429] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4998: bad orphan inode 15 [ 459.196128][T18749] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 1 [ 459.204591][T19425] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.209479][T19433] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 459.232963][T19436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.240370][T19429] ext4_test_bit(bit=14, block=18) = 1 [ 459.245930][T19429] is_bad_inode(inode)=0 [ 459.250221][T19429] NEXT_ORPHAN(inode)=2264924160 [ 459.255128][T19429] max_ino=32 [ 459.258361][T19429] i_nlink=0 [ 459.262052][T19429] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4998: corrupted inode contents [ 459.274459][T19436] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 459.274519][T19429] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.4998: mark_inode_dirty error [ 459.282418][T19436] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 459.297243][T19429] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4998: corrupted inode contents [ 459.314103][T19429] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.4998: mark_inode_dirty error [ 459.314361][T19436] EXT4-fs (loop5): orphan cleanup on readonly fs [ 459.332766][T19429] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.4998: mark inode dirty (error -117) [ 459.346640][T19429] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 459.355729][T19436] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 459.355769][T19436] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 459.377757][T19436] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4999: bg 0: block 40: padding at end of block bitmap is not set [ 459.392439][T19429] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4998: bg 0: block 80: padding at end of block bitmap is not set [ 459.402687][T19436] EXT4-fs (loop5): Remounting filesystem read-only [ 459.414208][T19436] EXT4-fs (loop5): 1 truncate cleaned up [ 459.424779][T19436] EXT4-fs (loop5): shut down requested (0) [ 459.433608][T19439] FAT-fs (loop3): codepage cp860 not found [ 459.469337][T19444] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 459.480560][T19444] EXT4-fs (loop5): invalid journal inode [ 459.488531][T19444] EXT4-fs (loop5): can't get journal size [ 459.497837][T19446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 459.509134][T19444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 459.512467][T19442] FAT-fs (loop2): IO charset iso8859-2 not found [ 459.522419][T19444] System zones: 1-12, 13-13 [ 459.528918][T19444] EXT4-fs (loop5): 1 truncate cleaned up [ 459.537911][T19446] EXT4-fs (loop3): 1 truncate cleaned up [ 459.559342][T19455] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 459.563293][T19450] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.606780][T19459] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.607986][T19462] tmpfs: Unknown parameter 'quota' [ 459.654132][T19464] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 459.662875][T19464] FAT-fs (loop2): Filesystem has been set read-only [ 459.725779][T19476] EXT4-fs: inline encryption not supported [ 459.753326][T19481] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 459.764992][T19482] FAT-fs (loop2): codepage cp862 not found [ 459.775221][T19487] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 459.789084][T19481] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.5017: invalid indirect mapped block 32768 (level 2) [ 459.803822][T19487] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5018: invalid indirect mapped block 32768 (level 2) [ 459.822355][T19487] EXT4-fs (loop5): Remounting filesystem read-only [ 459.829413][T19481] EXT4-fs (loop6): Remounting filesystem read-only [ 459.839874][T19481] EXT4-fs (loop6): 1 orphan inode deleted [ 459.843802][T19487] EXT4-fs (loop5): 1 orphan inode deleted [ 459.845741][T19481] EXT4-fs (loop6): 1 truncate cleaned up [ 459.851446][T19487] EXT4-fs (loop5): 1 truncate cleaned up [ 459.858425][T19493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 459.875970][T19491] EXT4-fs: Ignoring removed orlov option [ 459.882043][T19491] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 459.903001][T19493] EXT4-fs (loop3): 1 truncate cleaned up [ 459.997497][T19511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 460.028407][T19513] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.041235][T19511] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.062617][T19509] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 460.112076][T19525] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 460.133360][T19525] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5032: invalid indirect mapped block 32768 (level 2) [ 460.149363][T19525] EXT4-fs (loop5): Remounting filesystem read-only [ 460.156514][T19525] EXT4-fs (loop5): 1 orphan inode deleted [ 460.162514][T19525] EXT4-fs (loop5): 1 truncate cleaned up [ 460.178996][T19527] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 460.200590][T19527] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 460.213017][T19527] EXT4-fs (loop6): This should not happen!! Data will be lost [ 460.213017][T19527] [ 460.222812][T19527] EXT4-fs (loop6): Total free blocks count 0 [ 460.228870][T19527] EXT4-fs (loop6): Free/Dirty block details [ 460.234828][T19527] EXT4-fs (loop6): free_blocks=2415919504 [ 460.240599][T19527] EXT4-fs (loop6): dirty_blocks=48 [ 460.245834][T19527] EXT4-fs (loop6): Block reservation details [ 460.251862][T19527] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 460.264455][T19538] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 460.278816][T18803] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 460.279240][T19538] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 460.291346][T18803] EXT4-fs (loop6): This should not happen!! Data will be lost [ 460.291346][T18803] [ 460.311432][T19538] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: inode #32: comm syz.0.5037: iget: special inode unallocated [ 460.326259][T19538] EXT4-fs (loop0): Remounting filesystem read-only [ 460.333121][T19538] EXT4-fs (loop0): no journal found [ 460.338464][T19538] EXT4-fs (loop0): can't get journal size [ 460.387096][T19548] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.423217][T19554] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.435908][T19550] ext4 filesystem being mounted at /393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 460.482214][T19550] EXT4-fs (loop5): can't enable nombcache during remount [ 460.557859][T19570] EXT4-fs (loop0): shut down requested (1) [ 460.606242][T19577] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.616270][T19579] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 460.630012][T19577] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.5049: lblock 0 mapped to illegal pblock 0 (length 6) [ 460.632416][T19579] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 460.657202][T19579] EXT4-fs (loop5): This should not happen!! Data will be lost [ 460.657202][T19579] [ 460.666963][T19579] EXT4-fs (loop5): Total free blocks count 0 [ 460.672976][T19579] EXT4-fs (loop5): Free/Dirty block details [ 460.678943][T19579] EXT4-fs (loop5): free_blocks=2415919504 [ 460.684732][T19579] EXT4-fs (loop5): dirty_blocks=48 [ 460.690198][T19579] EXT4-fs (loop5): Block reservation details [ 460.696318][T19579] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 460.734578][T19589] syzkaller0: entered promiscuous mode [ 460.740122][T19589] syzkaller0: entered allmulticast mode [ 460.808275][T19594] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 460.823234][T19594] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 460.836001][T19594] EXT4-fs (loop3): This should not happen!! Data will be lost [ 460.836001][T19594] [ 460.845697][T19594] EXT4-fs (loop3): Total free blocks count 0 [ 460.851768][T19594] EXT4-fs (loop3): Free/Dirty block details [ 460.857884][T19594] EXT4-fs (loop3): free_blocks=2415919504 [ 460.863753][T19594] EXT4-fs (loop3): dirty_blocks=48 [ 460.868897][T19594] EXT4-fs (loop3): Block reservation details [ 460.875169][T19594] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 460.898792][T18803] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 460.911196][T18803] EXT4-fs (loop3): This should not happen!! Data will be lost [ 460.911196][T18803] [ 460.927851][T19601] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.982003][T19610] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.026713][T19614] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.5063: Directory hole found for htree leaf block 0 [ 461.040671][T19618] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 461.059065][T19614] EXT4-fs (loop3): Remounting filesystem read-only [ 461.107186][T19628] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.152549][T19636] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5072: inode has both inline data and extents flags [ 461.166206][T19636] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5072: couldn't read orphan inode 15 (err -117) [ 461.196433][T19640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.205242][T19640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.214802][T19642] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.256229][T19647] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.5076: Directory hole found for htree leaf block 0 [ 461.269741][T19647] EXT4-fs (loop0): Remounting filesystem read-only [ 461.291093][T19650] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.322346][T19656] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.5079: Directory hole found for htree leaf block 0 [ 461.335728][T19656] EXT4-fs (loop0): Remounting filesystem read-only [ 461.342504][T18743] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 234: padding at end of block bitmap is not set [ 461.357975][T18743] EXT4-fs (loop5): Remounting filesystem read-only [ 461.428821][T19670] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.474649][T19680] __nla_validate_parse: 11 callbacks suppressed [ 461.474666][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5089'. [ 461.475260][T19674] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.481177][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5089'. [ 461.515666][T19676] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 461.523532][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5089'. [ 461.550508][T18763] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.559627][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5089'. [ 461.579691][T19676] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 461.601018][T18763] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.613396][T18763] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.621838][T18763] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.695467][T19693] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.5093: Directory hole found for htree leaf block 0 [ 461.708848][T19693] EXT4-fs (loop0): Remounting filesystem read-only [ 461.746234][T19704] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.764607][T19706] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 461.781916][T19706] EXT4-fs (loop0): 1 truncate cleaned up [ 461.796334][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 461.796352][ T29] audit: type=1400 audit(1768282873.633:37969): avc: denied { read } for pid=19711 comm="syz.2.