last executing test programs: 3m0.128393412s ago: executing program 32 (id=10763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x24900) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 2m57.431057623s ago: executing program 33 (id=10821): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r4 = dup2(r0, r0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) io_setup(0x8, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x2, {0xe0, 0x1, 0x3}}, 0x14) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000009010100000000000000000a000004240002001400018008000100ac1414aa08000200ac14142f0c00028005000100060000000900010073797a310000000070c853fe8af89a5a4cbf66a0f375a3bad92e7c78b1b2fce2299bbbfd30ac4530b128b6560aefd1174c479f057f01e874a4133aba85280fa9c9d8dda471964930345cfc87b7e20737626cd9785187b79814d6af6ac1b489f5041382ae04953db27ed88a0456a8563a45bad23364f333b958aac4fddffba8113bc9b23cbb430f915f4d201e50884c0d0b8c48eb857af666cd826ad8a559fae8a66f86d887c713bbd0ed9126c7"], 0x44}}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a20000000000000000000000dbf50d34dce11700000000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x300, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}]}, @NFT_MSG_DELSETELEM={0x5c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x80, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5cda6f36}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e4016b6}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}]}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "2c7154f7832a0919a548fb0c75d1d7f7b9829767597cc5404c625371c83f44b4a5e9a997f23fc38bdbd2f91e4a33789b64012c616d963398e8de19dd26f38ae503dcc2d3bb727f7eb093b9"}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x29, 0x6, "429ef2c032217bc7c275221c05c4f46c28069023d040b714cc32d66247bc7e01a1508c62f6"}]}], {0x14}}, 0x2b0}, 0x1, 0x0, 0x0, 0x20004001}, 0x880) mmap(&(0x7f0000063000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x13, r8, 0x28f43000) 2m55.545752495s ago: executing program 6 (id=10843): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000008c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) (fail_nth: 1) 2m55.246199644s ago: executing program 6 (id=10844): creat(&(0x7f0000000300)='./file0\x00', 0x28) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',versi']) 2m55.17360736s ago: executing program 6 (id=10849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0xf52d42ab80e64a71, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) unshare(0x2a060400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000008c0)="$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") r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x80, r7, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c92a5e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0, r10}, 0x18) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2m54.984626609s ago: executing program 6 (id=10853): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf2501"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 2m54.956830422s ago: executing program 6 (id=10855): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b000000080000000c00000003000000010000008bb1b602f89e96ebf64367bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x5, 0x0, 0x0, 0xfffffd3a, 0x0, 0x0, 0x2}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r5, r1, 0x0, 0x3ffff) 2m54.281131797s ago: executing program 5 (id=10862): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000700)='./bus\x00', 0x2000414, &(0x7f0000000740)=ANY=[], 0x1, 0x2bd, &(0x7f0000001500)="$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") mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x3182811, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000002020104000000000000000002000005400002800600034000010000140001800800010000000000080002000000000014000180080000000c00028005000100060000007f9942d343814c75a2fd1f521657418330d07a260666bb47ac0871b8db5455d746d528cde61aff11f779d7c7d182101d11dcb45a8c87938882437578e20a6d70ed640a8bcdf4f341e6cb5496ba4345bad3a782d4ec2fb013a940b60d9ca94d762e4819e4b6d0e8d88f"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="03002cbd70387ddbdf25010000000800e401", @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="e24a074d", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf250200000008000400e000000208000400ac1414aa08000700", @ANYBLOB], 0x34}}, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x9c3fa077fa966879, 0x70bd2c, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x6f}}}}}, 0x28}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280), 0xfc, 0x581, &(0x7f0000000f40)="$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") ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/96, &(0x7f0000000000)=0x60) 2m54.119111552s ago: executing program 5 (id=10867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './bus', [{0x20, '[\'&*}-'}, {0x20, '#! \xf1\xc30\xea~\xd3iBHN\xac\xd2\xad\n\xec\xb7D\a\x11\x1a\x9d%\a\xd1\x9d\xff\x7f\x1e\x8fBwj\xff %HU\xe5\xfe\xac\xff\xde\xea\xfeEC\x97J\x00\xbc\x96\x8b \xc1^\x1f}\xf7\xb5r\xdf\xd5\x81\xc3;]/)\xf2\x05\x05\x13\xdb`\xc47\x80%\f\xfb\xc8'}, {0x20, '\x1f\xbb^\xbf\xfa\xfe.4\xcdA\xa8\tjN\xe9\xe7\xcc\xbc\xeeyV\x00\xe5\xfc.\x9c\xc4b\x03\r\x8a\x139i\xde\xcb\xf0\r&\x94\xf2?\x1a\xacP\xa3\x1d\xd1'}], 0xa, "33aa2af3bd74a1baae8ae65d66f6cf9415a306bb3628864d6d20b92dada54322ca73598616616ecb7112224fd5f8dbb204c7c15f142034f2067a28e3ca669d154e79f5f91ea733a9dbd0fac99492ea9fe7dd2a24fdd70abdc31c3cd2ecbe40c4a4815c2735e7f3bac32b9d5b508674e359b5"}, 0x108) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000005, 0x10012, r3, 0x0) copy_file_range(r3, 0x0, r2, &(0x7f0000000100)=0x1, 0x8, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './bus', [{0x20, '[\'&*}-'}, {0x20, '#! \xf1\xc30\xea~\xd3iBHN\xac\xd2\xad\n\xec\xb7D\a\x11\x1a\x9d%\a\xd1\x9d\xff\x7f\x1e\x8fBwj\xff %HU\xe5\xfe\xac\xff\xde\xea\xfeEC\x97J\x00\xbc\x96\x8b \xc1^\x1f}\xf7\xb5r\xdf\xd5\x81\xc3;]/)\xf2\x05\x05\x13\xdb`\xc47\x80%\f\xfb\xc8'}, {0x20, '\x1f\xbb^\xbf\xfa\xfe.4\xcdA\xa8\tjN\xe9\xe7\xcc\xbc\xeeyV\x00\xe5\xfc.\x9c\xc4b\x03\r\x8a\x139i\xde\xcb\xf0\r&\x94\xf2?