last executing test programs: 1m29.31394048s ago: executing program 0 (id=418): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, r1, 0x8, 0xfff, 0x7fffffffc}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1m29.163663042s ago: executing program 0 (id=423): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.093201183s ago: executing program 0 (id=424): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_open_dev$loop(0x0, 0xfffffffffffffff8, 0x101000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) 1m29.077649683s ago: executing program 0 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) 1m29.015590534s ago: executing program 0 (id=427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000580)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x40000003, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x88}}, 0x24040084) 1m25.667549062s ago: executing program 0 (id=492): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r3, 0x3) 1m25.667224732s ago: executing program 32 (id=492): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r3, 0x3) 55.080656911s ago: executing program 2 (id=1318): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x84000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x0) 55.048177061s ago: executing program 2 (id=1319): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82, 0x0, 0x10}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 54.935527743s ago: executing program 2 (id=1320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) 54.075576315s ago: executing program 2 (id=1356): r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0) ioperm(0x3, 0x7, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) 54.075170665s ago: executing program 2 (id=1357): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r3}, 0x10) 53.875102298s ago: executing program 2 (id=1358): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x5faf, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000004c0)={[{@delalloc}, {@stripe={'stripe', 0x3d, 0xc4}}, {@usrjquota}, {@mblk_io_submit}, {@nogrpid}, {@minixdf}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 53.861636608s ago: executing program 33 (id=1358): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x5faf, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000004c0)={[{@delalloc}, {@stripe={'stripe', 0x3d, 0xc4}}, {@usrjquota}, {@mblk_io_submit}, {@nogrpid}, {@minixdf}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 51.779105778s ago: executing program 6 (id=1359): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff96, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) 51.755729788s ago: executing program 6 (id=1402): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000000)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 51.730545259s ago: executing program 6 (id=1403): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESHEX], 0x20) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7d}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x81, 0x633, &(0x7f0000000600)="$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") 51.607818881s ago: executing program 6 (id=1408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) 51.558015191s ago: executing program 6 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = eventfd2(0xce77, 0x800) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 50.349015679s ago: executing program 6 (id=1451): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@empty, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x40, "7a7721427b16add9e6b50c9917d0e0684cb2e6"}}]}, 0x150}}, 0x804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) 50.309907719s ago: executing program 34 (id=1451): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@empty, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x40, "7a7721427b16add9e6b50c9917d0e0684cb2e6"}}]}, 0x150}}, 0x804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) 16.649928771s ago: executing program 5 (id=2436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 16.381014535s ago: executing program 5 (id=2448): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) fchdir(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 16.246241997s ago: executing program 5 (id=2452): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 16.155299238s ago: executing program 5 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) 16.010801811s ago: executing program 5 (id=2459): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 15.623077056s ago: executing program 5 (id=2463): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.611856026s ago: executing program 35 (id=2463): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.051889792s ago: executing program 4 (id=2542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}}, r2, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 11.009297222s ago: executing program 4 (id=2543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r3, 0xffffffffffffffff, 0x0) 10.845023775s ago: executing program 4 (id=2556): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) close_range(r0, 0xffffffffffffffff, 0x0) 10.742333936s ago: executing program 4 (id=2552): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) 10.707432947s ago: executing program 4 (id=2553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x20000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) 6.435672128s ago: executing program 4 (id=2585): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 6.434947088s ago: executing program 36 (id=2585): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.776214834s ago: executing program 7 (id=2697): munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x50}}, 0x0) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:aut'], 0x27) 1.696266356s ago: executing program 7 (id=2699): r0 = io_uring_setup(0x6e1e, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000001a40)={0x0, 0x9, 0x5, 0x100, 0x6, 0x0, [{0x6, 0x5, 0x2, '\x00', 0x400}, {0x4, 0x80000000, 0x6, '\x00', 0x1800}, {0x2, 0x6, 0x401, '\x00', 0xa09}, {0x6, 0x800, 0x9, '\x00', 0x2205}, {0x10, 0x8, 0x8000000000000000, '\x00', 0x1}, {0x4, 0x3, 0x100000001, '\x00', 0xc05}]}) 1.534272208s ago: executing program 7 (id=2703): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.4113629s ago: executing program 1 (id=2708): syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x9, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000b900fdffffff18110000", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x20c}, {&(0x7f00000005c0)="f1c8e38398ab3b", 0x7}, {&(0x7f0000001400)="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", 0x1000}], 0x3}}], 0x1, 0x4000) 1.252918142s ago: executing program 3 (id=2715): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 1.190071333s ago: executing program 3 (id=2718): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xf}, 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.086812235s ago: executing program 3 (id=2721): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="590d55d4f2e3914959c31c"], 0xb) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000010c0)={0x0, 0x6}, 0x8) 1.035130126s ago: executing program 9 (id=2723): r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 1.012976916s ago: executing program 9 (id=2724): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff6e}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 990.124956ms ago: executing program 9 (id=2726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x4, 0x0, &(0x7f0000000040)="2b1c52ac", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x28110, 0xffffffffffffffff, 0x8000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0700000004000000080200002100000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) 931.480117ms ago: executing program 9 (id=2728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 654.041911ms ago: executing program 7 (id=2736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r0) 653.205691ms ago: executing program 8 (id=2746): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) close_range(r0, r1, 0x0) 637.745791ms ago: executing program 8 (id=2737): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38) 576.158822ms ago: executing program 1 (id=2738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x2008}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 575.302952ms ago: executing program 8 (id=2739): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) 541.509962ms ago: executing program 1 (id=2740): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) 540.650222ms ago: executing program 1 (id=2741): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 499.861313ms ago: executing program 8 (id=2742): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x22) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 400.401735ms ago: executing program 8 (id=2743): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 351.494746ms ago: executing program 8 (id=2744): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x80) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4a23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 350.341765ms ago: executing program 1 (id=2745): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0xffa8) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="da", 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 291.404966ms ago: executing program 1 (id=2747): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x3, 0x0) fcntl$setpipe(r2, 0x4, 0xfffffffffffff000) 237.476677ms ago: executing program 7 (id=2748): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) 234.120697ms ago: executing program 3 (id=2749): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") chdir(&(0x7f00000000c0)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 158.208138ms ago: executing program 3 (id=2750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 157.604958ms ago: executing program 7 (id=2751): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 67.559319ms ago: executing program 3 (id=2752): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x20280, 0x0) socket(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 67.19197ms ago: executing program 9 (id=2753): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = dup3(r1, r0, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 0s ago: executing program 9 (id=2754): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ][ T7624] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 90.088844][ T7624] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.1530: corrupted in-inode xattr: invalid ea_ino [ 90.105683][ T7624] EXT4-fs (loop4): Remounting filesystem read-only [ 90.120937][ T7624] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.132549][ T7624] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 90.142800][ T7624] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1530: Corrupt directory, running e2fsck is recommended [ 90.186806][ T7630] pim6reg1: entered promiscuous mode [ 90.192212][ T7630] pim6reg1: entered allmulticast mode [ 90.226649][ T7636] sd 0:0:1:0: device reset [ 90.274830][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1539'. [ 90.297054][ T7646] bond0: (slave bond_slave_1): Releasing backup interface [ 90.356921][ T7652] geneve0: entered allmulticast mode [ 90.459960][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 90.537453][ T7639] net_ratelimit: 24 callbacks suppressed [ 90.537470][ T7639] Set syz1 is full, maxelem 65536 reached [ 90.563135][ T7665] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1547'. [ 90.572228][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'. [ 90.593589][ T7665] vlan0: entered allmulticast mode [ 90.598933][ T7665] syz_tun: entered allmulticast mode [ 90.612201][ T7668] loop3: detected capacity change from 0 to 1024 [ 90.623213][ T7668] EXT4-fs: Ignoring removed nobh option [ 90.628837][ T7668] EXT4-fs: Ignoring removed nobh option [ 90.643812][ T7668] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 90.653735][ T7668] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 90.714428][ T7681] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 90.732726][ T7681] batman_adv: batadv0: Adding interface: team0 [ 90.739044][ T7681] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.764347][ T7681] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 90.827943][ T7687] lo speed is unknown, defaulting to 1000 [ 90.977497][ T7699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 91.060020][ T7703] veth1_to_bond: entered allmulticast mode [ 91.066655][ T7703] veth1_to_bond: left allmulticast mode [ 91.133109][ T7710] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1563'. [ 91.162508][ T7712] siw: device registration error -23 [ 91.190162][ T7717] serio: Serial port ptm0 [ 91.261584][ T7722] loop4: detected capacity change from 0 to 2048 [ 91.327021][ T7734] syzkaller0: entered promiscuous mode [ 91.332676][ T7734] syzkaller0: entered allmulticast mode [ 91.347351][ T7722] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1570: bg 0: block 234: padding at end of block bitmap is not set [ 91.361983][ T7722] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1302 with error 117 [ 91.374573][ T7722] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.374573][ T7722] [ 91.623345][ T7769] loop4: detected capacity change from 0 to 512 [ 91.677097][ T7769] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 91.695448][ T7769] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1580: bad