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 461.822580][T19706] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 461.896878][T19718] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.5104: Directory hole found for htree leaf block 0 [ 461.910509][T19718] EXT4-fs (loop0): Remounting filesystem read-only [ 461.935742][T19721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5105'. [ 462.050725][T19733] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.085775][T19735] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.5112: corrupted in-inode xattr: invalid ea_ino [ 462.099474][T19735] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5112: couldn't read orphan inode 15 (err -117) [ 462.165759][T19742] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.5115: Directory hole found for htree leaf block 0 [ 462.179858][T19742] EXT4-fs (loop0): Remounting filesystem read-only [ 462.219364][ T29] audit: type=1400 audit(1768282874.053:37970): avc: denied { create } for pid=19746 comm="syz.0.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 462.244965][ T29] audit: type=1400 audit(1768282874.083:37971): avc: denied { accept } for pid=19746 comm="syz.0.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 462.370898][T19757] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.406325][T19759] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.416343][T19759] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 462.425681][T19759] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 462.433805][T19759] System zones: 0-2, 18-18, 34-34 [ 462.439624][T19759] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5123: bad orphan inode 15 [ 462.450000][T19759] ext4_test_bit(bit=14, block=18) = 1 [ 462.455509][T19759] is_bad_inode(inode)=0 [ 462.459719][T19759] NEXT_ORPHAN(inode)=2264924160 [ 462.464764][T19759] max_ino=32 [ 462.467979][T19759] i_nlink=0 [ 462.471593][T19759] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.5123: corrupted inode contents [ 462.483959][T19759] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.5123: mark_inode_dirty error [ 462.496159][T19759] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.5123: corrupted inode contents [ 462.508529][T19759] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.5123: mark_inode_dirty error [ 462.520832][T19759] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.5123: mark inode dirty (error -117) [ 462.533755][T19759] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 462.569906][T19764] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.5125: corrupted in-inode xattr: invalid ea_ino [ 462.593071][T19764] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5125: couldn't read orphan inode 15 (err -117) [ 462.621330][T19770] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.5127: inode has both inline data and extents flags [ 462.637511][T19770] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5127: couldn't read orphan inode 15 (err -117) [ 462.661987][T19774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.670883][T19774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.692905][T19777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 462.722899][T19777] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.776839][ T29] audit: type=1400 audit(1768282874.613:37972): avc: denied { create } for pid=19789 comm="syz.2.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 462.804431][ T29] audit: type=1400 audit(1768282874.633:37973): avc: denied { bind } for pid=19789 comm="syz.2.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 462.824080][ T29] audit: type=1400 audit(1768282874.633:37974): avc: denied { write } for pid=19789 comm="syz.2.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 462.825000][T19796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.852533][T19796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.905615][T19807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.911460][T19808] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 462.914655][T19807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.931949][T19808] EXT4-fs (loop6): 1 truncate cleaned up [ 462.958014][T19811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.966631][T19811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.219750][ T29] audit: type=1400 audit(1768282875.053:37975): avc: denied { create } for pid=19812 comm="syz.5.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 463.269845][T19817] set_capacity_and_notify: 77 callbacks suppressed [ 463.269861][T19817] loop5: detected capacity change from 0 to 512 [ 463.283443][T19817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.296058][T19817] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.362315][T19825] loop5: detected capacity change from 0 to 2048 [ 463.403474][T19833] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5153'. [ 463.445451][T19839] loop5: detected capacity change from 0 to 512 [ 463.454513][T19841] loop3: detected capacity change from 0 to 512 [ 463.455326][T19839] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 463.465419][T19841] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 463.472595][T19839] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 463.482468][T19841] EXT4-fs (loop3): 1 truncate cleaned up [ 463.490990][T19839] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5156: Corrupt directory, running e2fsck is recommended [ 463.521161][T19839] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 463.531980][T19839] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5156: corrupted in-inode xattr: e_name out of bounds [ 463.546411][T19839] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5156: couldn't read orphan inode 15 (err -117) [ 463.559919][T19845] loop6: detected capacity change from 0 to 512 [ 463.569256][T19845] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.5158: inode has both inline data and extents flags [ 463.574677][T19839] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 463.594086][T19839] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 463.604245][T19839] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5156: Corrupt directory, running e2fsck is recommended [ 463.617590][T19839] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.5156: path /422/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 463.630996][ T29] audit: type=1400 audit(1768282875.433:37976): avc: denied { write } for pid=19847 comm="syz.3.5159" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 463.639601][T19839] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 8: comm syz.5.5156: path /422/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 463.682256][T19845] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5158: couldn't read orphan inode 15 (err -117) [ 463.695083][T19845] EXT4-fs mount: 174 callbacks suppressed [ 463.695099][T19845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.726460][T18161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.750063][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.845191][T19874] loop6: detected capacity change from 0 to 512 [ 463.856805][T19874] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.5171: inode has both inline data and extents flags [ 463.874092][T19874] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5171: couldn't read orphan inode 15 (err -117) [ 463.886623][T19874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.914083][T18161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.940832][T19885] loop6: detected capacity change from 0 to 512 [ 463.950067][T19885] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.964876][T19885] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.5174: Directory hole found for htree leaf block 0 [ 463.978373][T19885] EXT4-fs (loop6): Remounting filesystem read-only [ 463.995809][T18161] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 464.020329][T19891] loop5: detected capacity change from 0 to 2048 [ 464.035654][T19891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.056601][T19891] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 464.071996][T19891] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 464.084439][T19891] EXT4-fs (loop5): This should not happen!! Data will be lost [ 464.084439][T19891] [ 464.094149][T19891] EXT4-fs (loop5): Total free blocks count 0 [ 464.100164][T19891] EXT4-fs (loop5): Free/Dirty block details [ 464.106246][T19891] EXT4-fs (loop5): free_blocks=2415919504 [ 464.111999][T19891] EXT4-fs (loop5): dirty_blocks=48 [ 464.117216][T19891] EXT4-fs (loop5): Block reservation details [ 464.123206][T19891] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 464.140100][T18771] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 464.195803][T19908] loop5: detected capacity change from 0 to 512 [ 464.204228][T19908] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5184: inode has both inline data and extents flags [ 464.217868][T19908] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5184: couldn't read orphan inode 15 (err -117) [ 464.230821][T19908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.254589][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.272673][T19912] loop5: detected capacity change from 0 to 256 [ 464.279604][T19912] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 464.314734][T19914] syzkaller0: entered promiscuous mode [ 464.320348][T19914] syzkaller0: entered allmulticast mode [ 464.678353][T19925] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 