\x1a\xacP\xa3\x1d\xd1'}], 0xa, "33aa2af3bd74a1baae8ae65d66f6cf9415a306bb3628864d6d20b92dada54322ca73598616616ecb7112224fd5f8dbb204c7c15f142034f2067a28e3ca669d154e79f5f91ea733a9dbd0fac99492ea9fe7dd2a24fdd70abdc31c3cd2ecbe40c4a4815c2735e7f3bac32b9d5b508674e359b5"}, 0x108) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000005, 0x10012, r3, 0x0) (async) copy_file_range(r3, 0x0, r2, &(0x7f0000000100)=0x1, 0x8, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) (async) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) (async) 2m54.019589532s ago: executing program 5 (id=10868): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r4 = dup2(r0, r0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) io_setup(0x8, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x2, {0xe0, 0x1, 0x3}}, 0x14) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000009010100000000000000000a000004240002001400018008000100ac1414aa08000200ac14142f0c00028005000100060000000900010073797a310000000070c853fe8af89a5a4cbf66a0f375a3bad92e7c78b1b2fce2299bbbfd30ac4530b128b6560aefd1174c479f057f01e874a4133aba85280fa9c9d8dda471964930345cfc87b7e20737626cd9785187b79814d6af6ac1b489f5041382ae04953db27ed88a0456a8563a45bad23364f333b958aac4fddffba8113bc9b23cbb430f915f4d201e50884c0d0b8c48eb857af666cd826ad8a559fae8a66f86d887c713bbd0ed9126c7"], 0x44}}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a20000000000000000000000dbf50d34dce11700000000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x300, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}]}, @NFT_MSG_DELSETELEM={0x5c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x80, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5cda6f36}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e4016b6}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}]}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "2c7154f7832a0919a548fb0c75d1d7f7b9829767597cc5404c625371c83f44b4a5e9a997f23fc38bdbd2f91e4a33789b64012c616d963398e8de19dd26f38ae503dcc2d3bb727f7eb093b9"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x29, 0x6, "429ef2c032217bc7c275221c05c4f46c28069023d040b714cc32d66247bc7e01a1508c62f6"}]}], {0x14}}, 0x2c4}, 0x1, 0x0, 0x0, 0x20004001}, 0x880) mmap(&(0x7f0000063000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x13, r8, 0x28f43000) 2m53.411593461s ago: executing program 6 (id=10877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b000000080000000c00000003000000010000008bb1b602f89e96ebf64367bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r7 = syz_io_uring_setup(0x213e, &(0x7f0000000080)={0x0, 0x81df, 0x400, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/195, 0xc3}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendfile(r5, r2, 0x0, 0x3ffff) 2m53.393221202s ago: executing program 34 (id=10877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b000000080000000c00000003000000010000008bb1b602f89e96ebf64367bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r7 = syz_io_uring_setup(0x213e, &(0x7f0000000080)={0x0, 0x81df, 0x400, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/195, 0xc3}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendfile(r5, r2, 0x0, 0x3ffff) 2m53.032044758s ago: executing program 5 (id=10880): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf2501"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 2m53.011653s ago: executing program 5 (id=10882): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb8511d3799c7a606, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x10000000}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x3, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3ff, 0x9, 0x2, 0x7, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x110}}, 0x0) 2m52.791813511s ago: executing program 5 (id=10885): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000000)=""/43) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 2m52.791574191s ago: executing program 35 (id=10885): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000000)=""/43) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 2m50.124589408s ago: executing program 7 (id=10907): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="12"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m49.546002494s ago: executing program 7 (id=10912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x5d, 0xe1, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x66, 0x0, 0x2b, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xa, "7b189b347f8768f1"}, @timestamp={0x44, 0xc, 0xfe, 0x0, 0x9, [0x5, 0x2]}]}}}}}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x777fc1f2a67bd679, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffbfffe}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000019200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c38735073fa8aba3d82caaf00ad741fd5f282a774e5cb3150310f153a1f9696b8964f683bd1744dad0b2e81e3c68f4e272c3f430ecc7c9bf7c9e8b01e3b33377e6071efe1c5cadec49781c10fc9ca84b03b237fd5d0422a8a89a9fb29f7892fae34b7a7d361b47"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r4}, &(0x7f0000000bc0), &(0x7f0000000c00)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) close(r3) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2m48.725121854s ago: executing program 7 (id=10930): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200"], 0x48) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000240)={'geneve1\x00', @ifru_settings={0x6, 0x5, @cisco=&(0x7f0000000100)={0x9, 0x9}}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x60400, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 2m48.316788983s ago: executing program 7 (id=10938): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="05072bbd7000ffdbdf2501"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 2m48.24753229s ago: executing program 7 (id=10940): creat(0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x777fc1f2a67bd679, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffbfffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[]) 2m48.090305985s ago: executing program 7 (id=10944): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008000100010000000400"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 2m48.030440531s ago: executing program 36 (id=10944): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008000100010000000400"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 2m47.400492133s ago: executing program 3 (id=10960): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2], 0x68}}, 0x0) 2m47.101836002s ago: executing program 3 (id=10968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b000000080000000c00000003000000010000008bb1b602f89e96ebf64367bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x5, 0x0, 0x0, 0xfffffd3a, 0x0, 0x0, 0x2}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r6, r2, 0x0, 0x3ffff) 2m47.017602061s ago: executing program 3 (id=10970): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x28040890) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0xfffffffffffffffc, 0x2, 0xffff, 0x2, 0x8}, 0x4, 0x6, 0xd6}) r6 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x1001) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000300)=0x13) sendmsg$tipc(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x12001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 2m46.709351861s ago: executing program 3 (id=10971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf2501"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 2m46.524768209s ago: executing program 3 (id=10972): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8929, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m46.283919753s ago: executing program 3 (id=10974): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89ff, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 2m46.283316023s ago: executing program 37 (id=10974): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89ff, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 1m32.503951389s ago: executing program 2 (id=12704): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(0x0, 0x0) close(r0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000900000003000000090000000100000051eb9190d06239dd1047aa539cb48102f6a87c92842fe6a02f3671dee9a1be775ddeffc8ee262980392a3034755ebad905c983ffcc2c8957fdbd0476ac04e508ebdc9908bf1a4f1310c1574ccc75a0c50e3b0cf6ef86a1a98109fb89f0a7345a2462e179d83157faaa713120465790ca0ca819603c1c27814acbb6ab8f9bf069d32b98b63de522514faa7acf166a52109b2603825c040ca6f5f1425cc03d8abea7d623bb85368848b03afd63a0cb4c0ea866e131dc6b26f5626468841df86d6d14b16fc18f017cef6867329ee1c85d835de0a987605688fa1fc641d6044e8fe8b10aa77a", @ANYBLOB, @ANYBLOB="00000000030000"], 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="001100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x3cdc19, 0x0) 1m32.456110104s ago: executing program 2 (id=12705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1m32.415003678s ago: executing program 2 (id=12706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4000000}, 0x0) 1m32.337101386s ago: executing program 2 (id=12709): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x133) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1m32.29972995s ago: executing program 2 (id=12711): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chmod(&(0x7f00000006c0)='./file0\x00', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004010) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) openat$cgroup_int(r1, &(0x7f0000000300)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000008000}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 1m31.99186935s ago: executing program 2 (id=12715): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0]) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_bp={0x0}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 1m31.99154091s ago: executing program 38 (id=12715): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0]) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_bp={0x0}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 2.560777748s ago: executing program 0 (id=14424): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x7, &(0x7f00000003c0)=[{0x5, 0x9, 0x10, 0x5}, {0x101, 0x3, 0xa2, 0xb}, {0xe2ef, 0x1, 0x3, 0x9}, {0x8, 0x0, 0x1, 0x5}, {0x6, 0x5, 0x8c, 0x8}, {0x768, 0x0, 0x1, 0x661}, {0x80, 0x5, 0x2f, 0x4800}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b100000000000000000000000018012100000000002020207b1af8ff00000000bfa10000000000e306010000f8ffffffb702000008000000b7030000000000008500000010000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r2}, 0x10) flock(r1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') openat(r6, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0x1}], 0x1}}], 0x1, 0x200400c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r8 = creat(&(0x7f0000000340)='./file1\x00', 0x0) fallocate(r8, 0x0, 0xbf5, 0x2000402) lseek(r8, 0x5, 0x3) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) lgetxattr(0x0, &(0x7f0000000540)=@known='com.apple.system.Security\x00', 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) 2.460457547s ago: executing program 0 (id=14426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 2.43364344s ago: executing program 0 (id=14427): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x0, 0x5, 0x70a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfdef) 2.417053652s ago: executing program 0 (id=14428): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x28040890) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0xfffffffffffffffc, 0x2, 0xffff, 0x2, 0x8}, 0x4, 0x6, 0xd6}) r7 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x1001) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0x13) sendmsg$tipc(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 2.269665956s ago: executing program 0 (id=14432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}], 0x1, 0x4000004) 2.224027381s ago: executing program 0 (id=14434): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x10c}}, 0x8014) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRESHEX=r4], 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100), 0x0) sendmsg$inet6(r6, 0x0, 0x4048043) r8 = dup(r6) r9 = socket$inet_sctp(0x2, 0x5, 0x84) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010104}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r11], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={r11, @in={{0x2, 0x4e22, @multicast1}}, 0x8003, 0x2, 0xe652, 0x0, 0x3b, 0x8, 0x6}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000005c0)=""/249, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r5}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x3f) sendmsg$NL80211_CMD_NEW_MPATH(r12, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) 1.868235386s ago: executing program 9 (id=14437): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000580)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xb, 0x3a, ' ', 