orphan inode 15 [ 91.813843][ T7769] ext4_test_bit(bit=14, block=18) = 1 [ 91.819281][ T7769] is_bad_inode(inode)=0 [ 91.823553][ T7769] NEXT_ORPHAN(inode)=1023 [ 91.827896][ T7769] max_ino=32 [ 91.831295][ T7769] i_nlink=0 [ 91.846927][ T7769] ext2 filesystem being mounted at /396/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 91.916386][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.926469][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.997274][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.004812][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.012331][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.020644][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.028104][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.035621][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.043033][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.050448][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.057891][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.065326][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.072741][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.080126][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.087644][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.095108][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.104893][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.112414][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.119827][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.127307][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.134765][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.142172][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.149578][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.157008][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.164532][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.171949][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.179409][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.186825][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.194232][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.201656][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.209719][ T1039] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 92.242877][ T7843] loop5: detected capacity change from 0 to 128 [ 92.261242][ T7843] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.413891][ T7858] Falling back ldisc for ttyS3. [ 92.461968][ T7879] netlink: 'syz.7.1599': attribute type 39 has an invalid length. [ 92.475606][ T7881] random: crng reseeded on system resumption [ 92.487225][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 92.487267][ T29] audit: type=1326 audit(1752050810.399:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.1.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f558f77e929 code=0x0 [ 92.547457][ T7883] loop5: detected capacity change from 0 to 128 [ 92.597999][ T7883] syz.5.1601: attempt to access beyond end of device [ 92.597999][ T7883] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 92.701062][ T7897] bridge_slave_1: left allmulticast mode [ 92.706813][ T7897] bridge_slave_1: left promiscuous mode [ 92.712552][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.722388][ T7897] bridge_slave_0: left allmulticast mode [ 92.728098][ T7897] bridge_slave_0: left promiscuous mode [ 92.733968][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.815255][ T7900] netlink: 'syz.5.1608': attribute type 4 has an invalid length. [ 93.036343][ T29] audit: type=1326 audit(1752050810.949:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.059884][ T29] audit: type=1326 audit(1752050810.949:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.085037][ T29] audit: type=1326 audit(1752050810.999:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.108527][ T29] audit: type=1326 audit(1752050810.999:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.132094][ T29] audit: type=1326 audit(1752050810.999:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.179733][ T29] audit: type=1326 audit(1752050811.029:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.203421][ T29] audit: type=1326 audit(1752050811.029:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.226953][ T29] audit: type=1326 audit(1752050811.029:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.250366][ T29] audit: type=1326 audit(1752050811.029:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 93.377916][ T7952] loop3: detected capacity change from 0 to 1024 [ 93.396024][ T7952] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1641: Allocating blocks 385-513 which overlap fs metadata [ 93.429496][ T7952] EXT4-fs (loop3): pa ffff888106a3c2a0: logic 16, phys. 129, len 24 [ 93.430923][ T7964] can0: slcan on ttyS3. [ 93.437548][ T7952] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 93.471083][ T7963] can0 (unregistered): slcan off ttyS3. [ 93.505694][ T7966] loop5: detected capacity change from 0 to 8192 [ 93.517341][ T7971] tipc: New replicast peer: 255.255.255.255 [ 93.524032][ T7971] tipc: Enabled bearer , priority 10 [ 93.532077][ T7971] tipc: Disabling bearer [ 93.592524][ T7976] lo speed is unknown, defaulting to 1000 [ 93.859516][ T8007] loop5: detected capacity change from 0 to 512 [ 93.890105][ T8007] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.914165][ T8007] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1652: corrupted inode contents [ 93.926788][ T8007] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.1652: mark_inode_dirty error [ 93.940340][ T8007] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1652: corrupted inode contents [ 93.952878][ T8007] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1652: mark_inode_dirty error [ 93.976578][ T8007] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1652: corrupted inode contents [ 93.989984][ T8007] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.1652: mark_inode_dirty error [ 94.003914][ T8007] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1652: corrupted inode contents [ 94.194506][ T8037] vlan0: entered allmulticast mode [ 94.199703][ T8037] dummy0: entered allmulticast mode [ 94.268633][ T8043] loop4: detected capacity change from 0 to 1024 [ 94.276462][ T8043] EXT4-fs: quotafile must be on filesystem root [ 94.284579][ T8045] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 94.346718][ T8060] __nla_validate_parse: 4 callbacks suppressed [ 94.346732][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'. [ 94.405428][ T8069] macvtap0: entered promiscuous mode [ 94.412471][ T8069] macvtap0: left promiscuous mode [ 94.615835][ T8092] loop7: detected capacity change from 0 to 512 [ 94.637419][ T8092] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.651321][ T8092] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 94.696570][ T8097] lo speed is unknown, defaulting to 1000 [ 94.965182][ T8134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8134 comm=syz.1.1706 [ 95.006984][ T8138] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1707'. [ 95.046142][ T8143] loop4: detected capacity change from 0 to 512 [ 95.064642][ T8143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 95.083774][ T8143] System zones: 1-12 [ 95.090841][ T8143] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.1708: corrupted in-inode xattr: invalid ea_ino [ 95.105404][ T8143] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1708: couldn't read orphan inode 15 (err -117) [ 95.168529][ T8153] loop3: detected capacity change from 0 to 4096 [ 95.180221][ T8155] wireguard0: entered promiscuous mode [ 95.188121][ T8155] wireguard0: entered allmulticast mode [ 95.232869][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 95.241799][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 95.262492][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 95.276327][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 95.285403][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 95.389525][ T8177] $Hÿ: renamed from bond0 (while UP) [ 95.397134][ T8177] $Hÿ: entered promiscuous mode [ 95.402297][ T8177] bond_slave_0: entered promiscuous mode [ 95.488965][ T8186] tipc: Enabled bearer , priority 0 [ 95.504683][ T8186] tipc: Disabling bearer [ 95.512018][ T8190] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1730'. [ 95.648325][ T8207] loop7: detected capacity change from 0 to 1024 [ 95.656222][ T8207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.685585][ T8207] EXT4-fs mount: 46 callbacks suppressed [ 95.685607][ T8207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.712454][ T8212] loop5: detected capacity change from 0 to 512 [ 95.719448][ T8212] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 95.771223][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.829268][ T8222] wg2: entered promiscuous mode [ 95.834242][ T8222] wg2: entered allmulticast mode [ 95.855450][ T8226] loop4: detected capacity change from 0 to 1024 [ 95.863013][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1745'. [ 95.877409][ T8226] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 95.900450][ T8226] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.930057][ T8226] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 95.971627][ T8226] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.983795][ T8226] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1743: Inode bitmap for bg 0 marked uninitialized [ 95.997558][ T8226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.019874][ T8226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.163914][ T8258] netlink: zone id is out of range [ 96.175705][ T8258] netlink: zone id is out of range [ 96.187953][ T8258] netlink: zone id is out of range [ 96.193212][ T8258] netlink: zone id is out of range [ 96.218645][ T8258] netlink: zone id is out of range [ 96.245630][ T8258] netlink: zone id is out of range [ 96.271314][ T8258] netlink: zone id is out of range [ 96.276513][ T8258] netlink: zone id is out of range [ 96.282621][ T8258] netlink: zone id is out of range [ 96.291840][ T8258] netlink: zone id is out of range [ 96.371666][ T8251] lo speed is unknown, defaulting to 1000 [ 96.418612][ T8283] loop7: detected capacity change from 0 to 1024 [ 96.431114][ T8283] EXT4-fs: Ignoring removed i_version option [ 96.439155][ T8283] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.445737][ T8283] EXT4-fs: Ignoring removed nobh option [ 96.451443][ T8283] EXT4-fs: Ignoring removed bh option [ 96.484447][ T8283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.589116][ T8296] bond2: entered promiscuous mode [ 96.594280][ T8296] bond2: entered allmulticast mode [ 96.599775][ T8296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.608564][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.643235][ T8296] bond2 (unregistering): Released all slaves [ 96.765735][ T8306] hub 8-0:1.0: USB hub found [ 96.770803][ T8306] hub 8-0:1.0: 8 ports detected [ 96.925074][ T8330] loop7: detected capacity change from 0 to 1024 [ 96.932300][ T8337] loop5: detected capacity change from 0 to 128 [ 96.939340][ T8330] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 96.949774][ T8330] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.974566][ T8330] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 96.989190][ T8330] EXT4-fs (loop7): orphan cleanup on readonly fs [ 97.003221][ T8330] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.1781: Inode bitmap for bg 0 marked uninitialized [ 97.052989][ T8330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.079270][ T8330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.124287][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1786'. [ 97.125551][ T8347] loop1: detected capacity change from 0 to 128 [ 97.183863][ T8347] +}[@: attempt to access beyond end of device [ 97.183863][ T8347] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 97.465486][ T8355] tipc: Enabled bearer , priority 0 [ 97.520979][ T8352] tipc: Resetting bearer [ 97.537715][ T8352] tipc: Disabling bearer [ 97.661585][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.669167][ T8362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.735862][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.743380][ T8362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.261118][ T8392] loop3: detected capacity change from 0 to 1024 [ 98.267664][ T8396] loop5: detected capacity change from 0 to 512 [ 98.279017][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 98.279080][ T29] audit: type=1326 audit(1752050816.199:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.308962][ T29] audit: type=1326 audit(1752050816.199:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.332548][ T29] audit: type=1326 audit(1752050816.199:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.355948][ T29] audit: type=1326 audit(1752050816.199:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.385211][ T29] audit: type=1326 audit(1752050816.199:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.386281][ T8392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.408690][ T29] audit: type=1326 audit(1752050816.199:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.439577][ T8392] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.444176][ T29] audit: type=1326 audit(1752050816.199:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.477970][ T29] audit: type=1326 audit(1752050816.199:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.501411][ T29] audit: type=1326 