464.687499][T19925] EXT4-fs (loop0): invalid journal inode [ 464.693424][T19925] EXT4-fs (loop0): can't get journal size [ 464.699750][T19925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 464.707821][T19925] System zones: 1-12, 13-13 [ 464.712763][T19925] EXT4-fs (loop0): 1 truncate cleaned up [ 464.718834][T19925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.744288][T13199] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.827779][T19941] EXT4-fs: Ignoring removed mblk_io_submit option [ 464.855530][T19941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.882401][T18803] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 234: padding at end of block bitmap is not set [ 464.897347][T18803] EXT4-fs (loop3): Remounting filesystem read-only [ 464.904635][T13332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.933334][T19945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 464.955986][T19945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.967683][T19951] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 464.978877][T19945] ext4 filesystem being mounted at /450/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.981077][T19951] EXT4-fs (loop6): 1 truncate cleaned up [ 464.995551][T19951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.021854][T18161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.022846][T13332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.053161][T19955] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 465.063319][T19955] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 465.071620][T19955] EXT4-fs (loop3): orphan cleanup on readonly fs [ 465.079493][T19955] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 465.094666][T19955] EXT4-fs (loop3): Remounting filesystem read-only [ 465.101379][T19955] EXT4-fs (loop3): 1 truncate cleaned up [ 465.107181][T18749] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 465.120166][T18749] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 465.130778][T18749] Quota error (device loop3): write_blk: dquota write failed [ 465.138216][T18749] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 465.148942][T18749] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 465.160152][T19955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.350821][T19960] lo speed is unknown, defaulting to 1000 [ 465.400012][T19965] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 465.411635][T19965] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 465.421935][T19965] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5204: Corrupt directory, running e2fsck is recommended [ 465.451894][T19965] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 465.470849][T19965] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5204: corrupted in-inode xattr: e_name out of bounds [ 465.492586][T19965] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5204: couldn't read orphan inode 15 (err -117) [ 465.513883][T19965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.530052][T19965] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 465.541669][T19965] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 465.551824][T19965] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5204: Corrupt directory, running e2fsck is recommended [ 465.565669][T19965] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.5204: path /437/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 465.586856][T19965] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 8: comm syz.5.5204: path /437/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 465.619423][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.659274][T19971] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 465.670749][T19971] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 465.682864][T19971] EXT4-fs (loop0): orphan cleanup on readonly fs [ 465.692988][T19971] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.5206: Invalid inode table block 0 in block_group 0 [ 465.706242][T19971] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 465.719670][T19971] EXT4-fs error (device loop0): ext4_quota_write:7375: inode #3: comm syz.0.5206: mark_inode_dirty error [ 465.732534][T19971] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.5206: Failed to acquire dquot type 0 [ 465.743184][T19974] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5207: corrupted in-inode xattr: invalid ea_ino [ 465.744235][T19971] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.5206: Invalid inode table block 0 in block_group 0 [ 465.757908][T19974] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5207: couldn't read orphan inode 15 (err -117) [ 465.782752][T19974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.800222][T19971] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 465.812382][T19971] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #15: comm syz.0.5206: mark_inode_dirty error [ 465.824250][T19971] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.5206: Invalid inode table block 0 in block_group 0 [ 465.837299][T19971] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 465.847606][T19971] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 465.847633][T19977] syzkaller0: entered promiscuous mode [ 465.861843][T19977] syzkaller0: entered allmulticast mode [ 465.867740][T19971] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.5206: Invalid inode table block 0 in block_group 0 [ 465.881028][T19971] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 465.881800][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.903818][T19971] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.5206: mark_inode_dirty error [ 465.923077][T13332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.932211][T19971] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 465.950289][T19971] EXT4-fs (loop0): 1 truncate cleaned up [ 465.964233][T19971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.983396][T19981] 8021q: adding VLAN 0 to HW filter on device bond5 [ 465.991538][T19981] bridge0: port 7(bond5) entered blocking state [ 465.997969][T19981] bridge0: port 7(bond5) entered disabled state [ 466.037919][T19981] bond5: entered allmulticast mode [ 466.044588][T13199] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.054447][T19988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.072032][T19981] bond5: entered promiscuous mode [ 466.077742][T19986] EXT4-fs (loop5): 1 orphan inode deleted [ 466.091757][T19988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.104448][T19986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.117121][T18743] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:19: Failed to release dquot type 1 [ 466.125113][T19986] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.139178][T19988] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.161346][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.205607][T13053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.231171][T20006] netlink: 'syz.0.5218': attribute type 4 has an invalid length. [ 466.256297][T20012] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 466.266103][T20011] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.5219: corrupted in-inode xattr: invalid ea_ino [ 466.284081][T20011] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5219: couldn't read orphan inode 15 (err -117) [ 466.296404][T20012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 466.305131][T20012] EXT4-fs (loop5): orphan cleanup on readonly fs [ 466.318485][T20016] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.335491][T20012] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 466.350478][T20011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.365329][T20016] bond6 (unregistering): Released all slaves [ 466.375264][T20012] EXT4-fs (loop5): Remounting filesystem read-only [ 466.388543][T20012] EXT4-fs (loop5): 1 truncate cleaned up [ 466.398743][ T885] EXT4-fs (loop5): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 466.409487][ T885] EXT4-fs (loop5): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 466.422190][ T885] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 466.433193][T20012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.462379][T13053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.479425][T20019] netlink: 'syz.0.5223': attribute type 1 has an invalid length. [ 466.505759][T20025] netlink: 'syz.2.5224': attribute type 13 has an invalid length. [ 466.516494][T20023] EXT4-fs (loop3): 1 orphan inode deleted [ 466.522793][T20023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.535958][ T885] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 466.566223][T20023] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.582540][T20033] wireguard0: entered promiscuous mode [ 466.588171][T20033] wireguard0: entered allmulticast mode [ 466.603127][T13332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.644261][T20039] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 466.654476][T20039] EXT4-fs (loop3): invalid journal inode [ 466.663850][T20039] EXT4-fs (loop3): can't get journal size [ 466.670293][T20039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 466.678657][T20039] System zones: 1-12, 13-13 [ 466.683622][T20039] EXT4-fs (loop3): 1 truncate cleaned up [ 466.689849][T20039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.715106][T13332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.740255][T20043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.748536][T20043] bridge0: port 5(bond4) entered blocking state [ 466.754899][T20043] bridge0: port 5(bond4) entered disabled state [ 466.761838][T20043] bond4: entered allmulticast mode [ 466.769250][T20043] bond4: entered promiscuous mode [ 466.770586][T20047] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 466.787185][T20047] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.811870][T13332] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.813949][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 466.813964][ T29] audit: type=1326 audit(1768282878.643:38034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 466.851484][ T29] audit: type=1326 audit(1768282878.663:38035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 466.856278][T20050] netlink: 'syz.2.5233': attribute type 4 has an invalid length. [ 466.875270][ T29] audit: type=1326 audit(1768282878.663:38036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 