0x3a, '\x835\tplb\x11\xcd\xb0\x84\x89\xa5\xf1\xdb\x05\xc4\x91\xe0\xd8/as0i\x17\xb5U\xb5\xa6\xdd\xeb\x83\'\x8c4\xaf\xc5\xae(\x03\xab\x85\x91%', 0x3a, './file0', 0x3a, [0x46]}, 0x55) 1.708246722s ago: executing program 9 (id=14443): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x28040890) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0xfffffffffffffffc, 0x2, 0xffff, 0x2, 0x8}, 0x4, 0x6, 0xd6}) r7 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x1001) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0x13) sendmsg$tipc(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 1.549562277s ago: executing program 9 (id=14447): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.466013616s ago: executing program 9 (id=14448): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) munlockall() r4 = dup2(r0, r0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) io_setup(0x8, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x2, {0xe0, 0x1, 0x3}}, 0x14) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000009010100000000000000000a000004240002001400018008000100ac1414aa08000200ac14142f0c00028005000100060000000900010073797a310000000070c853fe8af89a5a4cbf66a0f375a3bad92e7c78b1b2fce2299bbbfd30ac4530b128b6560aefd1174c479f057f01e874a4133aba85280fa9c9d8dda471964930345cfc87b7e20737626cd9785187b79814d6af6ac1b489f5041382ae04953db27ed88a0456a8563a45bad23364f333b958aac4fddffba8113bc9b23cbb430f915f4d201e50884c0d0b8c48eb857af666cd826ad8a559fae8a66f86d887c713bbd0ed9126c7"], 0x44}}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a20000000000000000000000dbf50d34dce11700000000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x880) mmap(&(0x7f0000063000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x13, r8, 0x28f43000) 1.349958577s ago: executing program 1 (id=14451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x5, 0x0, 0x0, 0xfffffd3a, 0x0, 0x0, 0x2}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r6, r2, 0x0, 0x3ffff) 1.233283149s ago: executing program 1 (id=14452): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000200), 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048084}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x40008) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000340)=r1) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x9, &(0x7f0000000000)={0x2, 0x8, 0xc186}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="0700000680000000000000004bc386b0575b"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000580)="000000f1000000000000400000000000007c06a348af0fdc83590bfba6052cd89044eede64b3a02ac599dcdee6a7d62a83ce5f89e00fc5861f29c22ef972eef59347d135a4b302a1e64107a67d944a1a60ee94fcd3e3812c4a7580fd25c3ed06ece75b0fbbc14b87f95265dc510cfbf1bf63f95da1b540375a1cdba878d31fdd5593a0dd437aeb5ce6364419531440efbabf7aad16a5936fa3a3bfb4774c1d72b67eeda4fea216ac0e121113d58d983758c6d74e8238ffa921bee0e3fef590e71e250c692a1e3baa622e4cfd224f7bbbb7449d5c1ff735551322f3ca4c78e415ca59b0de7f1f0da0ed335c15edd0c5d11db9", &(0x7f00000004c0)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 731.994898ms ago: executing program 8 (id=14454): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000580)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xb, 0x3a, ' ', 0x3a, '\x835\tplb\x11\xcd\xb0\x84\x89\xa5\xf1\xdb\x05\xc4\x91\xe0\xd8/as0i\x17\xb5U\xb5\xa6\xdd\xeb\x83\'\x8c4\xaf\xc5\xae(\x03\xab\x85\x91%', 0x3a, './file0', 0x3a, [0x46]}, 0x55) 720.708359ms ago: executing program 8 (id=14455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0x0, 0xffffffff, 0x659a}]}}}}}}}}, 0x0) 701.433001ms ago: executing program 8 (id=14456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") 631.639108ms ago: executing program 8 (id=14457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 520.409019ms ago: executing program 8 (id=14458): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 415.863229ms ago: executing program 9 (id=14459): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 367.880444ms ago: executing program 9 (id=14462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 360.873204ms ago: executing program 4 (id=14463): creat(&(0x7f0000010280)='./file0\x00', 0x182) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x5b, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pread64(r2, &(0x7f0000000180)=""/73, 0x49, 0xac8c) 317.166669ms ago: executing program 1 (id=14464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000580)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xb, 0x3a, ' ', 0x3a, '\x835\tplb\x11\xcd\xb0\x84\x89\xa5\xf1\xdb\x05\xc4\x91\xe0\xd8/as0i\x17\xb5U\xb5\xa6\xdd\xeb\x83\'\x8c4\xaf\xc5\xae(\x03\xab\x85\x91%', 0x3a, './file0', 0x3a, [0x46]}, 0x55) 315.255539ms ago: executing program 8 (id=14465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b000000080000000c00000003000000010000008bb1b602f89e96ebf64367bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x5, 0x0, 0x0, 0xfffffd3a, 0x0, 0x0, 0x2}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r8 = syz_io_uring_setup(0x213e, &(0x7f0000000080)={0x0, 0x81df, 0x400, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/195, 0xc3}], 0x1, 0x0, 0x1}) io_uring_enter(r8, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendfile(r6, r2, 0x0, 0x3ffff) 283.201822ms ago: executing program 4 (id=14466): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0x0, 0xffffffff, 0x659a}]}}}}}}}}, 0x0) 251.965906ms ago: executing program 4 (id=14467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 222.738518ms ago: executing program 4 (id=14468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x8842) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) 204.02849ms ago: executing program 1 (id=14469): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 175.631743ms ago: executing program 4 (id=14470): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x0, 0x5, 0x70a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfdef) 117.892389ms ago: executing program 4 (id=14471): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") 51.460185ms ago: executing program 1 (id=14472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) chmod(&(0x7f00000006c0)='./file0\x00', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004010) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, 