audit(1752050816.199:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.524823][ T29] audit: type=1326 audit(1752050816.199:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558f77e929 code=0x7ffc0000 [ 98.566086][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.577940][ T8396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.590871][ T8396] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.751361][ T4743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.034176][ T8451] sd 0:0:1:0: device reset [ 99.110139][ T8463] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.191813][ T8470] syzkaller1: entered promiscuous mode [ 99.197342][ T8470] syzkaller1: entered allmulticast mode [ 99.213082][ T8463] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.257557][ T8474] loop1: detected capacity change from 0 to 128 [ 99.265372][ T8474] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.277732][ T8474] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.312846][ T8463] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.323687][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.347223][ T8481] lo speed is unknown, defaulting to 1000 [ 99.378444][ T8463] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.445532][ T8492] loop4: detected capacity change from 0 to 2048 [ 99.462511][ T8463] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.474596][ T8463] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.487751][ T8492] loop4: p2 p3 p7 [ 99.519186][ T8502] __nla_validate_parse: 3 callbacks suppressed [ 99.519200][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'. [ 99.525539][ T8463] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.551629][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 99.563904][ T8463] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.580098][ T8506] loop1: detected capacity change from 0 to 128 [ 99.588088][ T8506] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.600571][ T8506] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.646502][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.655500][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.682822][ T8512] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000a [ 99.741047][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1859'. [ 99.750021][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1859'. [ 99.951082][ T8552] loop3: detected capacity change from 0 to 512 [ 99.962665][ T8552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.975261][ T8552] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.098922][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.122691][ T8567] netlink: 'syz.3.1877': attribute type 4 has an invalid length. [ 100.158782][ T8567] netlink: 'syz.3.1877': attribute type 4 has an invalid length. [ 100.272354][ T8564] loop7: detected capacity change from 0 to 128 [ 100.284846][ T8564] EXT4-fs: Ignoring removed nobh option [ 100.297707][ T8575] loop9: detected capacity change from 0 to 7 [ 100.297939][ T8564] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.304428][ T8575] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.324371][ T8575] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.332329][ T8575] loop9: unable to read partition table [ 100.338322][ T8575] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 100.338322][ T8575] ) failed (rc=-5) [ 100.338539][ T8564] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.551928][ T7404] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.628717][ T8586] loop5: detected capacity change from 0 to 1024 [ 100.635802][ T8586] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 100.646460][ T8586] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.657468][ T8586] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 100.666060][ T8586] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.672826][ T8586] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.1887: Inode bitmap for bg 0 marked uninitialized [ 100.701213][ T8586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.729013][ T8586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.116990][ T8604] loop3: detected capacity change from 0 to 1024 [ 101.127030][ T8604] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 101.147136][ T8604] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 101.263083][ T8612] lo speed is unknown, defaulting to 1000 [ 101.296325][ T8612] loop3: detected capacity change from 0 to 256 [ 101.303091][ T8612] FAT-fs (loop3): bogus number of FAT sectors [ 101.309255][ T8612] FAT-fs (loop3): Can't find a valid FAT filesystem [ 101.381873][ T8620] sit0: left promiscuous mode [ 101.408772][ T8617] loop3: detected capacity change from 0 to 1024 [ 101.416221][ T8617] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 101.435267][ T8617] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.453623][ T8617] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 101.455822][ T8620] sit0: entered promiscuous mode [ 101.468362][ T8617] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.480892][ T8617] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1900: Inode bitmap for bg 0 marked uninitialized [ 101.494872][ T8617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.507969][ T8617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.543609][ T8624] lo speed is unknown, defaulting to 1000 [ 101.648653][ T8641] wg2: left promiscuous mode [ 101.653456][ T8641] wg2: left allmulticast mode [ 101.666561][ T8641] wg2: entered promiscuous mode [ 101.671511][ T8641] wg2: entered allmulticast mode [ 101.692050][ T8645] lo speed is unknown, defaulting to 1000 [ 101.801357][ T8659] loop7: detected capacity change from 0 to 512 [ 101.821488][ T8659] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.852770][ T8659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.884534][ T8659] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.898027][ T8667] net_ratelimit: 1 callbacks suppressed [ 101.898065][ T8667] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.927067][ T8659] ip6gre2: entered allmulticast mode [ 101.973180][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.980180][ T8673] loop1: detected capacity change from 0 to 1024 [ 101.988751][ T8671] loop3: detected capacity change from 0 to 1024 [ 102.003258][ T8671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.003854][ T8673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.016617][ T8671] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.070841][ T8671] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 102.089944][ T8671] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 102.102467][ T8671] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.102467][ T8671] [ 102.112187][ T8671] EXT4-fs (loop3): Total free blocks count 0 [ 102.113263][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 102.118165][ T8671] EXT4-fs (loop3): Free/Dirty block details [ 102.129715][ T3386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3386 comm=kworker/0:3 [ 102.130237][ T8671] EXT4-fs (loop3): free_blocks=4293918720 [ 102.130301][ T8671] EXT4-fs (loop3): dirty_blocks=80 [ 102.150401][ T8673] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 102.153967][ T8671] EXT4-fs (loop3): Block reservation details [ 102.163724][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 102.167922][ T8671] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 102.191312][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 102.198026][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 102.204638][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 102.211155][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 102.217705][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 102.224468][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 102.231028][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 102.240512][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.261080][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.407059][ T8707] loop1: detected capacity change from 0 to 2048 [ 102.430762][ T8707] ext4: Unknown parameter 'noacl' [ 102.467501][ T8710] vhci_hcd: invalid port number 96 [ 102.472860][ T8710] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 102.690872][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1947'. [ 102.703148][ T8732] veth0_to_bond (unregistering): left allmulticast mode [ 102.710211][ T8732] veth0_to_bond (unregistering): left promiscuous mode [ 102.717233][ T8732] bridge1: port 1(veth0_to_bond) entered disabled state [ 102.732457][ T8732] bond0: (slave bond_slave_0): Releasing backup interface [ 102.787964][ T8738] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1950'. [ 102.797802][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1950'. [ 102.856212][ T8746] loop7: detected capacity change from 0 to 2048 [ 102.882301][ T8746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.933144][ T8756] $Hÿ: renamed from bond0 (while UP) [ 102.940210][ T8756] $Hÿ: entered promiscuous mode [ 102.945287][ T8756] bond_slave_0: entered promiscuous mode [ 102.951088][ T8756] bond_slave_1: entered promiscuous mode [ 102.999856][ T8759] netlink: 'syz.5.1959': attribute type 21 has an invalid length. [ 103.018628][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.083442][ T8775] loop1: detected capacity change from 0 to 1024 [ 103.103119][ T8775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.132663][ T8779] loop7: detected capacity change from 0 to 1024 [ 103.139514][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.139705][ T8779] EXT4-fs: Ignoring removed orlov option [ 103.164324][ T8779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.228401][ T8788] loop3: detected capacity change from 0 to 256 [ 103.249420][ T8787] loop4: detected capacity change from 0 to 2048 [ 103.251372][ T8788] FAT-fs (loop3): bogus number of FAT sectors [ 103.261987][ T8788] FAT-fs (loop3): Can't find a valid FAT filesystem [ 103.279767][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.292621][ T8787] EXT4-fs (loop4): failed to initialize system zone (-117) [ 103.313045][ T8795] tls_set_device_offload_rx: netdev not found [ 103.320329][ T8787] EXT4-fs (loop4): mount failed [ 103.389448][ T8803] loop1: detected capacity change from 0 to 2048 [ 103.440239][ T8803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.476535][ T8813] loop7: detected capacity change from 0 to 1024 [ 103.485503][ T3386] IPVS: starting estimator thread 0... [ 103.495730][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.511067][ T8813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.519740][ T8820] loop1: detected capacity change from 0 to 2048 [ 103.538648][ T8813] EXT4-fs (loop7): shut down requested (0) [ 103.549932][ T8822] loop4: detected capacity change from 0 to 512 [ 103.557751][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.558071][ T8820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 103.579570][ T8822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.592325][ T8816] IPVS: using max 4320 ests per chain, 216000 per kthread [ 103.600183][ T8822] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.614031][ T8822] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1983: corrupted inode contents [ 103.626229][ T8822] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1983: mark_inode_dirty error [ 103.639798][ T8828] loop7: detected capacity change from 0 to 2048 [ 103.661153][ T8822] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1983: corrupted inode contents [ 103.674473][ T8828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.680813][ T8822] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1983: mark_inode_dirty error [ 103.698960][ T8828] netlink: 8 bytes leftover after parsing attributes in process `'. [ 103.709537][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.724619][ T8829] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1462 with error 28 [ 103.737181][ T8829] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.737181][ T8829] [ 103.746865][ T8829] EXT4-fs (loop1): Total free blocks count 0 [ 103.746910][ T8829] EXT4-fs (loop1): Free/Dirty block details [ 103.746922][ T8829] EXT4-fs (loop1): free_blocks=2415919104 [ 103.746934][ T8829] EXT4-fs (loop1): dirty_blocks=1472 [ 103.746944][ T8829] EXT4-fs (loop1): Block reservation details [ 103.747006][ T8829] EXT4-fs (loop1): i_reserved_data_blocks=92 [ 103.747123][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 103.747149][ T29] audit: type=1400 audit(1752050821.659:2193): avc: denied { rmdir } for pid=8821 comm="syz.4.1983" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.747210][ T29] audit: type=1400 audit(1752050821.659:2194): avc: denied { rename } for pid=8821 comm="syz.4.1983" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.747236][ T29] audit: type=1400 audit(1752050821.659:2195): avc: denied { read write } for pid=8821 comm="syz.4.1983" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 103.747370][ T29] audit: type=1400 audit(1752050821.659:2196): avc: denied { open } for pid=8821 comm="syz.4.1983" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 103.777744][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.889825][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.905875][ T6294] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 104.124467][ T8861] 9pnet: p9_errstr2errno: server reported unknown error [ 104.273037][ T29] audit: type=1326 audit(1752050822.189:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fa65e929 