466.906712][ T29] audit: type=1326 audit(1768282878.663:38037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 466.930571][ T29] audit: type=1326 audit(1768282878.663:38038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 466.954405][ T29] audit: type=1326 audit(1768282878.663:38039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 466.978190][ T29] audit: type=1326 audit(1768282878.663:38040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 467.002157][ T29] audit: type=1326 audit(1768282878.663:38041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 467.025838][ T29] audit: type=1326 audit(1768282878.663:38042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 467.049488][ T29] audit: type=1326 audit(1768282878.663:38043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20049 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda0ad9f749 code=0x7ffc0000 [ 467.109462][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.177342][T20065] EXT4-fs (loop2): 1 orphan inode deleted [ 467.183644][T20065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.196923][T18771] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 1 [ 467.198350][T20065] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.220916][T20067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.245231][T13053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.256863][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.284273][T20076] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 467.293506][T20076] EXT4-fs (loop5): invalid journal inode [ 467.294838][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5242'. [ 467.299845][T20076] EXT4-fs (loop5): can't get journal size [ 467.315743][T20076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 467.316573][T20078] batadv1: entered promiscuous mode [ 467.325254][T20076] System zones: 1-12, 13-13 [ 467.336078][T20076] EXT4-fs (loop5): 1 truncate cleaned up [ 467.342384][T20076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.368069][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.389416][T20082] netlink: 'syz.5.5243': attribute type 1 has an invalid length. [ 467.421623][T20084] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 467.434730][T20084] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.458135][T13199] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.479547][T20082] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 467.506554][T20091] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.521365][T20091] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.5247: Directory hole found for htree leaf block 0 [ 467.535771][T20091] EXT4-fs (loop2): Remounting filesystem read-only [ 467.564399][T13053] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 467.609078][T20089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5246'. [ 467.666743][T20094] netlink: 'syz.5.5248': attribute type 1 has an invalid length. [ 467.746248][T20107] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 467.756224][T20107] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 467.768616][T20107] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.5252: iget: special inode unallocated [ 467.794899][T20107] EXT4-fs (loop5): Remounting filesystem read-only [ 467.801657][T20107] EXT4-fs (loop5): no journal found [ 467.806937][T20107] EXT4-fs (loop5): can't get journal size [ 467.814112][T20110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5253'. [ 467.823876][T20107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 467.860829][T13444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.899925][T20113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.927691][T20113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.948788][T20113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5255'. [ 468.014344][T20123] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.020157][T20123] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.5259: Directory hole found for htree leaf block 0 [ 468.066146][T20123] EXT4-fs (loop6): Remounting filesystem read-only [ 468.112951][T18161] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 468.133606][T20127] syzkaller0: entered promiscuous mode [ 468.139613][T20127] syzkaller0: entered allmulticast mode [ 468.195677][T20137] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.5263: corrupted in-inode xattr: invalid ea_ino [ 468.209550][T20137] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5263: couldn't read orphan inode 15 (err -117) [ 468.222381][T20137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.247251][T13053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.274634][T20142] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5265'. [ 468.275740][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5264'. [ 468.308583][T13332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.319101][T20144] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5267'. [ 468.426922][T20162] set_capacity_and_notify: 27 callbacks suppressed [ 468.427008][T20162] loop3: detected capacity change from 0 to 512 [ 468.471610][T20162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.499802][T20162] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.541397][T13332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.557143][T20176] syzkaller0: entered promiscuous mode [ 468.562688][T20176] syzkaller0: entered allmulticast mode [ 468.587475][T20178] loop3: detected capacity change from 0 to 2048 [ 468.602841][T20178] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.616939][T20178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.650890][T13332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.716923][T20188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5283'. [ 468.729724][T20188] batadv1: entered promiscuous mode [ 468.744934][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5284'. [ 468.821932][T20200] loop3: detected capacity change from 0 to 1024 [ 468.829604][T20200] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 468.840888][T20200] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 468.849107][T20200] EXT4-fs (loop3): orphan cleanup on readonly fs [ 468.857732][T20200] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.5286: Invalid inode table block 0 in block_group 0 [ 468.871054][T20200] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 468.881441][T20200] EXT4-fs error (device loop3): ext4_quota_write:7375: inode #3: comm syz.3.5286: mark_inode_dirty error [ 468.895293][T20192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5279'. [ 468.895779][T20200] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.5286: Failed to acquire dquot type 0 [ 468.916168][T20200] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.5286: Invalid inode table block 0 in block_group 0 [ 468.929517][T20200] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 468.939231][T20200] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.5286: mark_inode_dirty error [ 468.951014][T20200] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.5286: Invalid inode table block 0 in block_group 0 [ 468.965082][T20200] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 468.974988][T20200] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 468.983872][T20200] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.5286: Invalid inode table block 0 in block_group 0 [ 468.997195][T20200] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 469.007607][T20200] EXT4-fs error (device loop3): ext4_truncate:4635: inode #15: comm syz.3.5286: mark_inode_dirty error [ 469.019153][T20200] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 469.028381][T20200] EXT4-fs (loop3): 1 truncate cleaned up [ 469.035104][T20200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 469.080270][T20213] loop3: detected capacity change from 0 to 2048 [ 469.087305][T20213] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.174031][T20221] syzkaller0: entered promiscuous mode [ 469.179638][T20221] syzkaller0: entered allmulticast mode [ 469.199775][T20223] loop3: detected capacity change from 0 to 512 [ 469.207038][T20223] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 469.217221][T20223] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 469.226261][T20223] EXT4-fs (loop3): orphan cleanup on readonly fs [ 469.233865][T20223] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 469.248687][T20223] EXT4-fs (loop3): Remounting filesystem read-only [ 469.255495][T20223] EXT4-fs (loop3): 1 truncate cleaned up [ 469.261274][T18803] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 469.272021][T18803] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 469.289774][T18803] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 469.363470][T20229] batadv1: entered promiscuous mode [ 469.391888][T20233] loop5: detected capacity change from 0 to 512 [ 469.403089][T20233] EXT4-fs error (device loop5): ext4_add_entry:2415: inode #2: comm syz.5.5298: Directory hole found for htree leaf block 0 [ 469.418676][T20233] EXT4-fs (loop5): Remounting filesystem read-only [ 469.452569][T20240] loop5: detected capacity change from 0 to 512 [ 469.459736][T20240] EXT4-fs: Ignoring removed bh option [ 469.465819][T20240] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 469.480593][T20241] netlink: 'syz.2.5300': attribute type 13 has an invalid length. [ 469.489372][T20240] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5299: corrupted in-inode xattr: e_value size too large [ 469.504581][T20240] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5299: couldn't read orphan inode 15 (err -117) [ 469.522256][T20245] loop6: detected capacity change from 0 to 2048 [ 469.529230][T20245] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.577897][T20253] loop5: detected capacity change from 0 to 512 [ 469.598905][T20253] EXT4-fs (loop5): 1 orphan inode deleted [ 469.614221][T18803] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:58: Failed to release dquot type 1 [ 469.626600][T20253] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.639094][T20255] loop2: detected capacity change from 0 to 512 [ 469.646250][T20255] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 469.655574][T20261] syzkaller0: entered promiscuous mode [ 469.661707][T20261] syzkaller0: entered allmulticast mode [ 469.679553][T20255] EXT4-fs (loop2): 1 truncate cleaned up [ 469.712244][T20266] EXT4-fs error (device loop5): ext4_add_entry:2415: inode #2: comm syz.5.5309: Directory hole found for htree leaf block 0 [ 469.726281][T20269] batadv1: entered promiscuous mode [ 469.733410][T20266] EXT4-fs (loop5): Remounting filesystem read-only [ 469.790454][T20280] EXT4-fs: Ignoring removed bh option [ 469.796606][T20280] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 469.808624][T20280] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.5314: corrupted in-inode xattr: e_value size too large [ 469.823816][T20280] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5314: couldn't read orphan inode 15 (err -117) [ 469.866456][T20288] netlink: 'syz.0.5317': attribute type 1 has an invalid length. [ 469.915921][T20294] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 469.926955][T20292] EXT4-fs (loop6): 1 orphan inode deleted [ 469.933399][T20292] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.944145][T18803] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:58: Failed to release dquot type 1 [ 469.946744][T20288] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.966305][T20294] EXT4-fs (loop5): 1 truncate cleaned up [ 470.011568][T20301] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.045853][T20310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 470.057588][T20310] EXT4-fs (loop0): 1 truncate cleaned up [ 470.087369][T20313] syzkaller0: entered promiscuous mode [ 470.092959][T20313] syzkaller0: entered allmulticast mode [ 470.151601][T20324] netlink: 'syz.5.5331': attribute type 13 has an invalid length. [ 470.196217][T20329] EXT4-fs (loop6): 1 orphan inode deleted [ 470.205566][T20329] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.221279][ T885] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 470.232911][T20337] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 470.254140][T20337] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 470.270502][T20337] EXT4-fs (loop0): orphan cleanup on readonly fs [ 470.285038][T20337] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 470.313618][T20337] EXT4-fs (loop0): Remounting filesystem read-only [ 470.320689][T20337] EXT4-fs (loop0): 1 truncate cleaned up [ 470.335043][T18743] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 470.345937][T18743] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 470.356948][T18743] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 470.475164][T20368] syzkaller0: entered promiscuous mode [ 470.480721][T20368] syzkaller0: entered allmulticast mode [ 470.655897][T20375] EXT4-fs (loop3): 1 orphan inode deleted [ 470.662465][T20375] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.673766][T18771] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 1 [ 470.732511][T20373] Set syz1 is full, maxelem 768 reached [ 470.754942][T20384] syzkaller0: entered promiscuous mode [ 470.760487][T20384] syzkaller0: entered allmulticast mode [ 471.033538][T20398] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 471.049274][T20398] EXT4-fs (loop3): 1 truncate cleaned up [ 471.088037][T20401] EXT4-fs (loop0): 1 orphan inode deleted [ 471.094560][T20401] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.107158][T18748] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 1 [ 471.160746][T20411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 471.186095][T20411] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.212517][T20418] EXT4-fs: Ignoring removed nobh option [ 471.218577][T20418] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 471.228055][T20418] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 471.252708][T20418] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.5368: inode #4294967295: comm syz.3.5368: iget: illegal inode # [ 471.268460][T20418] EXT4-fs (loop3): no journal found [ 471.273911][T20418] EXT4-fs (loop3): can't get journal size [ 471.281413][T20418] EXT4-fs (loop3): failed to initialize system zone (-22) [ 471.289410][T20418] EXT4-fs (loop3): mount failed [ 471.306303][T20422] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.344286][T20429] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 471.356319][T20429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 471.364791][T20429] EXT4-fs (loop0): orphan cleanup on readonly fs [ 471.387063][T20429] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 471.437483][T20429] EXT4-fs (loop0): Remounting filesystem read-only [ 471.466930][T20429] EXT4-fs (loop0): 1 truncate cleaned up [ 471.485440][T18771] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 471.496108][T18771] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 471.526662][T18771] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 471.552489][T20435] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 471.569798][T20435] EXT4-fs (loop6): 1 truncate cleaned up [ 471.648348][T20444] EXT4-fs (loop6): 1 orphan inode deleted [ 471.663205][T20444] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.674006][T18803] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:58: Failed to release dquot type 1 [ 471.703999][T20452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 471.722008][T20454] hub 2-0:1.0: USB hub found [ 471.727586][T20454] hub 2-0:1.0: 8 ports detected [ 471.736157][T20452] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.772120][T20461] EXT4-fs: Ignoring removed nobh option [ 471.778367][T20461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 471.787569][T20461] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 471.797765][T20461] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.5382: inode #4294967295: comm syz.3.5382: iget: illegal inode # [ 471.812060][T20461] EXT4-fs (loop3): no journal found [ 471.812102][T20462] wireguard0: entered promiscuous mode [ 471.812117][T20462] wireguard0: entered allmulticast mode [ 471.817466][T20461] EXT4-fs (loop3): can't get journal size [ 471.839480][T20461] EXT4-fs (loop3): failed to initialize system zone (-22) [ 471.847715][T20461] EXT4-fs (loop3): mount failed [ 471.852817][ T29] kauditd_printk_skb: 827 callbacks suppressed [ 471.852831][ T29] audit: type=1326 audit(1768282883.683:38838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 471.883161][ T29] audit: type=1326 audit(1768282883.693:38839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 471.906902][ T29] audit: type=1326 audit(1768282883.693:38840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 471.930594][ T29] audit: type=1326 audit(1768282883.693:38841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 471.954233][ T29] audit: type=1326 audit(1768282883.693:38842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 471.978181][ T29] audit: type=1326 audit(1768282883.693:38843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 472.002176][ T29] audit: type=1326 audit(1768282883.693:38844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 472.025898][ T29] audit: type=1326 audit(1768282883.693:38845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 472.039036][T20471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 472.049491][ T29] audit: type=1326 audit(1768282883.693:38846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 472.083163][ T29] audit: type=1326 audit(1768282883.693:38847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20466 comm="syz.5.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84e67f749 code=0x7ffc0000 [ 472.096344][T20471] EXT4-fs (loop3): 1 truncate cleaned up [ 472.121984][T20471] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.5386: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 472.143104][T20471] EXT4-fs (loop3): Remounting filesystem read-only [ 472.149728][T20471] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.5386: Deleting old file: nlink 5, error=-117 [ 472.255194][T20483] EXT4-fs (loop0): 1 orphan inode deleted [ 472.262659][T20483] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.289417][T18749] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 1 [ 472.307347][T20494] netlink: 'syz.6.5394': attribute type 1 has an invalid length. [ 472.389429][T20498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 472.415701][T20494] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 472.430246][T20498] EXT4-fs (loop2): 1 truncate cleaned up [ 472.474055][T20505] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 472.506608][T20505] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 472.514978][T20505] EXT4-fs (loop0): orphan cleanup on readonly fs [ 472.523006][T20505] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 472.538586][T20505] EXT4-fs (loop0): Remounting filesystem read-only [ 472.545462][T20505] EXT4-fs (loop0): 1 truncate cleaned up [ 472.548119][T20507] netlink: 'syz.6.5398': attribute type 13 has an invalid length. [ 472.559466][T18803] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 472.570097][T18803] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 472.583074][T18803] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 472.711510][T20530] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.720967][T20530] bond5 (unregistering): Released all slaves [ 472.786215][T20535] EXT4-fs (loop2): 1 orphan inode deleted [ 472.792560][T20535] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.804123][T18771] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 1 [ 473.117093][T20546] Set syz1 is full, maxelem 768 reached [ 473.327394][T20555] netlink: 'syz.0.5412': attribute type 13 has an invalid length. [ 473.338610][T18749] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.357396][T18749] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.373312][T18749] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.386156][T18749] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.465363][T20569] set_capacity_and_notify: 28 callbacks suppressed [ 473.465380][T20569] loop0: detected capacity change from 0 to 512 [ 473.479602][T20569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 473.500635][T20569] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.637817][T20585] loop5: detected capacity change from 0 to 512 [ 473.645513][T20585] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 473.655473][T20585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 473.663532][T20585] EXT4-fs (loop5): orphan cleanup on readonly fs [ 473.674124][T20585] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 473.690354][T20585] EXT4-fs (loop5): Remounting filesystem read-only [ 473.695255][T20580] __nla_validate_parse: 8 