0x0, &(0x7f0000000280)=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) openat$cgroup_int(r2, &(0x7f0000000300)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000008000}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 0s ago: executing program 1 (id=14473): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') kernel console output (not intermixed with test programs): ve bond_slave_0): Enslaving as an active interface with an up link [ 907.204311][T17054] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.214674][T17054] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.227269][T12300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.247970][T12300] team0: Port device team_slave_0 added [ 907.254949][T12300] team0: Port device team_slave_1 added [ 907.271854][T12300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.278843][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.304855][T12300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.327423][T12353] program syz.4.13720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 907.333701][T12300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.343732][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.369646][T12300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.391500][T17054] bridge_slave_1: left allmulticast mode [ 907.397252][T17054] bridge_slave_1: left promiscuous mode [ 907.402913][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.411174][T17054] bridge_slave_0: left allmulticast mode [ 907.416938][T17054] bridge_slave_0: left promiscuous mode [ 907.422653][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.607035][T12373] FAULT_INJECTION: forcing a failure. [ 907.607035][T12373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.620126][T12373] CPU: 0 UID: 0 PID: 12373 Comm: syz.1.13722 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 907.620157][T12373] Tainted: [W]=WARN [ 907.620161][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 907.620168][T12373] Call Trace: [ 907.620173][T12373] [ 907.620178][T12373] __dump_stack+0x1d/0x30 [ 907.620193][T12373] dump_stack_lvl+0xe8/0x140 [ 907.620226][T12373] dump_stack+0x15/0x1b [ 907.620236][T12373] should_fail_ex+0x265/0x280 [ 907.620254][T12373] should_fail+0xb/0x20 [ 907.620312][T12373] should_fail_usercopy+0x1a/0x20 [ 907.620374][T12373] _copy_from_user+0x1c/0xb0 [ 907.620397][T12373] kstrtouint_from_user+0x69/0xf0 [ 907.620411][T12373] ? 0xffffffff81000000 [ 907.620433][T12373] ? selinux_file_permission+0x1e4/0x320 [ 907.620450][T12373] proc_fail_nth_write+0x50/0x160 [ 907.620526][T12373] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 907.620552][T12373] vfs_write+0x269/0x960 [ 907.620572][T12373] ? vfs_read+0x4e6/0x770 [ 907.620654][T12373] ? __rcu_read_unlock+0x4f/0x70 [ 907.620668][T12373] ? __fget_files+0x184/0x1c0 [ 907.620684][T12373] ksys_write+0xda/0x1a0 [ 907.620702][T12373] __x64_sys_write+0x40/0x50 [ 907.620715][T12373] x64_sys_call+0x2802/0x3000 [ 907.620793][T12373] do_syscall_64+0xd2/0x200 [ 907.620803][T12373] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 907.620881][T12373] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 907.620897][T12373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.620970][T12373] RIP: 0033:0x7f80a338da7f [ 907.620979][T12373] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 907.621067][T12373] RSP: 002b:00007f80a1db5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 907.621084][T12373] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80a338da7f [ 907.621153][T12373] RDX: 0000000000000001 RSI: 00007f80a1db50a0 RDI: 0000000000000006 [ 907.621200][T12373] RBP: 00007f80a1db5090 R08: 0000000000000000 R09: 0000000000000000 [ 907.621207][T12373] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 907.621283][T12373] R13: 00007f80a35e6218 R14: 00007f80a35e6180 R15: 00007ffdd3aacda8 [ 907.621294][T12373] [ 907.886633][T17054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.896355][T17054] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 907.905208][T17054] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 907.914291][T17054] bond0 (unregistering): Released all slaves [ 907.958725][T12300] hsr_slave_0: entered promiscuous mode [ 907.965171][T12300] hsr_slave_1: entered promiscuous mode [ 907.971110][T12300] debugfs: 'hsr0' already exists in 'hsr' [ 907.976866][T12300] Cannot create hsr debugfs directory [ 908.003743][T17054] hsr_slave_0: left promiscuous mode [ 908.009553][T17054] hsr_slave_1: left promiscuous mode [ 908.016021][T17054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.023441][T17054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.031491][T17054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.038939][T17054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.047717][T17054] veth0_macvtap: left promiscuous mode [ 908.082265][T17054] team0 (unregistering): Port device team_slave_1 removed [ 908.091575][T17054] team0 (unregistering): Port device team_slave_0 removed [ 908.124236][T12380] loop1: detected capacity change from 0 to 512 [ 908.131719][T12383] loop9: detected capacity change from 0 to 128 [ 908.141723][T12380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 908.155518][T12385] program syz.0.13725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 908.181186][T12380] EXT4-fs (loop1): 1 truncate cleaned up [ 908.259064][T12393] loop4: detected capacity change from 0 to 1024 [ 908.266022][T12393] EXT4-fs: Ignoring removed orlov option [ 908.331316][T12404] validate_nla: 14 callbacks suppressed [ 908.331418][T12404] netlink: 'syz.1.13735': attribute type 2 has an invalid length. [ 908.344889][T12404] netlink: 'syz.1.13735': attribute type 1 has an invalid length. [ 908.355750][ T4256] hid_parser_main: 94 callbacks suppressed [ 908.355765][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.368999][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.376428][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.383806][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.391250][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.398718][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.406237][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.413664][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.421086][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.428549][ T4256] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 908.437122][ T4256] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz0] on syz1 [ 908.449109][T12404] netlink: 'syz.1.13735': attribute type 4 has an invalid length. [ 908.538463][T12408] loop1: detected capacity change from 0 to 512 [ 908.547888][T12300] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 908.559924][T12300] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 908.576309][T12408] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.589481][T12300] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 908.599048][T12300] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 908.643073][T12423] netlink: 'syz.1.13739': attribute type 2 has an invalid length. [ 908.646725][T12300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.651049][T12423] netlink: 'syz.1.13739': attribute type 1 has an invalid length. [ 908.667699][T12300] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.677705][ T4256] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz0] on syz1 [ 908.690843][T12423] netlink: 'syz.1.13739': attribute type 4 has an invalid length. [ 908.690947][T12421] loop9: detected capacity change from 0 to 512 [ 908.707873][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.712154][T12424] netlink: 'syz.4.13733': attribute type 1 has an invalid length. [ 908.714983][T17039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.722765][T12424] netlink: 'syz.4.13733': attribute type 2 has an invalid length. [ 908.723232][T12421] /dev/loop9: Can't open blockdev [ 908.741858][T17054] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.749884][T17054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.769166][T12421] Restarting kernel threads ... [ 908.776922][T12426] loop1: detected capacity change from 0 to 512 [ 908.783478][T12421] Done restarting kernel threads. [ 908.791452][T12426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 908.812349][T12426] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.13740: orphan file block 0: bad magic [ 908.824148][T12426] EXT4-fs (loop1): Remounting filesystem read-only [ 908.831212][T12426] EXT4-fs (loop1): mount failed [ 908.866996][T12300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.872419][T12439] loop1: detected capacity change from 0 to 512 [ 908.888085][T12439] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 908.903829][T12439] EXT4-fs (loop1): invalid journal inode [ 908.916362][T12439] EXT4-fs (loop1): can't get journal size [ 908.917034][T12447] netlink: 'syz.0.13745': attribute type 2 has an invalid length. [ 908.929784][T12439] EXT4-fs (loop1): 1 truncate cleaned up [ 908.929933][T12447] netlink: 'syz.0.13745': attribute type 1 has an invalid length. [ 908.951674][ T4256] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz0] on syz1 [ 909.009091][T12461] loop0: detected capacity change from 0 to 512 [ 909.027697][T12461] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 909.031244][T12300] veth0_vlan: entered promiscuous mode [ 909.042386][T12461] EXT4-fs (loop0): invalid journal inode [ 909.044646][T12300] veth1_vlan: entered promiscuous mode [ 909.053536][T12461] EXT4-fs (loop0): can't get journal size [ 909.066515][T12461] EXT4-fs (loop0): 1 truncate cleaned up [ 909.074426][T12300] veth0_macvtap: entered promiscuous mode [ 909.086873][T12300] veth1_macvtap: entered promiscuous mode [ 909.098330][T12300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.113386][T12300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.125126][T17054] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.149706][T17054] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.162515][T12469] loop1: detected capacity change from 0 to 512 [ 909.172154][T12469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 909.186809][T12469] EXT4-fs (loop1): 1 truncate cleaned up [ 909.193624][T15549] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.202628][T15549] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.244209][T12472] program syz.0.13750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.272247][T12480] program syz.8.13753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.285158][T12482] loop1: detected capacity change from 0 to 128 [ 909.318962][T12488] loop4: detected capacity change from 0 to 512 [ 909.326271][T12488] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 909.335046][T12488] EXT4-fs (loop4): invalid journal inode [ 909.340842][T12488] EXT4-fs (loop4): can't get journal size [ 909.347705][T12488] EXT4-fs (loop4): 1 truncate cleaned up [ 909.382595][T12495] serio: Serial port ptm0 [ 909.388629][T12497] loop8: detected capacity change from 0 to 512 [ 909.395912][T12497] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 909.407930][T12497] EXT4-fs error (device loop8): ext4_init_orphan_info:618: comm syz.8.13760: orphan file block 0: bad magic [ 909.420307][T12497] EXT4-fs (loop8): Remounting filesystem read-only [ 909.428163][T12497] EXT4-fs (loop8): mount failed [ 909.434609][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 909.434622][ T29] audit: type=1326 audit(1761167963.813:74423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.465454][ T29] audit: type=1326 audit(1761167963.823:74424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.489254][ T29] audit: type=1326 audit(1761167963.823:74425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.512999][ T29] audit: type=1326 audit(1761167963.823:74426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.536666][ T29] audit: type=1326 audit(1761167963.823:74427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.560258][ T29] audit: type=1326 audit(1761167963.823:74428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.584007][ T29] audit: type=1326 audit(1761167963.823:74429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.607736][ T29] audit: type=1326 audit(1761167963.823:74430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.631583][ T29] audit: type=1326 audit(1761167963.823:74431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.655302][ T29] audit: type=1326 audit(1761167963.823:74432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.1.13762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80a338efc9 code=0x7ffc0000 [ 909.689795][T12507] loop8: detected capacity change from 0 to 1024 [ 909.697263][T12507] EXT4-fs: Ignoring removed orlov option [ 