code=0x7ffc0000 [ 104.274078][ T8878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.303771][ T8878] IPv6: NLM_F_CREATE should be set when creating new route [ 104.311893][ T29] audit: type=1326 audit(1752050822.229:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa8fa65e929 code=0x7ffc0000 [ 104.335466][ T29] audit: type=1326 audit(1752050822.229:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fa65e929 code=0x7ffc0000 [ 104.358983][ T29] audit: type=1326 audit(1752050822.229:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa8fa65e929 code=0x7ffc0000 [ 104.382328][ T29] audit: type=1326 audit(1752050822.229:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fa65e929 code=0x7ffc0000 [ 104.405866][ T29] audit: type=1326 audit(1752050822.229:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fa65e929 code=0x7ffc0000 [ 104.496372][ T8884] loop1: detected capacity change from 0 to 1024 [ 104.506991][ T8884] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 104.512056][ T8887] loop7: detected capacity change from 0 to 1024 [ 104.517165][ T8884] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 104.523356][ T8887] EXT4-fs: Ignoring removed orlov option [ 104.534114][ T8884] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.2005: iget: special inode unallocated [ 104.550528][ T8887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.552068][ T8884] EXT4-fs (loop1): no journal found [ 104.632713][ T8893] bridge: RTM_NEWNEIGH with invalid ether address [ 104.722812][ T8901] loop1: detected capacity change from 0 to 512 [ 104.729526][ T8901] EXT4-fs: inline encryption not supported [ 104.737450][ T8901] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.747244][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.150269][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.159007][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.439963][ T9024] sd 0:0:1:0: device reset [ 105.526915][ T9046] sd 0:0:1:0: device reset [ 105.942355][ T9130] loop1: detected capacity change from 0 to 1024 [ 105.951744][ T9130] EXT4-fs: Ignoring removed nobh option [ 105.957464][ T9130] EXT4-fs: Ignoring removed bh option [ 105.979105][ T9130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.993698][ T9130] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2047: Allocating blocks 385-513 which overlap fs metadata [ 106.012998][ T9130] EXT4-fs (loop1): pa ffff888106a1b690: logic 16, phys. 129, len 24 [ 106.021199][ T9130] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 106.039682][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.103565][ T9142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.110819][ T9142] IPv6: NLM_F_CREATE should be set when creating new route [ 106.126447][ T9146] loop4: detected capacity change from 0 to 1024 [ 106.144257][ T9148] loop3: detected capacity change from 0 to 512 [ 106.152351][ T9146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.167645][ T9146] EXT4-fs (loop4): shut down requested (0) [ 106.175273][ T9148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.191551][ T9148] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.204434][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.221949][ T9148] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2058: corrupted inode contents [ 106.235358][ T9148] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2058: mark_inode_dirty error [ 106.247017][ T9148] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2058: corrupted inode contents [ 106.259647][ T9148] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2058: mark_inode_dirty error [ 106.304115][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.346453][ T9165] random: crng reseeded on system resumption [ 106.437154][ T9173] loop5: detected capacity change from 0 to 256 [ 106.461503][ T9173] FAT-fs (loop5): bogus number of FAT sectors [ 106.467625][ T9173] FAT-fs (loop5): Can't find a valid FAT filesystem [ 106.534634][ T9182] bridge: RTM_NEWNEIGH with invalid ether address [ 106.616940][ T9191] loop7: detected capacity change from 0 to 512 [ 106.639111][ T9191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.663244][ T9191] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.684130][ T9197] netlink: 'syz.5.2076': attribute type 10 has an invalid length. [ 106.686988][ T9191] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.2073: corrupted inode contents [ 106.703918][ T9197] batman_adv: batadv0: Adding interface: team0 [ 106.710118][ T9197] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.735476][ T9197] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 106.747658][ T9191] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.2073: mark_inode_dirty error [ 106.764145][ T9191] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.2073: corrupted inode contents [ 106.776271][ T9191] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2073: mark_inode_dirty error [ 106.828217][ T9206] loop3: detected capacity change from 0 to 1024 [ 106.836057][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.842204][ T9202] 9pnet: p9_errstr2errno: server reported unknown error [ 106.846570][ T9206] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 106.863212][ T9206] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.873728][ T9206] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.2079: iget: special inode unallocated [ 106.886555][ T9206] EXT4-fs (loop3): no journal found [ 106.903169][ T9204] loop1: detected capacity change from 0 to 256 [ 106.910914][ T9204] FAT-fs (loop1): bogus number of FAT sectors [ 106.917000][ T9204] FAT-fs (loop1): Can't find a valid FAT filesystem [ 107.014416][ T9218] loop1: detected capacity change from 0 to 1024 [ 107.021317][ T9218] EXT4-fs: Ignoring removed nobh option [ 107.026900][ T9218] EXT4-fs: Ignoring removed bh option [ 107.036021][ T9216] loop3: detected capacity change from 0 to 8192 [ 107.044776][ T9218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.075027][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.095609][ T9223] loop3: detected capacity change from 0 to 1024 [ 107.111201][ T9223] EXT4-fs: Ignoring removed orlov option [ 107.122730][ T9223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.151455][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'. [ 107.221741][ T9234] netlink: 'syz.1.2088': attribute type 10 has an invalid length. [ 107.237475][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.294399][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 107.311467][ T9243] loop1: detected capacity change from 0 to 512 [ 107.342364][ T9243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.355588][ T9243] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.368766][ T9243] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2093: corrupted inode contents [ 107.384892][ T9243] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2093: mark_inode_dirty error [ 107.412907][ T9251] geneve0: entered allmulticast mode [ 107.441832][ T9243] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2093: corrupted inode contents [ 107.491456][ T9243] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2093: mark_inode_dirty error [ 107.522067][ T9266] loop4: detected capacity change from 0 to 512 [ 107.535763][ T9261] random: crng reseeded on system resumption [ 107.536138][ T9266] EXT4-fs: inline encryption not supported [ 107.559907][ T9266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.584298][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.628757][ T9278] loop1: detected capacity change from 0 to 1024 [ 107.641292][ T9278] EXT4-fs: Ignoring removed orlov option [ 107.662090][ T9278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.709945][ T9296] netlink: 'syz.7.2106': attribute type 10 has an invalid length. [ 107.759396][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.957452][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 108.254707][ T9326] loop7: detected capacity change from 0 to 512 [ 108.261355][ T9326] EXT4-fs: inline encryption not supported [ 108.268935][ T9326] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.378880][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2124'. [ 108.503966][ T9340] loop7: detected capacity change from 0 to 2048 [ 108.523543][ T9340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.538206][ T3479] IPVS: starting estimator thread 0... [ 108.552391][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.640862][ T9343] IPVS: using max 2592 ests per chain, 129600 per kthread [ 108.848238][ T9349] loop4: detected capacity change from 0 to 1024 [ 108.859813][ T9349] EXT4-fs: Ignoring removed orlov option [ 108.861161][ T9355] syz_tun: entered allmulticast mode [ 108.877632][ T9354] syz_tun: left allmulticast mode [ 108.914662][ T9364] random: crng reseeded on system resumption [ 108.934070][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 108.934084][ T29] audit: type=1326 audit(1752050826.849:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.7.2133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c2e20e929 code=0x0 [ 108.978944][ T9367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.011359][ T9372] loop1: detected capacity change from 0 to 1024 [ 109.023422][ T9367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.036534][ T9379] loop3: detected capacity change from 0 to 128 [ 109.049955][ T29] audit: type=1326 audit(1752050826.969:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.073407][ T29] audit: type=1326 audit(1752050826.969:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.096961][ T29] audit: type=1326 audit(1752050826.969:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.120408][ T29] audit: type=1326 audit(1752050826.969:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.143580][ T29] audit: type=1326 audit(1752050826.969:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.166552][ T29] audit: type=1326 audit(1752050826.969:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.189703][ T29] audit: type=1326 audit(1752050826.969:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.212637][ T29] audit: type=1326 audit(1752050826.969:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.235691][ T29] audit: type=1326 audit(1752050826.969:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a1fbe929 code=0x7ffc0000 [ 109.291983][ T9379] syz.3.2140: attempt to access beyond end of device [ 109.291983][ T9379] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 109.312897][ T9383] loop4: detected capacity change from 0 to 512 [ 109.322424][ T9383] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.618786][ T9406] loop5: detected capacity change from 0 to 2048 [ 109.681516][ T9411] loop4: detected capacity change from 0 to 512 [ 109.704168][ T9411] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.2164: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 109.730673][ T9411] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.2164: Bad quota inode: 3, type: 0 [ 109.742346][ T9411] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 109.778110][ T9411] EXT4-fs (loop4): mount failed [ 109.800135][ T9407] lo speed is unknown, defaulting to 1000 [ 109.825756][ T9432] loop3: detected capacity change from 0 to 512 [ 109.864620][ T9407] chnl_net:caif_netlink_parms(): no params data found [ 109.895094][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.902173][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.909290][ T9407] bridge_slave_0: entered allmulticast mode [ 109.915942][ T9407] bridge_slave_0: entered promiscuous mode [ 109.922795][ T9407] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.929917][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.937012][ T9407] bridge_slave_1: entered allmulticast mode [ 109.943286][ T9407] bridge_slave_1: entered promiscuous mode [ 109.958535][ T9407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.968763][ T9407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.986168][ T9407] team0: Port device team_slave_0 added [ 109.992538][ T9407] team0: Port device team_slave_1 added [ 110.007064][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.014033][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.040146][ T9407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.051350][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.058354][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.084295][ T9407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.108709][ T9407] hsr_slave_0: entered promiscuous mode [ 110.114690][ T9407] hsr_slave_1: entered promiscuous mode [ 110.120442][ T9407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.128012][ T9407] Cannot create hsr debugfs directory [ 110.173020][ T9407] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.182993][ T9407] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.232061][ T9407] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.241950][ T9407] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.281969][ T9407] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.291757][ T9407] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.341994][ T9407] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.351875][ T9407] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.393726][ T9407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.402382][ T9407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.410951][ T9407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.419817][ T9407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.458647][ T9450] loop3: detected capacity change from 0 to 1024 [ 110.462982][ T9407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.480183][ T9407] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.495343][ T9450] EXT4-fs: Ignoring removed orlov option [ 110.505304][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.512481][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.523487][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.530565][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.550625][ T9454] vhci_hcd: invalid port number 96 [ 110.556024][ T9454] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 110.563924][ T9407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.574392][ T9407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.657026][ T9465] loop3: detected capacity change from 0 to 512 [ 110.692272][ T9465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.2176: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 110.715064][ T9407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.733690][ T9465] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.2176: Bad quota inode: 3, type: 0 [ 110.748066][ T9476] tipc: New replicast peer: 0.0.255.255 [ 110.754007][ T9476] tipc: Enabled bearer , priority 10 [ 110.796699][ T9465] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 110.826206][ T9465] EXT4-fs (loop3): mount failed [ 110.870688][ T9489] random: crng reseeded on system resumption [ 110.918586][ T9407] veth0_vlan: entered promiscuous mode [ 110.934841][ T9407] veth1_vlan: entered promiscuous mode [ 110.969004][ T9496] loop5: detected capacity change from 0 to 164 [ 110.980348][ T9407] veth0_macvtap: entered promiscuous mode [ 110.988747][ T9496] iso9660: Unknown parameter 'ÿÿÿÿ' [ 110.996326][ T9407] veth1_macvtap: entered promiscuous mode [ 111.022981][ T9407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.056546][ T9407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.073272][ T9407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.082267][ T9407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.091009][ T9407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.099707][ T9407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.156098][ T9506] loop1: detected capacity change from 0 to 1024 [ 111.489309][ T9520] loop7: detected capacity change from 0 to 512 [ 111.496107][ T9520] EXT4-fs: dax option not supported [ 111.529308][ T9519] vhci_hcd: invalid port number 96 [ 111.534525][ T9519] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 111.726723][ T9539] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2191'. [ 111.736406][ T9539] hsr_slave_1: left promiscuous mode [ 111.761732][ T9543] pim6reg1: entered promiscuous mode [ 111.767068][ T9543] pim6reg1: entered allmulticast mode [ 111.788342][ T9545] loop3: detected capacity change from 0 to 512 [ 111.795038][ T9545] EXT4-fs: dax option not supported [ 111.825157][ T9548] loop4: detected capacity change from 0 to 512 [ 111.831813][ T9548] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.838713][ T9548] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 111.870794][ T3386] tipc: Node number set to 2558576023 [ 111.898705][ T9555] loop9: detected capacity change from 0 to 7 [ 111.905856][ T9555] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.913851][ T9555] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.921727][ T9555] loop9: unable to read partition table [ 111.930883][ T9555] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 111.930883][ T9555] ) failed (rc=-5) [ 111.988028][ T9564] random: crng reseeded on system resumption [ 112.010956][ T9566] lo speed is unknown, defaulting to 1000 [ 112.173833][ T9577] vhci_hcd: invalid port number 96 [ 112.178969][ T9577] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 112.346601][ T9580] pim6reg1: entered promiscuous mode [ 112.348372][ T9584] loop5: detected capacity change from 0 to 512 [ 112.351961][ T9580] pim6reg1: entered allmulticast mode [ 112.358626][ T9584] EXT4-fs: dax option not supported [ 112.402591][ T9588] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2212'. [ 112.412488][ T9588] hsr_slave_0: left promiscuous mode [ 112.418265][ T9588] hsr_slave_1: left promiscuous mode [ 112.551756][ T9601] loop5: detected capacity change from 0 to 512 [ 112.566595][ T9600] lo speed is unknown, defaulting to 1000 [ 112.584094][ T9601] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.2218: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 112.584276][ T9604] loop9: detected capacity change from 0 to 7 [ 112.611579][ T9604] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.629666][ T9601] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.2218: Bad quota inode: 3, type: 0 [ 112.630956][ T9604] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.642907][ T9601] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 112.648521][ T9604] loop9: unable to read partition table [ 112.663865][ T9601] EXT4-fs (loop5): mount failed [ 112.668907][ T9604] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 112.668907][ T9604] ) failed (rc=-5) [ 112.810834][ T9613] vhci_hcd: invalid port number 96 [ 112.816004][ T9613] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 112.839512][ T9618] random: crng reseeded on system resumption [ 112.845636][ T9616] loop7: detected capacity change from 0 to 1024 [ 112.879274][ T9619] lo speed is unknown, defaulting to 1000 [ 113.132762][ T9640] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2233'. [ 113.142494][ T9640] hsr_slave_0: left promiscuous mode [ 113.148267][ T9640] hsr_slave_1: left promiscuous mode [ 113.341055][ T9652] lo speed is unknown, defaulting to 1000 [ 113.708053][ T9669] vlan2: entered allmulticast mode [ 113.713479][ T9669] dummy0: entered allmulticast mode [ 113.732744][ T9670] random: crng reseeded on system resumption [ 113.749794][ T9672] loop4: detected capacity change from 0 to 512 [ 113.762035][ T9672] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.832978][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.840175][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.851800][ T9684] bridge0: entered allmulticast mode [ 113.864602][ T9684] bridge_slave_1: left allmulticast mode [ 113.870276][ T9684] bridge_slave_1: left promiscuous mode [ 113.875934][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.883624][ T9684] bridge_slave_0: left allmulticast mode [ 113.889368][ T9684] bridge_slave_0: left promiscuous mode [ 113.895013][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.945890][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 113.945905][ T29] audit: type=1326 audit(1752050831.859:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 113.980342][ T9689] loop5: detected capacity change from 0 to 1024 [ 113.986909][ T29] audit: type=1326 audit(1752050831.899:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 114.001643][ T9689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.010314][ T29] audit: type=1326 audit(1752050831.899:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 114.040269][ T29] audit: type=1326 audit(1752050831.899:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 114.063770][ T29] audit: type=1326 audit(1752050831.899:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6f101e929 code=0x7ffc0000 [ 114.087151][ T29] audit: type=1326 audit(1752050831.899:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6f101e963 code=0x7ffc0000 [ 114.110408][ T29] audit: type=1326 audit(1752050831.899:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa6f101d3df code=0x7ffc0000 [ 114.133623][ T29] audit: type=1326 audit(1752050831.899:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa6f101e9b7 code=0x7ffc0000 [ 114.157159][ T29] audit: type=1326 audit(1752050831.899:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6f101d290 code=0x7ffc0000 [ 114.180553][ T29] audit: type=1326 audit(1752050831.899:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.5.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa6f101e52b code=0x7ffc0000 [ 114.245382][ T9695] lo speed is unknown, defaulting to 1000 [ 114.521835][ T9707] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 114.568792][ T9711] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2260'. [ 114.616980][ T9714] vlan0: entered allmulticast mode [ 114.801514][ T9731] loop3: detected capacity change from 0 to 1024 [ 114.841433][ T9731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.872622][ T9739] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 114.901771][ T9744] random: crng reseeded on system resumption [ 114.927437][ T9747] loop3: detected capacity change from 0 to 2048 [ 115.171947][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2292'. [ 115.182789][ T9761] vlan2: entered allmulticast mode [ 115.249207][ T9767] bridge0: entered allmulticast mode [ 115.263036][ T9769] loop3: detected capacity change from 0 to 512 [ 115.269763][ T9769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.280651][ T9769] EXT4-fs (loop3): 1 truncate cleaned up [ 115.424956][ T9784] loop1: detected capacity change from 0 to 1024 [ 115.443567][ T9784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.534395][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2295'. [ 115.583296][ T9796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2296'. [ 115.674415][ T9806] lo speed is unknown, defaulting to 1000 [ 115.708292][ T9811] loop7: detected capacity change from 0 to 128 [ 115.754693][ T9811] +}[@: attempt to access beyond end of device [ 115.754693][ T9811] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 115.873948][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 115.917549][ T9825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.925184][ T9825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.942229][ T9802] loop3: detected capacity change from 0 to 128 [ 115.949082][ T9825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.956619][ T9825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.968019][ T9802] EXT4-fs: Ignoring removed nobh option [ 115.982463][ T9802] ext4 filesystem being mounted at /486/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.131787][ T9833] tipc: Enabled bearer , priority 0 [ 116.145775][ T9832] tipc: Resetting bearer [ 116.164091][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2314'. [ 116.167768][ T9832] tipc: Disabling bearer [ 116.198592][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.221403][ T9837] vlan0: entered allmulticast mode [ 116.226566][ T9837] bond0: entered allmulticast mode [ 116.630369][ T9873] loop3: detected capacity change from 0 to 2048 [ 116.684127][ T9872] uprobe: syz.3.2330:9872 failed to unregister, leaking uprobe [ 116.744172][ T9882] syzkaller0: entered promiscuous mode [ 116.749707][ T9882] syzkaller0: entered allmulticast mode [ 116.798650][ T9884] ÿÿÿÿ: renamed from lo (while UP) [ 116.847549][ T9890] pim6reg1: entered promiscuous mode [ 116.853014][ T9890] pim6reg1: entered allmulticast mode [ 116.987343][ T9900] netlink: 'syz.3.2342': attribute type 4 has an invalid length. [ 117.017126][ T9900] netlink: 'syz.3.2342': attribute type 4 has an invalid length. [ 117.085169][ T9920] loop5: detected capacity change from 0 to 1024 [ 117.127761][ T9920] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 117.203138][ T9933] pim6reg1: entered promiscuous mode [ 117.208487][ T9933] pim6reg1: entered allmulticast mode [ 117.348781][ T9942] loop5: detected capacity change from 0 to 2048 [ 117.374264][ T9942] EXT4-fs (loop5): failed to initialize system zone (-117) [ 117.390274][ T9942] EXT4-fs (loop5): mount failed [ 117.419537][ T9956] 9pnet_rdma: rdma_create_trans (9956): problem binding to privport: 13 [ 117.483695][ T9962] loop4: detected capacity change from 0 to 2048 [ 117.490500][ T9962] ext4: Unknown parameter 'noacl' [ 117.938996][T10004] pim6reg1: entered promiscuous mode [ 117.944554][T10004] pim6reg1: entered allmulticast mode [ 118.039758][T10016] wg2: left promiscuous mode [ 118.044459][T10016] wg2: left allmulticast mode [ 118.056068][T10016] wg2: entered promiscuous mode [ 118.059215][T10015] loop4: detected capacity change from 0 to 512 [ 118.061090][T10016] wg2: entered allmulticast mode [ 118.083226][T10015] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.100210][T10015] EXT4-fs (loop4): 1 truncate cleaned up [ 118.116760][T10023] loop3: detected capacity change from 0 to 512 [ 118.126478][T10023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.139847][T10023] EXT4-fs (loop3): 1 truncate cleaned up [ 118.280587][T10032] loop7: detected capacity change from 0 to 2048 [ 118.429052][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'. [ 118.443960][T10040] hsr_slave_0 (unregistering): left promiscuous mode [ 118.456326][T10036] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.471677][T10036] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1986 with error 28 [ 118.484327][T10036] EXT4-fs (loop7): This should not happen!! Data will be lost [ 118.484327][T10036] [ 118.494140][T10036] EXT4-fs (loop7): Total free blocks count 0 [ 118.500122][T10036] EXT4-fs (loop7): Free/Dirty block details [ 118.506159][T10036] EXT4-fs (loop7): free_blocks=2415919104 [ 118.512027][T10036] EXT4-fs (loop7): dirty_blocks=2000 [ 118.517301][T10036] EXT4-fs (loop7): Block reservation details [ 118.523324][T10036] EXT4-fs (loop7): i_reserved_data_blocks=125 [ 