callbacks suppressed [ 473.695304][T20580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5420'. [ 473.697444][T20585] EXT4-fs (loop5): 1 truncate cleaned up [ 473.718084][T18748] EXT4-fs (loop5): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 473.728679][T18748] EXT4-fs (loop5): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 473.739312][T18748] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 473.829412][T20594] netlink: 'syz.3.5424': attribute type 13 has an invalid length. [ 473.862086][T20597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.871701][T20597] bond6 (unregistering): Released all slaves [ 474.081179][T20620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5433'. [ 474.114067][T20624] netlink: 'syz.3.5435': attribute type 1 has an invalid length. [ 474.150679][T20624] loop3: detected capacity change from 0 to 8192 [ 474.158805][T20624] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.204862][T20627] 8021q: adding VLAN 0 to HW filter on device bond6 [ 474.212952][T20627] bridge0: port 8(bond6) entered blocking state [ 474.219583][T20627] bridge0: port 8(bond6) entered disabled state [ 474.226253][T20627] bond6: entered allmulticast mode [ 474.232736][T20627] bond6: entered promiscuous mode [ 474.423228][T20633] loop0: detected capacity change from 0 to 2048 [ 474.469774][T20636] lo speed is unknown, defaulting to 1000 [ 474.543706][T20636] loop3: detected capacity change from 0 to 8192 [ 474.846133][T20657] netlink: 'syz.2.5446': attribute type 4 has an invalid length. [ 474.860067][T20645] lo speed is unknown, defaulting to 1000 [ 474.920051][T20660] loop2: detected capacity change from 0 to 1024 [ 474.926896][T20660] EXT4-fs: Ignoring removed nobh option [ 474.932805][T20660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 474.942114][T20660] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 474.963980][T20660] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: comm syz.2.5447: inode #4294967295: comm syz.2.5447: iget: illegal inode # [ 474.978214][T20660] EXT4-fs (loop2): no journal found [ 474.983527][T20660] EXT4-fs (loop2): can't get journal size [ 474.994066][T20645] chnl_net:caif_netlink_parms(): no params data found [ 475.003824][T20660] EXT4-fs (loop2): failed to initialize system zone (-22) [ 475.019607][T20660] EXT4-fs (loop2): mount failed [ 475.085599][T20645] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.092751][T20645] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.150287][T20645] bridge_slave_0: entered allmulticast mode [ 475.156969][T20645] bridge_slave_0: entered promiscuous mode [ 475.164582][T20645] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.171676][T20645] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.180530][T20645] bridge_slave_1: entered allmulticast mode [ 475.187247][T20645] bridge_slave_1: entered promiscuous mode [ 475.226338][T20669] netlink: 'syz.2.5449': attribute type 13 has an invalid length. [ 475.237252][T20645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.250448][T20645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.253289][T20675] loop3: detected capacity change from 0 to 512 [ 475.286432][T20675] ext4 filesystem being mounted at /514/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.314010][T20645] team0: Port device team_slave_0 added [ 475.339200][T20680] loop6: detected capacity change from 0 to 1024 [ 475.375539][T20645] team0: Port device team_slave_1 added [ 475.480048][T20645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.487167][T20645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.513277][T20645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.555926][T20645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.563083][T20645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.589333][T20645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.622859][T20645] hsr_slave_0: entered promiscuous mode [ 475.631144][T20645] hsr_slave_1: entered promiscuous mode [ 475.652400][T20645] debugfs: 'hsr0' already exists in 'hsr' [ 475.658254][T20645] Cannot create hsr debugfs directory [ 475.716032][T20700] loop3: detected capacity change from 0 to 1024 [ 475.734359][T20700] EXT4-fs: Ignoring removed nobh option [ 475.750665][T20700] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 475.765483][T20700] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 475.775348][T20700] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.5459: inode #4294967295: comm syz.3.5459: iget: illegal inode # [ 475.790009][T20700] EXT4-fs (loop3): no journal found [ 475.795336][T20700] EXT4-fs (loop3): can't get journal size [ 475.805956][T20703] syzkaller0: entered promiscuous mode [ 475.811495][T20703] syzkaller0: entered allmulticast mode [ 475.832776][T20700] EXT4-fs (loop3): failed to initialize system zone (-22) [ 475.843435][T20700] EXT4-fs (loop3): mount failed [ 475.949605][T20645] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 475.960886][T20645] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 475.997467][T20525] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 476.020398][T20645] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 476.032537][T20645] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 476.076966][T20719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5467'. [ 476.088917][T20721] hub 2-0:1.0: USB hub found [ 476.094157][T20721] hub 2-0:1.0: 8 ports detected [ 476.115134][T20726] netlink: 'syz.3.5466': attribute type 13 has an invalid length. [ 476.115427][T20645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.147016][T20719] batadv1: entered promiscuous mode [ 476.186483][T20732] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.204868][T20732] bond7 (unregistering): Released all slaves [ 476.225888][T20645] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.245062][T20734] syzkaller0: entered promiscuous mode [ 476.250825][T20734] syzkaller0: entered allmulticast mode [ 476.264076][T18763] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.271305][T18763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.277537][T20738] loop5: detected capacity change from 0 to 1024 [ 476.286055][T20738] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 476.317566][T20738] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 476.318525][ T2351] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.326030][T20738] EXT4-fs (loop5): orphan cleanup on readonly fs [ 476.332784][ T2351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.347281][T20738] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.5472: Invalid inode table block 0 in block_group 0 [ 476.374228][T20738] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 476.393853][T20738] EXT4-fs error (device loop5): ext4_quota_write:7375: inode #3: comm syz.5.5472: mark_inode_dirty error [ 476.405596][T20738] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.5472: Failed to acquire dquot type 0 [ 476.418098][T20738] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.5472: Invalid inode table block 0 in block_group 0 [ 476.431870][T20738] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 476.441784][T20738] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.5472: mark_inode_dirty error [ 476.453526][T20738] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.5472: Invalid inode table block 0 in block_group 0 [ 476.467617][T20738] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 476.477355][T20738] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 476.486193][T20744] wireguard0: entered promiscuous mode [ 476.491100][T20738] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.5472: Invalid inode table block 0 in block_group 0 [ 476.491768][T20744] wireguard0: entered allmulticast mode [ 476.513600][T20738] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 476.526403][T20738] EXT4-fs error (device loop5): ext4_truncate:4635: inode #15: comm syz.5.5472: mark_inode_dirty error [ 476.537832][T20738] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 476.547028][T20738] EXT4-fs (loop5): 1 truncate cleaned up [ 476.624938][T20758] netlink: 'syz.6.5479': attribute type 13 has an invalid length. [ 476.655990][T20764] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=13376 sclass=netlink_xfrm_socket pid=20764 comm=syz.6.5480 [ 476.657430][T20645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.835781][T20645] veth0_vlan: entered promiscuous mode [ 476.889155][T20645] veth1_vlan: entered promiscuous mode [ 476.968026][T20645] veth0_macvtap: entered promiscuous mode [ 476.976466][T20645] veth1_macvtap: entered promiscuous mode [ 476.990519][T20645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.000586][T20645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.025183][T18773] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.026410][T20769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5481'. [ 477.044000][T18773] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.059368][T18773] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.070295][T18773] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.107172][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 477.107187][ T29] audit: type=1400 audit(1768282888.943:39159): avc: denied { mount } for pid=20645 comm="syz-executor" name="/" dev="gadgetfs" ino=4648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 477.173111][T20795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5444'. [ 477.232497][T20800] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 477.245150][T20800] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 477.253490][T20800] EXT4-fs (loop7): orphan cleanup on readonly fs [ 477.261975][T20800] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.5485: Invalid inode table block 0 in block_group 0 [ 477.276989][T20800] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 477.287440][T20800] EXT4-fs error (device loop7): ext4_quota_write:7375: inode #3: comm syz.7.5485: mark_inode_dirty error [ 477.299414][T20800] Quota error (device loop7): write_blk: dquota write failed [ 477.306875][T20800] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 477.317172][T20800] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5485: Failed to acquire dquot type 0 [ 477.329751][T20800] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.5485: Invalid inode table block 0 in block_group 0 [ 477.343205][T20800] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 