909.740539][T12513] loop4: detected capacity change from 0 to 512 [ 909.754902][T12513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 909.777747][T12513] EXT4-fs (loop4): 1 truncate cleaned up [ 909.802081][T12513] bridge0: port 3(ipvlan2) entered blocking state [ 909.808634][T12513] bridge0: port 3(ipvlan2) entered disabled state [ 909.815302][T12513] ipvlan2: entered allmulticast mode [ 909.820944][T12513] bridge0: entered allmulticast mode [ 909.826807][T12513] ipvlan2: left allmulticast mode [ 909.831850][T12513] bridge0: left allmulticast mode [ 909.845205][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13763'. [ 909.912022][T12521] program syz.8.13766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 910.001867][T12533] loop0: detected capacity change from 0 to 512 [ 910.009542][T12533] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 910.034771][T12533] EXT4-fs (loop0): invalid journal inode [ 910.040442][T12533] EXT4-fs (loop0): can't get journal size [ 910.047022][T12533] EXT4-fs (loop0): 1 truncate cleaned up [ 910.086598][T12542] loop4: detected capacity change from 0 to 512 [ 910.096741][T12542] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.132698][T12553] loop4: detected capacity change from 0 to 512 [ 910.140219][T12553] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 910.149002][T12553] EXT4-fs (loop4): invalid journal inode [ 910.154686][T12553] EXT4-fs (loop4): can't get journal size [ 910.160974][T12553] EXT4-fs (loop4): 1 truncate cleaned up [ 910.184143][T12558] FAULT_INJECTION: forcing a failure. [ 910.184143][T12558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.197342][T12558] CPU: 0 UID: 0 PID: 12558 Comm: syz.4.13777 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 910.197369][T12558] Tainted: [W]=WARN [ 910.197374][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 910.197385][T12558] Call Trace: [ 910.197392][T12558] [ 910.197399][T12558] __dump_stack+0x1d/0x30 [ 910.197422][T12558] dump_stack_lvl+0xe8/0x140 [ 910.197507][T12558] dump_stack+0x15/0x1b [ 910.197521][T12558] should_fail_ex+0x265/0x280 [ 910.197546][T12558] should_fail+0xb/0x20 [ 910.197561][T12558] should_fail_usercopy+0x1a/0x20 [ 910.197611][T12558] _copy_from_iter+0xd2/0xe80 [ 910.197628][T12558] ? __build_skb_around+0x1ab/0x200 [ 910.197649][T12558] ? __alloc_skb+0x223/0x320 [ 910.197702][T12558] netlink_sendmsg+0x471/0x6b0 [ 910.197728][T12558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.197752][T12558] __sock_sendmsg+0x145/0x180 [ 910.197770][T12558] ____sys_sendmsg+0x31e/0x4e0 [ 910.197855][T12558] ___sys_sendmsg+0x17b/0x1d0 [ 910.197886][T12558] __x64_sys_sendmsg+0xd4/0x160 [ 910.197953][T12558] x64_sys_call+0x191e/0x3000 [ 910.197970][T12558] do_syscall_64+0xd2/0x200 [ 910.197984][T12558] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 910.198003][T12558] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 910.198024][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.198050][T12558] RIP: 0033:0x7f697244efc9 [ 910.198117][T12558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.198134][T12558] RSP: 002b:00007f6970eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.198149][T12558] RAX: ffffffffffffffda RBX: 00007f69726a5fa0 RCX: 00007f697244efc9 [ 910.198158][T12558] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 910.198168][T12558] RBP: 00007f6970eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 910.198177][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.198186][T12558] R13: 00007f69726a6038 R14: 00007f69726a5fa0 R15: 00007ffe36d78f18 [ 910.198219][T12558] [ 910.621937][T12567] loop1: detected capacity change from 0 to 512 [ 910.646656][T12567] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.712429][T12571] loop9: detected capacity change from 0 to 512 [ 910.719831][T12571] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 910.738011][T12571] EXT4-fs (loop9): 1 truncate cleaned up [ 910.762627][T12571] bridge0: port 3(ipvlan2) entered blocking state [ 910.769155][T12571] bridge0: port 3(ipvlan2) entered disabled state [ 910.776043][T12571] ipvlan2: entered allmulticast mode [ 910.781333][T12571] bridge0: entered allmulticast mode [ 910.787321][T12571] ipvlan2: left allmulticast mode [ 910.792354][T12571] bridge0: left allmulticast mode [ 910.904346][ T3402] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz0] on syz1 [ 910.982269][T12580] loop8: detected capacity change from 0 to 512 [ 910.999216][T12580] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 911.008148][T12580] EXT4-fs (loop8): invalid journal inode [ 911.013869][T12580] EXT4-fs (loop8): can't get journal size [ 911.020430][T12580] EXT4-fs (loop8): 1 truncate cleaned up [ 911.062619][T12587] loop9: detected capacity change from 0 to 512 [ 911.098495][T12587] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.138927][T12593] loop8: detected capacity change from 0 to 1024 [ 911.150101][T12593] EXT4-fs: Ignoring removed orlov option [ 911.218518][T12597] loop9: detected capacity change from 0 to 512 [ 911.257270][T12597] EXT4-fs (loop9): orphan cleanup on readonly fs [ 911.275238][T12597] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.13792: bad orphan inode 13 [ 911.318820][T12597] ext4_test_bit(bit=12, block=18) = 1 [ 911.324217][T12597] is_bad_inode(inode)=0 [ 911.328421][T12597] NEXT_ORPHAN(inode)=2130706432 [ 911.333260][T12597] max_ino=32 [ 911.336576][T12597] i_nlink=1 [ 911.356143][T12597] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 911.378001][T12597] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 911.415812][T12606] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 911.421904][T12607] loop4: detected capacity change from 0 to 512 [ 911.431077][T12597] Restarting kernel threads ... [ 911.440837][T12607] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 911.440998][T12597] Done restarting kernel threads. [ 911.462530][T12607] EXT4-fs (loop4): 1 truncate cleaned up [ 911.785597][T12629] loop9: detected capacity change from 0 to 512 [ 911.792622][T12629] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 911.803579][T12629] EXT4-fs error (device loop9): ext4_init_orphan_info:618: comm syz.9.13801: orphan file block 0: bad magic [ 911.815433][T12629] EXT4-fs (loop9): Remounting filesystem read-only [ 911.822020][T12629] EXT4-fs (loop9): mount failed [ 