118.647448][T10046] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.657433][T10046] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.673971][ T6321] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 118.686337][ T6321] EXT4-fs (loop7): This should not happen!! Data will be lost [ 118.686337][ T6321] [ 118.713434][T10046] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.723402][T10046] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.803784][T10046] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.813745][T10046] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.855130][T10046] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.865000][T10046] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.907186][T10046] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.915432][T10046] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.926391][T10046] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.934642][T10046] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.945827][T10046] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.954150][T10046] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.967798][T10046] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.976088][T10046] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.078579][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2407'. [ 119.087838][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2407'. [ 119.106315][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2407'. [ 119.115388][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2407'. [ 119.138611][T10079] loop3: detected capacity change from 0 to 1024 [ 119.145324][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2407'. [ 119.154364][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2407'. [ 119.164122][T10079] EXT4-fs: Ignoring removed nobh option [ 119.169683][T10079] EXT4-fs: Ignoring removed bh option [ 119.289774][T10076] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2410: Allocating blocks 497-513 which overlap fs metadata [ 119.352281][T10075] EXT4-fs (loop3): pa ffff888106a3c3f0: logic 512, phys. 241, len 17 [ 119.360423][T10075] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 119.383457][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 119.383471][ T29] audit: type=1326 audit(1752050837.299:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.425924][ T29] audit: type=1326 audit(1752050837.299:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.449677][ T29] audit: type=1326 audit(1752050837.299:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.473148][ T29] audit: type=1326 audit(1752050837.299:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.496664][ T29] audit: type=1326 audit(1752050837.299:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.520187][ T29] audit: type=1326 audit(1752050837.299:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.543767][ T29] audit: type=1326 audit(1752050837.299:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.567370][ T29] audit: type=1326 audit(1752050837.299:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.590942][ T29] audit: type=1326 audit(1752050837.299:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.614309][ T29] audit: type=1326 audit(1752050837.299:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 119.659230][T10096] batman_adv: batadv0: Removing interface: team0 [ 119.672272][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.679682][T10096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.741152][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.748562][T10096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.762920][T10110] netlink: 'syz.7.2422': attribute type 4 has an invalid length. [ 119.781827][T10113] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2433'. [ 119.837592][T10119] loop7: detected capacity change from 0 to 128 [ 119.845812][T10120] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2437'. [ 119.854799][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2437'. [ 119.875957][T10120] vlan2: entered allmulticast mode [ 119.881134][T10120] syz_tun: entered allmulticast mode [ 119.891344][T10119] syz.7.2424: attempt to access beyond end of device [ 119.891344][T10119] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 119.923109][T10123] netlink: 'syz.5.2425': attribute type 39 has an invalid length. [ 119.936653][T10125] loop1: detected capacity change from 0 to 128 [ 119.944793][T10125] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.113764][T10133] loop7: detected capacity change from 0 to 2048 [ 120.133798][T10138] serio: Serial port ptm0 [ 120.189921][T10133] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2431: bg 0: block 234: padding at end of block bitmap is not set [ 120.204472][T10133] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1918 with error 117 [ 120.217015][T10133] EXT4-fs (loop7): This should not happen!! Data will be lost [ 120.217015][T10133] [ 120.332306][T10146] lo speed is unknown, defaulting to 1000 [ 120.727903][T10188] sit0: entered allmulticast mode [ 120.747079][T10188] sit0: entered promiscuous mode [ 120.803999][T10192] lo speed is unknown, defaulting to 1000 [ 120.817483][T10195] loop1: detected capacity change from 0 to 256 [ 120.847576][T10195] FAT-fs (loop1): bogus number of FAT sectors [ 120.853716][T10195] FAT-fs (loop1): Can't find a valid FAT filesystem [ 121.007473][T10190] SELinux: failed to load policy [ 121.098976][T10205] vlan0: entered allmulticast mode [ 121.468297][T10216] loop4: detected capacity change from 0 to 2048 [ 121.492671][T10211] lo speed is unknown, defaulting to 1000 [ 121.579605][T10211] chnl_net:caif_netlink_parms(): no params data found [ 121.645413][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.652493][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.660975][T10211] bridge_slave_0: entered allmulticast mode [ 121.668589][T10211] bridge_slave_0: entered promiscuous mode [ 121.675710][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.682962][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.692089][T10211] bridge_slave_1: entered allmulticast mode [ 121.698645][T10211] bridge_slave_1: entered promiscuous mode [ 121.718809][T10211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.730700][T10211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.749032][T10211] team0: Port device team_slave_0 added [ 121.755561][T10211] team0: Port device team_slave_1 added [ 121.772606][T10211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.779777][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.805908][T10211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.817767][T10211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.824877][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.850967][T10211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.877256][T10211] hsr_slave_0: entered promiscuous mode [ 121.883351][T10211] hsr_slave_1: entered promiscuous mode [ 121.940989][T10211] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 121.949297][T10211] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 121.957962][T10211] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 121.966574][T10211] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 121.998535][T10211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.010354][T10211] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.019534][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.026699][ T6347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.037770][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.044884][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.098284][T10211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.184873][T10211] veth0_vlan: entered promiscuous mode [ 122.192247][T10211] veth1_vlan: entered promiscuous mode [ 122.207083][T10211] veth0_macvtap: entered promiscuous mode [ 122.214692][T10211] veth1_macvtap: entered promiscuous mode [ 122.225616][T10211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.236458][T10211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.246718][T10211] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.255599][T10211] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.264308][T10211] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.273038][T10211] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.314824][T10276] loop8: detected capacity change from 0 to 128 [ 122.332890][T10276] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.244257][ T1082] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.283074][ T1082] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.362981][ T1082] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.439833][T10322] tipc: New replicast peer: 255.255.255.255 [ 123.446011][T10322] tipc: Enabled bearer , priority 10 [ 123.460314][T10323] vlan2: entered allmulticast mode [ 123.482151][ T1082] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.501680][T10322] __nla_validate_parse: 3 callbacks suppressed [ 123.501753][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2491'. [ 123.517007][T10322] tipc: Disabling bearer [ 123.522747][T10315] SELinux: failed to load policy [ 123.568836][T10329] loop1: detected capacity change from 0 to 512 [ 123.588883][T10329] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.623129][T10329] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2493: corrupted inode contents [ 123.636263][T10329] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2493: mark_inode_dirty error [ 123.648873][T10329] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2493: corrupted inode contents [ 123.670116][T10329] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2493: mark_inode_dirty error [ 123.686555][ T1082] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.689423][T10329] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2493: corrupted inode contents [ 123.707215][ T1082] bond_slave_0: left promiscuous mode [ 123.723241][T10329] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2493: mark_inode_dirty error [ 123.723287][ T1082] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.755816][T10329] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2493: corrupted inode contents [ 123.769853][ T1082] bond_slave_1: left promiscuous mode [ 123.787252][ T1082] $Hÿ (unregistering): Released all slaves [ 123.809093][ T1082] bond1 (unregistering): Released all slaves [ 123.872365][T10349] loop4: detected capacity change from 0 to 128 [ 123.878685][ T1082] tipc: Disabling bearer [ 123.883674][ T1082] tipc: Left network mode [ 123.889942][T10349] ext4 filesystem being mounted at /570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.934754][ T1082] batman_adv: batadv0: Removing interface: team0 [ 123.942029][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.949456][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.969413][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.976983][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.004671][ T1082] veth1_macvtap: left promiscuous mode [ 124.010225][ T1082] veth0_macvtap: left promiscuous mode [ 124.020938][ T1082] veth1_vlan: left promiscuous mode [ 124.031847][ T1082] veth0_vlan: left promiscuous mode [ 124.045058][T10356] loop4: detected capacity change from 0 to 1024 [ 124.086186][T10356] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2513: Allocating blocks 385-513 which overlap fs metadata [ 124.103768][T10356] EXT4-fs (loop4): pa ffff888106a3c540: logic 16, phys. 129, len 24 [ 124.111900][T10356] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 124.150067][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 124.173983][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 124.235482][T10376] tipc: New replicast peer: 255.255.255.255 [ 124.241681][T10376] tipc: Enabled bearer , priority 10 [ 124.249764][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2507'. [ 124.258894][T10376] tipc: Disabling bearer [ 124.363001][T10387] loop4: detected capacity change from 0 to 1024 [ 124.369989][T10387] EXT4-fs: Ignoring removed nobh option [ 124.375764][T10387] EXT4-fs: Ignoring removed bh option [ 124.434873][ T1082] IPVS: stop unused estimator thread 0... [ 124.534990][T10386] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2511: Allocating blocks 497-513 which overlap fs metadata [ 124.582269][T10384] EXT4-fs (loop4): pa ffff888106a3c540: logic 560, phys. 433, len 5 [ 124.590262][T10384] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 124.921771][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 124.921826][ T29] audit: type=1326 audit(1752050842.839:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 124.967286][T10403] loop7: detected capacity change from 0 to 8192 [ 124.985842][T10406] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.000707][ T29] audit: type=1326 audit(1752050842.869:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.024299][ T29] audit: type=1326 audit(1752050842.869:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.047823][ T29] audit: type=1326 audit(1752050842.869:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.071343][ T29] audit: type=1326 audit(1752050842.869:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.094865][ T29] audit: type=1326 audit(1752050842.869:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.118398][ T29] audit: type=1326 audit(1752050842.869:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.141981][ T29] audit: type=1326 