477.353613][T20800] EXT4-fs error (device loop7): ext4_ext_truncate:4475: inode #15: comm syz.7.5485: mark_inode_dirty error [ 477.367433][T20800] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.5485: Invalid inode table block 0 in block_group 0 [ 477.380563][T20800] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 477.390748][T20800] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 477.399829][T20800] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.5485: Invalid inode table block 0 in block_group 0 [ 477.413922][T20800] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 477.457993][T20800] EXT4-fs error (device loop7): ext4_truncate:4635: inode #15: comm syz.7.5485: mark_inode_dirty error [ 477.469743][T20800] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 477.479130][T20800] EXT4-fs (loop7): 1 truncate cleaned up [ 477.580919][T20809] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 477.591421][T20806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.595172][T20803] Set syz1 is full, maxelem 768 reached [ 477.601422][T20806] bridge0: port 4(bond1) entered blocking state [ 477.610489][T20806] bridge0: port 4(bond1) entered disabled state [ 477.617309][T20806] bond1: entered allmulticast mode [ 477.621877][T20803] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5486'. [ 477.627030][T20806] bond1: entered promiscuous mode [ 477.638180][T20809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 477.646245][T20809] EXT4-fs (loop7): orphan cleanup on readonly fs [ 477.666922][T20809] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 477.684471][T20809] EXT4-fs (loop7): Remounting filesystem read-only [ 477.691150][T20809] EXT4-fs (loop7): 1 truncate cleaned up [ 477.699520][ T885] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 477.725563][ T885] EXT4-fs (loop7): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 477.736308][ T885] Quota error (device loop7): write_blk: dquota write failed [ 477.743801][ T885] Quota error (device loop7): remove_free_dqentry: Can't write block (8) with free entries [ 477.753882][ T885] EXT4-fs (loop7): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 477.764630][ T885] Quota error (device loop7): write_blk: dquota write failed [ 477.772101][ T885] Quota error (device loop7): free_dqentry: Can't move quota data block (8) to free list [ 477.783722][ T885] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 477.794458][ T885] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 477.818258][T20818] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=13376 sclass=netlink_xfrm_socket pid=20818 comm=syz.6.5490 [ 477.829247][ T885] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 477.898768][T20822] wireguard0: entered promiscuous mode [ 477.904420][T20822] wireguard0: entered allmulticast mode [ 478.047971][T20829] netlink: 'syz.2.5494': attribute type 13 has an invalid length. [ 478.086947][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5495'. [ 478.129384][T20835] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5496'. [ 478.133960][T20837] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 478.150377][T20838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5498'. [ 478.159685][T20837] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 478.170664][T20837] EXT4-fs (loop6): orphan cleanup on readonly fs [ 478.177566][T20837] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.5497: Invalid inode table block 0 in block_group 0 [ 478.193744][T20837] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 478.203401][T20837] EXT4-fs error (device loop6): ext4_quota_write:7375: inode #3: comm syz.6.5497: mark_inode_dirty error [ 478.214853][T20837] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.5497: Failed to acquire dquot type 0 [ 478.226532][T20837] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.5497: Invalid inode table block 0 in block_group 0 [ 478.241595][T20837] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 478.251789][T20837] EXT4-fs error (device loop6): ext4_ext_truncate:4475: inode #15: comm syz.6.5497: mark_inode_dirty error [ 478.266911][T20844] netlink: 'syz.2.5500': attribute type 1 has an invalid length. [ 478.277483][T20837] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.5497: Invalid inode table block 0 in block_group 0 [ 478.290728][T20837] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 478.300738][T20837] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 478.319795][T20837] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.5497: Invalid inode table block 0 in block_group 0 [ 478.341025][T20837] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 478.351256][T20837] EXT4-fs error (device loop6): ext4_truncate:4635: inode #15: comm syz.6.5497: mark_inode_dirty error [ 478.363305][T20837] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 478.372513][T20837] EXT4-fs (loop6): 1 truncate cleaned up [ 478.385944][T20844] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 478.427742][T20851] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=13376 sclass=netlink_xfrm_socket pid=20851 comm=syz.6.5502 [ 478.469709][T20857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5503'. [ 478.486993][T20855] netlink: 'syz.6.5505': attribute type 13 has an invalid length. [ 478.530490][T20864] set_capacity_and_notify: 5 callbacks suppressed [ 478.530508][T20864] loop5: detected capacity change from 0 to 1024 [ 478.543904][T20864] EXT4-fs: Ignoring removed orlov option [ 478.625448][T20869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.634003][T20869] bridge0: port 5(bond2) entered blocking state [ 478.640616][T20869] bridge0: port 5(bond2) entered disabled state [ 478.656283][T20869] bond2: entered allmulticast mode [ 478.663517][T20869] bond2: entered promiscuous mode [ 478.757035][T20879] bridge0: port 3(gretap0) entered blocking state [ 478.763640][T20879] bridge0: port 3(gretap0) entered disabled state [ 478.871481][T20879] gretap0: entered allmulticast mode [ 478.878033][T20879] gretap0: entered promiscuous mode [ 478.883608][T20879] bridge0: port 3(gretap0) entered blocking state [ 478.890253][T20879] bridge0: port 3(gretap0) entered forwarding state [ 478.932469][T20879] loop7: detected capacity change from 0 to 1024 [ 478.977500][T20876] Set syz1 is full, maxelem 768 reached [ 478.995555][T20878] netlink: 'syz.6.5512': attribute type 1 has an invalid length. [ 479.006741][ T3393] hid_parser_main: 19 callbacks suppressed [ 479.006764][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.021511][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.029338][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.087539][T20887] loop3: detected capacity change from 0 to 512 [ 479.094849][T20887] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 479.104842][T20887] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 479.112841][T20887] EXT4-fs (loop3): orphan cleanup on readonly fs [ 479.126510][T20887] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 479.141265][T20887] EXT4-fs (loop3): Remounting filesystem read-only [ 479.150050][T20885] netlink: 'syz.6.5513': attribute type 1 has an invalid length. [ 479.158574][T20887] EXT4-fs (loop3): 1 truncate cleaned up [ 479.213770][T18803] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 479.214231][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.224406][T18803] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 479.232164][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.232196][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.232219][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x1 [ 479.266084][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.273954][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.281735][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 479.318501][T20885] loop6: detected capacity change from 0 to 8192 [ 479.326615][ T3393] hid-generic 0000:0000:FFFFFFFC.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 479.338622][T18803] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 479.350272][T20885] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 479.403626][T20890] __nla_validate_parse: 3 callbacks suppressed [ 479.403645][T20890] netlink: 464 bytes leftover after parsing attributes in process `syz.5.5515'. [ 479.477180][T20895] loop6: detected capacity change from 0 to 2048 [ 479.515987][T20895] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 479.536374][T20903] wireguard0: entered promiscuous mode [ 479.541996][T20903] wireguard0: entered allmulticast mode [ 479.544128][T20895] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 479.559920][T20895] EXT4-fs (loop6): This should not happen!! Data will be lost [ 479.559920][T20895] [ 479.569729][T20895] EXT4-fs (loop6): Total free blocks count 0 [ 479.575864][T20895] EXT4-fs (loop6): Free/Dirty block details [ 479.581874][T20895] EXT4-fs (loop6): free_blocks=2415919504 [ 479.587752][T20895] EXT4-fs (loop6): dirty_blocks=48 [ 479.592903][T20895] EXT4-fs (loop6): Block reservation details [ 479.598950][T20895] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 479.632418][T18748] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 479.644788][T18748] EXT4-fs (loop6): This should not happen!! Data will be lost [ 479.644788][T18748] [ 479.706051][T20916] loop6: detected capacity change from 0 to 1024 [ 479.716625][T20916] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 479.728200][T20916] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 479.738821][T20916] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: inode #32: comm syz.6.5523: iget: special inode unallocated [ 479.751836][T20916] EXT4-fs (loop6): Remounting filesystem read-only [ 479.762921][T20916] EXT4-fs (loop6): no journal found [ 479.768231][T20916] EXT4-fs (loop6): can't get journal size [ 479.774841][T20918] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5524'. [ 479.796314][T20921] hub 2-0:1.0: USB hub found [ 479.801105][T20921] hub 2-0:1.0: 8 ports detected [ 479.873336][T20928] netlink: 'syz.5.5528': attribute type 1 has an invalid length. [ 479.916042][T20932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.926746][T20932] bond3 (unregistering): Released all slaves [ 479.963629][T20928] loop5: detected capacity change from 0 to 8192 [ 479.973169][T20928] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 479.993347][T20937] loop3: detected capacity change from 0 to 2048 [ 480.113622][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5539'. [ 480.151327][T20959] loop6: detected capacity change from 0 to 512 [ 480.160334][T20959] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 480.178435][T20962] netlink: 'syz.7.5543': attribute type 1 has an invalid length. [ 480.197030][T20959] EXT4-fs (loop6): 1 truncate cleaned up [ 480.219384][T20959] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 480.272692][T20962] loop7: detected capacity change from 0 to 8192 [ 480.280424][T20962] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 480.324650][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5546'. [ 480.347724][T20966] lo speed is unknown, defaulting to 1000 [ 480.408827][T20980] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 480.424165][T20980] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 480.436545][T20980] EXT4-fs (loop7): This should not happen!! Data will be lost [ 480.436545][T20980] [ 480.446249][T20980] EXT4-fs (loop7): Total free blocks count 0 [ 480.452264][T20980] EXT4-fs (loop7): Free/Dirty block details [ 480.458245][T20980] EXT4-fs (loop7): free_blocks=2415919504 [ 480.464023][T20980] EXT4-fs (loop7): dirty_blocks=48 [ 480.469173][T20980] EXT4-fs (loop7): Block reservation details [ 480.475309][T20980] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 480.487854][T20966] chnl_net:caif_netlink_parms(): no params data found [ 480.554522][T20996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.562663][T20996] bridge0: port 4(bond1) entered blocking state [ 480.569065][T20996] bridge0: port 4(bond1) entered disabled state [ 480.592022][T20996] bond1: entered allmulticast mode [ 480.605149][T20996] bond1: entered promiscuous mode [ 480.610710][T20996] bridge0: port 4(bond1) entered blocking state [ 480.617056][T20996] bridge0: port 4(bond1) entered forwarding state [ 480.639319][T20966] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.646520][T20966] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.656418][T20966] bridge_slave_0: entered allmulticast mode [ 480.673153][T20966] bridge_slave_0: entered promiscuous mode [ 480.680176][T20966] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.687440][T20966] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.694889][T20966] bridge_slave_1: entered allmulticast mode [ 480.703546][T20966] bridge_slave_1: entered promiscuous mode [ 480.708592][T21001] Set syz1 is full, maxelem 768 reached [ 480.746225][T21014] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5557'. [ 480.757857][T20966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.770558][T21014] batadv1: entered promiscuous mode [ 480.779362][T20966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.807265][T20966] team0: Port device team_slave_0 added [ 480.814653][T20966] team0: Port device team_slave_1 added [ 480.837127][T20966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.844174][T20966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.870130][T20966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.881027][T21002] lo speed is unknown, defaulting to 1000 [ 480.882606][T20966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.893972][T20966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.920052][T20966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.962729][T18803] bridge0: port 4(bond1) entered disabled state [ 480.988488][T20966] hsr_slave_0: entered promiscuous mode [ 480.994951][T20966] hsr_slave_1: entered promiscuous mode [ 481.001114][T20966] debugfs: 'hsr0' already exists in 'hsr' [ 481.007002][T20966] Cannot create hsr debugfs directory [ 481.053619][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5561'. [ 481.113285][T21033] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5564'. [ 481.133182][T21002] chnl_net:caif_netlink_parms(): no params data found [ 481.211003][T21002] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.218267][T21002] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.225666][T21002] bridge_slave_0: entered allmulticast mode [ 481.232617][T21002] bridge_slave_0: entered promiscuous mode [ 481.240420][T20966] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 481.276520][T21002] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.283732][T21002] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.291713][T21002] bridge_slave_1: entered allmulticast mode [ 481.298972][T21002] bridge_slave_1: entered promiscuous mode [ 481.352826][T20966] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 481.371709][T21041] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.452520][T21045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5568'. [ 481.475729][T21002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.497664][T21002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.515096][T20966] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 481.589635][T21045] batadv1: entered promiscuous mode [ 481.862363][T20966] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 481.945889][T21002] team0: Port device team_slave_0 added [ 481.954561][T21002] team0: Port device team_slave_1 added [ 481.966230][T21028] ================================================================== [ 481.974460][T21028] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 481.984152][T21028] [ 481.986497][T21028] write to 0xffff88811aa7c080 of 8 bytes by task 21031 on cpu 0: [ 481.994233][T21028] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 482.000166][T21028] page_pool_alloc_pages+0xd0/0x130 [ 482.005408][T21028] bpf_test_run_xdp_live+0x54d/0x11d0 [ 482.010824][T21028] bpf_prog_test_run_xdp+0x525/0x970 [ 482.016156][T21028] bpf_prog_test_run+0x204/0x340 [ 482.021135][T21028] __sys_bpf+0x4c0/0x7c0 [ 482.025403][T21028] __x64_sys_bpf+0x41/0x50 [ 482.029954][T21028] x64_sys_call+0x28e1/0x3000 [ 482.034676][T21028] do_syscall_64+0xca/0x2b0 [ 482.039254][T21028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.045183][T21028] [ 482.047526][T21028] read to 0xffff88811aa7c080 of 8 bytes by task 21028 on cpu 1: [ 482.055182][T21028] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 482.061120][T21028] napi_pp_put_page+0xe9/0x200 [ 482.065929][T21028] skb_free_head+0x12c/0x150 [ 482.070572][T21028] skb_release_data+0x33b/0x370 [ 482.075469][T21028] __kfree_skb+0x44/0x150 [ 482.079846][T21028] sk_skb_reason_drop+0xbd/0x270 [ 482.084825][T21028] skb_queue_purge_reason+0x1fb/0x250 [ 482.090229][T21028] packet_release+0x6e5/0x7e0 [ 482.094941][T21028] sock_close+0x6b/0x150 [ 482.099249][T21028] __fput+0x29b/0x650 [ 482.103274][T21028] ____fput+0x1c/0x30 [ 482.107558][T21028] task_work_run+0x131/0x1a0 [ 482.112201][T21028] exit_to_user_mode_loop+0x1fe/0x740 [ 482.117612][T21028] do_syscall_64+0x1dd/0x2b0 [ 482.122279][T21028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.128221][T21028] [ 482.130576][T21028] value changed: 0xffffea00045bc380 -> 0x0000000000000000 [ 482.137704][T21028] [ 482.140064][T21028] Reported by Kernel Concurrency Sanitizer on: [ 482.146242][T21028] CPU: 1 UID: 0 PID: 21028 Comm: syz.5.5563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 482.156087][T21028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.166174][T21028] ================================================================== [ 482.233925][T20966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.260006][T21002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.267072][T21002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.293010][T21002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.304702][T21002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.311856][T21002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.338372][T21002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.356539][T20966] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.375022][T18771] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.382247][T18771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.408325][T18803] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.415435][T18803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.426159][T21002] hsr_slave_0: entered promiscuous mode [ 482.432386][T21002] hsr_slave_1: entered promiscuous mode [ 482.438463][T21002] debugfs: 'hsr0' already exists in 'hsr' [ 482.444334][T21002] Cannot create hsr debugfs directory [ 482.543287][T21002] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 482.553308][T21002] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 482.563493][T21002] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 482.572995][T21002] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 482.598693][T20966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.637388][T21002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.651677][T21002] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.665426][T18771] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.672526][T18771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.681828][T18771] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.688981][T18771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.772570][T21002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.793224][T20966] veth0_vlan: entered promiscuous mode [ 482.803330][T20966] veth1_vlan: entered promiscuous mode [ 482.819794][T20966] veth0_macvtap: entered promiscuous mode [ 482.828903][T20966] veth1_macvtap: entered promiscuous mode [ 482.841869][T20966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.854884][T20966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.866834][T18803] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.876600][T18803] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.886672][T18803] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.896163][T18803] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.977625][T21002] veth0_vlan: entered promiscuous mode [ 482.985580][T21002] veth1_vlan: entered promiscuous mode [ 483.001333][T21002] veth0_macvtap: entered promiscuous mode [ 483.008872][T21002] veth1_macvtap: entered promiscuous mode [ 483.020150][T21002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.032247][T21002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.043450][T18804] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.052747][T18804] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.064913][T18804] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.074151][T18804] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0