audit(1752050842.869:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.165771][ T29] audit: type=1326 audit(1752050842.869:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.189583][ T29] audit: type=1326 audit(1752050842.869:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 125.241606][T10418] tipc: Started in network mode [ 125.246522][T10418] tipc: Node identity ac14140f, cluster identity 4711 [ 125.256225][T10418] tipc: New replicast peer: 255.255.255.255 [ 125.262423][T10418] tipc: Enabled bearer , priority 10 [ 125.270083][T10406] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.280104][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 125.299901][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2523'. [ 125.308970][T10418] tipc: Disabling bearer [ 125.329413][T10406] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.392956][T10406] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.421015][T10439] loop1: detected capacity change from 0 to 1024 [ 125.430395][T10439] EXT4-fs: Ignoring removed nobh option [ 125.436126][T10439] EXT4-fs: Ignoring removed bh option [ 125.482939][T10406] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.528625][T10406] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.578800][T10406] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.603086][T10406] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.688863][T10430] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2531: Allocating blocks 497-513 which overlap fs metadata [ 125.739176][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2537'. [ 125.792243][T10449] hsr_slave_0 (unregistering): left promiscuous mode [ 125.802198][T10430] EXT4-fs (loop1): pa ffff888106a3c5b0: logic 544, phys. 273, len 15 [ 125.810332][T10430] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 125.880179][ T9407] EXT4-fs unmount: 59 callbacks suppressed [ 125.880230][ T9407] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.955691][T10451] net_ratelimit: 24 callbacks suppressed [ 125.955708][T10451] Set syz1 is full, maxelem 65536 reached [ 125.961585][T10457] loop1: detected capacity change from 0 to 8192 [ 126.147051][T10473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.183587][T10474] loop3: detected capacity change from 0 to 8192 [ 126.224287][T10473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.306062][T10473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.385736][T10473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.403415][T10487] loop8: detected capacity change from 0 to 512 [ 126.409920][T10487] EXT4-fs: Ignoring removed orlov option [ 126.426512][T10487] EXT4-fs: inline encryption not supported [ 126.432620][T10487] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 126.450400][T10487] EXT4-fs (loop8): 1 truncate cleaned up [ 126.451418][T10473] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.458672][T10487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.467558][T10473] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.488885][T10473] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.500444][T10473] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.507454][T10486] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.8.2554: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 126.530100][T10486] EXT4-fs error (device loop8) in ext4_delete_entry:2739: Corrupt filesystem [ 126.561741][T10486] EXT4-fs warning (device loop8): ext4_rename_delete:3726: inode #2: comm syz.8.2554: Deleting old file: nlink 4, error=-117 [ 126.735267][T10497] loop3: detected capacity change from 0 to 512 [ 126.736281][T10499] loop7: detected capacity change from 0 to 512 [ 126.742323][T10497] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.748714][T10499] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 126.769184][T10497] EXT4-fs (loop3): 1 truncate cleaned up [ 126.769282][T10499] EXT4-fs (loop7): 1 truncate cleaned up [ 126.775551][T10497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.793795][T10499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.832977][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.861295][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.889020][T10508] $Hÿ: renamed from  (while UP) [ 126.896034][T10508] $Hÿ: entered promiscuous mode [ 126.901097][T10508] bond_slave_0: entered promiscuous mode [ 126.906897][T10508] bond_slave_1: entered promiscuous mode [ 126.946897][T10509] tipc: Enabled bearer , priority 0 [ 126.954460][T10507] tipc: Resetting bearer [ 126.965336][T10507] tipc: Disabling bearer [ 127.112344][T10211] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.131360][T10516] tipc: Started in network mode [ 127.136475][T10516] tipc: Node identity ac14140f, cluster identity 4711 [ 127.170082][T10516] tipc: New replicast peer: 255.255.255.255 [ 127.176217][T10516] tipc: Enabled bearer , priority 10 [ 127.190015][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 127.199172][T10516] tipc: Disabling bearer [ 127.205404][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2568'. [ 127.214456][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2568'. [ 127.245146][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2568'. [ 127.254183][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2568'. [ 127.314230][T10535] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.324566][T10535] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.364704][T10535] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.375085][T10535] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.427085][T10535] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.437428][T10535] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.474380][T10544] wireguard0: entered promiscuous mode [ 127.480266][T10544] wireguard0: entered allmulticast mode [ 127.519380][T10535] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.529754][T10535] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.588700][T10535] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.597011][T10535] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.609830][T10535] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.618248][T10535] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.630876][T10535] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.639184][T10535] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.656479][T10535] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.664786][T10535] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.750656][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.757932][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.765652][T10559] bridge0: entered allmulticast mode [ 127.777349][T10559] bridge_slave_1: left allmulticast mode [ 127.783302][T10559] bridge_slave_1: left promiscuous mode [ 127.789090][T10560] loop3: detected capacity change from 0 to 512 [ 127.789471][T10560] EXT4-fs: Ignoring removed orlov option [ 127.795685][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.801802][T10560] EXT4-fs: inline encryption not supported [ 127.814883][T10560] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.825080][T10559] bridge_slave_0: left allmulticast mode [ 127.826324][T10560] EXT4-fs (loop3): 1 truncate cleaned up [ 127.830720][T10559] bridge_slave_0: left promiscuous mode [ 127.830984][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.837223][T10560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.876147][T10555] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.2580: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 127.896690][T10555] EXT4-fs error (device loop3) in ext4_delete_entry:2739: Corrupt filesystem [ 127.905732][T10555] EXT4-fs warning (device loop3): ext4_rename_delete:3726: inode #2: comm syz.3.2580: Deleting old file: nlink 4, error=-117 [ 128.476257][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.502235][T10567] lo speed is unknown, defaulting to 1000 [ 130.520358][ T1082] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.576583][ T1082] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.580331][T10569] __nla_validate_parse: 2 callbacks suppressed [ 130.580346][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 130.601571][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 130.618609][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 130.627840][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 130.643527][ T1082] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.664768][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 130.669910][T10579] lo speed is unknown, defaulting to 1000 [ 130.673821][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 130.704222][ T1082] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.707081][T10593] loop8: detected capacity change from 0 to 512 [ 130.731443][T10593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 130.739491][T10593] System zones: 1-12 [ 130.743791][T10593] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.2589: corrupted in-inode xattr: invalid ea_ino [ 130.757954][T10593] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2589: couldn't read orphan inode 15 (err -117) [ 130.770522][T10593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.776590][T10579] chnl_net:caif_netlink_parms(): no params data found [ 130.816838][T10211] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.012298][ T1082] bond0 (unregistering): Released all slaves [ 131.020380][ T1082] bond1 (unregistering): Released all slaves [ 131.055525][T10579] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.062667][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.069895][T10579] bridge_slave_0: entered allmulticast mode [ 131.076233][T10579] bridge_slave_0: entered promiscuous mode [ 131.082974][T10579] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.089997][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.097246][T10579] bridge_slave_1: entered allmulticast mode [ 131.103766][T10579] bridge_slave_1: entered promiscuous mode [ 131.119945][ T1082] tipc: Disabling bearer [ 131.124998][ T1082] tipc: Left network mode [ 131.134619][ T1082] veth1_macvtap: left promiscuous mode [ 131.140200][ T1082] veth0_macvtap: left promiscuous mode [ 131.145793][ T1082] veth1_vlan: left promiscuous mode [ 131.151028][ T1082] veth0_vlan: left promiscuous mode [ 131.215910][T10579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.226377][ T3386] lo speed is unknown, defaulting to 1000 [ 131.232129][ T3386] infiniband syz2: ib_query_port failed (-19) [ 131.239938][T10579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.259808][T10579] team0: Port device team_slave_0 added [ 131.266358][T10579] team0: Port device team_slave_1 added [ 131.280405][T10579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.287407][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.313401][T10579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.324784][T10579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.331770][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.357771][T10579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.385405][T10579] hsr_slave_0: entered promiscuous mode [ 131.391648][T10579] hsr_slave_1: entered promiscuous mode [ 131.397503][T10579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.405105][T10579] Cannot create hsr debugfs directory [ 131.435466][T10612] wireguard0: entered promiscuous mode [ 131.441654][T10612] wireguard0: entered allmulticast mode [ 131.498296][T10622] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.511012][ T1082] IPVS: stop unused estimator thread 0... [ 131.551811][T10622] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.591132][T10579] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 131.599541][T10579] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 131.608393][T10579] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 131.619543][T10622] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.631565][T10579] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 131.663989][T10622] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.682568][T10579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.695296][T10579] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.704194][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.711236][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.722866][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.729935][ T6347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.754259][T10622] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.766874][T10622] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.778627][T10622] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.790494][T10622] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.835635][T10579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.918454][T10579] veth0_vlan: entered promiscuous mode [ 131.925724][T10579] veth1_vlan: entered promiscuous mode [ 131.938469][T10579] veth0_macvtap: entered promiscuous mode [ 131.945776][T10579] veth1_macvtap: entered promiscuous mode [ 131.955555][T10579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.965092][T10579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.974067][T10579] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.982949][T10579] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.991646][T10579] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.000412][T10579] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.203845][T10664] loop8: detected capacity change from 0 to 2048 [ 132.216369][T10664] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.230450][T10668] tipc: Started in network mode [ 132.235467][T10668] tipc: Node identity ac14140f, cluster identity 4711 [ 132.242416][T10668] tipc: New replicast peer: 255.255.255.255 [ 132.248447][T10668] tipc: Enabled bearer , priority 10 [ 132.254892][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 132.254903][ T29] audit: type=1326 audit(1752050850.159:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.284788][ T29] audit: type=1326 audit(1752050850.159:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.308349][ T29] audit: type=1326 audit(1752050850.159:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.331875][ T29] audit: type=1326 audit(1752050850.159:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.332451][T10674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.355496][ T29] audit: type=1326 audit(1752050850.159:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.362682][T10674] IPv6: NLM_F_CREATE should be set when creating new route [ 132.393592][ T29] audit: type=1326 audit(1752050850.159:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.417157][ T29] audit: type=1326 audit(1752050850.159:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.440635][ T29] audit: type=1326 audit(1752050850.159:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.464225][ T29] audit: type=1326 audit(1752050850.159:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.487983][ T29] audit: type=1326 audit(1752050850.159:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10669 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd224ee929 code=0x7ffc0000 [ 132.515095][T10664] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.529826][T10680] loop9: detected capacity change from 0 to 512 [ 132.538851][T10680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.551493][T10680] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.2610: invalid block [ 132.563979][T10680] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2610: invalid indirect mapped block 4294967295 (level 1) [ 132.578385][T10680] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2610: invalid indirect mapped block 4294967295 (level 1) [ 132.592966][T10680] EXT4-fs (loop9): 2 truncates cleaned up [ 132.599188][T10680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.613166][T10680] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.657742][T10686] loop7: detected capacity change from 0 to 8192 [ 132.667820][T10211] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.698393][T10690] syzkaller0: entered allmulticast mode [ 132.705674][T10690] syzkaller0: entered promiscuous mode [ 132.722909][T10690] syzkaller0 (unregistering): left allmulticast mode [ 132.729640][T10690] syzkaller0 (unregistering): left promiscuous mode [ 132.878000][T10718] batadv_slave_0: entered promiscuous mode [ 132.889497][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2627'. [ 132.920698][T10718] batadv_slave_0 (unregistering): left promiscuous mode [ 132.963840][T10727] loop9: detected capacity change from 0 to 2048 [ 132.970672][T10727] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.995288][T10727] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.033288][T10579] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.140612][T10746] loop1: detected capacity change from 0 to 256 [ 133.165312][T10746] FAT-fs (loop1): codepage cp932 not found [ 133.174232][T10739] hub 6-0:1.0: USB hub found [ 133.179472][T10739] hub 6-0:1.0: 8 ports detected [ 133.222957][T10753] can0: slcan on ttyS3. [ 133.283662][T10762] loop7: detected capacity change from 0 to 1024 [ 133.290466][T10762] EXT4-fs: Ignoring removed nobh option [ 133.296308][T10762] EXT4-fs: Ignoring removed bh option [ 133.311494][T10753] can0 (unregistered): slcan off ttyS3. [ 133.312608][T10762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.317241][T10753] Falling back ldisc for ttyS3. [ 133.342651][T10762] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 133.357728][T10762] EXT4-fs (loop7): Remounting filesystem read-only [ 133.371237][ T36] tipc: Node number set to 2886997007 [ 133.378101][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.395754][T10771] IPv4: Oversized IP packet from 127.202.26.0 [ 133.414317][T10773] netlink: 'syz.7.2649': attribute type 1 has an invalid length. [ 133.427523][T10773] bond0: entered promiscuous mode [ 133.432618][T10773] bond0: entered allmulticast mode [ 133.437860][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.452252][T10773] bridge0: entered promiscuous mode [ 133.457765][T10773] bridge0: entered allmulticast mode [ 133.463718][T10773] bond0: (slave bridge0): Enslaving as a backup interface with an up link [ 133.490153][T10778] loop3: detected capacity change from 0 to 128 [ 133.496935][T10778] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 133.507096][T10778] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2651'. [ 133.530952][ T6347] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 133.651219][ T6338] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 133.782286][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2656'. [ 133.800585][T10788] loop8: detected capacity change from 0 to 8192 [ 133.808628][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2656'. [ 134.286317][T10824] tipc: New replicast peer: 255.255.255.83 [ 134.292463][T10824] tipc: Enabled bearer , priority 10 [ 134.397858][T10832] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.407682][T10832] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.486080][T10832] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.495911][T10832] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.575098][T10832] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.584974][T10832] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.615938][T10847] loop9: detected capacity change from 0 to 164 [ 134.623701][T10847] syz.9.2680: attempt to access beyond end of device [ 134.623701][T10847] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 134.638150][T10847] syz.9.2680: attempt to access beyond end of device [ 134.638150][T10847] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.676684][T10849] tipc: Bearer : already 2 bearers with priority 10 [ 134.683992][T10849] tipc: Bearer : trying with adjusted priority [ 134.691092][T10849] tipc: New replicast peer: 0.0.255.255 [ 134.696716][T10849] tipc: Enabled bearer , priority 9 [ 134.713785][T10832] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.723921][T10832] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.803134][T10859] ref_ctr increment failed for inode: 0x9e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881042fac00 [ 134.814815][T10858] uprobe: syz.9.2686:10858 failed to unregister, leaking uprobe [ 134.829073][T10832] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.837354][T10832] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.849026][T10832] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.857384][T10832] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.869436][T10832] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.877762][T10832] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.889959][T10832] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.898235][T10832] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.990650][T10870] loop7: detected capacity change from 0 to 128 [ 134.999993][T10870] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.026487][T10870] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.172312][ T7404] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.198259][T10885] loop8: detected capacity change from 0 to 16384 [ 135.297594][T10892] loop7: detected capacity change from 0 to 1024 [ 135.304362][T10892] EXT4-fs: inline encryption not supported [ 135.310483][T10892] EXT4-fs: Ignoring removed bh option [ 135.327514][T10892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.340678][T10893] loop8: detected capacity change from 16384 to 16383 [ 135.414586][ T7404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.484087][T10910] tipc: Enabled bearer , priority 0 [ 135.501793][T10910] tipc: Disabling bearer [ 135.639476][T10925] wg2: entered promiscuous mode [ 135.644449][T10925] wg2: entered allmulticast mode [ 135.667955][T10929] loop9: detected capacity change from 0 to 512 [ 135.682064][T10929] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 135.703117][T10929] EXT4-fs (loop9): 1 truncate cleaned up [ 135.706623][T10936] __nla_validate_parse: 1 callbacks suppressed [ 135.706637][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2716'. [ 135.711677][T10929] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.762408][T10579] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.846968][T10949] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 135.934612][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2724'. [ 136.031607][T10981] loop8: detected capacity change from 0 to 512 [ 136.041714][T10981] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 136.049779][T10981] EXT4-fs (loop8): orphan cleanup on readonly fs [ 136.057747][T10981] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.2735: corrupted inode contents [ 136.070051][T10981] EXT4-fs (loop8): Remounting filesystem read-only [ 136.076824][T10981] EXT4-fs (loop8): 1 truncate cleaned up [ 136.082828][ T6295] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.093405][ T6295] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.104050][ T6295] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 136.115082][T10981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.138775][T10211] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.454821][T11007] loop8: detected capacity change from 0 to 1024 [ 136.461879][T11007] EXT4-fs: Ignoring removed nobh option [ 136.467482][T11007] EXT4-fs: Ignoring removed bh option [ 136.477804][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2741'. [ 136.489909][T11007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.510921][T11007] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 136.526332][T11007] EXT4-fs (loop8): Remounting filesystem read-only [ 136.546061][T10211] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.720104][T11026] loop3: detected capacity change from 0 to 1024 [ 136.728544][T11026] EXT4-fs: Ignoring removed orlov option [ 136.742132][T11026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.756198][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2749'. [ 136.780829][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.804690][T11031] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.814468][T11031] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.842817][T11031] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.852609][T11031] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.917493][T11039] netlink: 'syz.3.2752': attribute type 1 has an invalid length. [ 136.926992][T11031] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.936765][T11031] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.952763][ T6294] ================================================================== [ 136.960865][ T6294] BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release [ 136.968869][ T6294] [ 136.971172][ T6294] write to 0xffff888104543820 of 8 bytes by task 11040 on cpu 1: [ 136.978865][ T6294] sk_common_release+0xae/0x220 [ 136.983703][ T6294] udp_lib_close+0x15/0x20 [ 136.988162][ T6294] inet_release+0xcb/0xf0 [ 136.992476][ T6294] inet6_release+0x3e/0x60 [ 136.996878][ T6294] sock_close+0x68/0x150 [ 137.001204][ T6294] __fput+0x298/0x650 [ 137.005189][ T6294] ____fput+0x1c/0x30 [ 137.009156][ T6294] task_work_run+0x131/0x1a0 [ 137.013727][ T6294] exit_to_user_mode_loop+0xe4/0x100 [ 137.018998][ T6294] do_syscall_64+0x1d6/0x200 [ 137.023611][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.029506][ T6294] [ 137.031810][ T6294] read to 0xffff888104543820 of 8 bytes by task 6294 on cpu 0: [ 137.039333][ T6294] l2tp_tunnel_del_work+0x2f/0x1a0 [ 137.044433][ T6294] process_scheduled_works+0x4cb/0x9d0 [ 137.049877][ T6294] worker_thread+0x582/0x770 [ 137.054457][ T6294] kthread+0x489/0x510 [ 137.058511][ T6294] ret_from_fork+0xda/0x150 [ 137.062999][ T6294] ret_from_fork_asm+0x1a/0x30 [ 137.067761][ T6294] [ 137.070063][ T6294] value changed: 0xffff88810059dd40 -> 0x0000000000000000 [ 137.077150][ T6294] [ 137.079452][ T6294] Reported by Kernel Concurrency Sanitizer on: [ 137.085585][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: kworker/u8:15 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 137.098238][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.108279][ T6294] Workqueue: l2tp l2tp_tunnel_del_work [ 137.113730][ T6294] ================================================================== [ 137.142411][T11031] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.152252][T11031] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.465082][T11031] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.473389][T11031] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.484188][T11031] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.492402][T11031] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.503222][T11031] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.511475][T11031] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.522697][T11031] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.530932][T11031] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0