911.887799][T12636] loop9: detected capacity change from 0 to 1024 [ 911.888700][T12638] loop8: detected capacity change from 0 to 512 [ 911.894964][T12636] EXT4-fs: Ignoring removed orlov option [ 911.902825][T12638] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 911.914754][T12638] EXT4-fs (loop8): invalid journal inode [ 911.920531][T12638] EXT4-fs (loop8): can't get journal size [ 911.927122][T12638] EXT4-fs (loop8): 1 truncate cleaned up [ 911.967993][T12647] loop9: detected capacity change from 0 to 512 [ 911.987954][T12647] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.165746][T12654] program syz.9.13810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.228328][T12660] loop0: detected capacity change from 0 to 512 [ 912.235348][T12660] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 912.246184][T12660] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.13813: orphan file block 0: bad magic [ 912.258147][T12660] EXT4-fs (loop0): Remounting filesystem read-only [ 912.264996][T12660] EXT4-fs (loop0): mount failed [ 912.368190][T12668] loop0: detected capacity change from 0 to 512 [ 912.375794][T12668] EXT4-fs (loop0): orphan cleanup on readonly fs [ 912.382758][T12668] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.13816: bad orphan inode 13 [ 912.393083][T12668] ext4_test_bit(bit=12, block=18) = 1 [ 912.398490][T12668] is_bad_inode(inode)=0 [ 912.402733][T12668] NEXT_ORPHAN(inode)=2130706432 [ 912.407590][T12668] max_ino=32 [ 912.410772][T12668] i_nlink=1 [ 912.415937][T12668] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 912.435082][T12668] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 912.453818][T12674] serio: Serial port ptm0 [ 912.459830][T12668] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 912.469201][T12668] Restarting kernel threads ... [ 912.474218][T12668] Done restarting kernel threads. [ 912.541458][T12677] program syz.0.13819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.591454][T12683] serio: Serial port ptm1 [ 912.754210][T12694] loop4: detected capacity change from 0 to 512 [ 912.761224][T12694] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 912.770188][T12694] EXT4-fs (loop4): invalid journal inode [ 912.776009][T12694] EXT4-fs (loop4): can't get journal size [ 912.791536][T12694] EXT4-fs (loop4): 1 truncate cleaned up [ 912.812675][T12699] serio: Serial port ptm0 [ 912.927313][T12711] program syz.9.13832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.998241][T12713] loop9: detected capacity change from 0 to 512 [ 913.013792][T12713] /dev/loop9: Can't open blockdev [ 913.094915][T12727] serio: Serial port ptm0 [ 913.257781][T12732] loop1: detected capacity change from 0 to 512 [ 913.264485][T12732] /dev/loop1: Can't open blockdev [ 913.270348][T12732] binfmt_misc: register: failed to install interpreter file ./file0 [ 913.490763][T12739] program syz.1.13844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 913.570844][T12745] loop0: detected capacity change from 0 to 512 [ 913.586767][T12745] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.622088][T12750] loop0: detected capacity change from 0 to 512 [ 913.632707][T12750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 913.643739][T12750] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.13848: orphan file block 0: bad magic [ 913.656563][T12750] EXT4-fs (loop0): Remounting filesystem read-only [ 913.663307][T12750] EXT4-fs (loop0): mount failed [ 913.690153][T12753] loop0: detected capacity change from 0 to 512 [ 913.697218][T12753] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 913.705902][T12753] EXT4-fs (loop0): invalid journal inode [ 913.711626][T12753] EXT4-fs (loop0): can't get journal size [ 913.718492][T12753] EXT4-fs (loop0): 1 truncate cleaned up [ 913.857299][T12764] serio: Serial port ptm0 [ 913.865230][T12762] loop1: detected capacity change from 0 to 512 [ 913.872184][T12762] /dev/loop1: Can't open blockdev [ 913.886970][T12762] bridge0: port 3(ipvlan2) entered blocking state [ 913.893488][T12762] bridge0: port 3(ipvlan2) entered disabled state [ 913.900337][T12762] ipvlan2: entered allmulticast mode [ 913.905656][T12762] bridge0: entered allmulticast mode [ 913.911784][T12762] ipvlan2: left allmulticast mode [ 913.916930][T12762] bridge0: left allmulticast mode [ 914.070998][T12778] bridge0: port 3(ipvlan2) entered blocking state [ 914.077502][T12778] bridge0: port 3(ipvlan2) entered disabled state [ 914.080626][T12782] loop8: detected capacity change from 0 to 512 [ 914.093503][T12778] ipvlan2: entered allmulticast mode [ 914.098910][T12778] bridge0: entered allmulticast mode [ 914.105331][T12778] ipvlan2: left allmulticast mode [ 914.110381][T12778] bridge0: left allmulticast mode [ 914.116258][T12784] validate_nla: 18 callbacks suppressed [ 914.116323][T12784] netlink: 'syz.0.13856': attribute type 1 has an invalid length. [ 914.129744][T12784] netlink: 'syz.0.13856': attribute type 2 has an invalid length. [ 914.138890][T12782] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.247627][T12794] loop9: detected capacity change from 0 to 512 [ 914.268800][T12794] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.349400][T12808] loop9: detected capacity change from 0 to 512 [ 914.364363][T12808] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 914.390953][T12808] EXT4-fs (loop9): 1 truncate cleaned up [ 914.402180][T12811] serio: Serial port ptm0 [ 914.486370][T12816] loop9: detected capacity change from 0 to 512 [ 914.501894][T12814] netlink: 'syz.8.13864': attribute type 1 has an invalid length. [ 914.509905][T12814] netlink: 'syz.8.13864': attribute type 2 has an invalid length. [ 914.518677][T12816] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 914.531231][T12816] EXT4-fs error (device loop9): ext4_init_orphan_info:618: comm syz.9.13872: orphan file block 0: bad magic [ 914.543042][T12816] EXT4-fs (loop9): Remounting filesystem read-only [ 914.550377][T12816] EXT4-fs (loop9): mount failed [ 914.593497][ T29] kauditd_printk_skb: 1229 callbacks suppressed [ 914.593510][ T29] audit: type=1326 audit(1761167968.973:75662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.625160][ T29] audit: type=1326 audit(1761167969.013:75663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.629844][T12821] netlink: 'syz.9.13874': attribute type 2 has an invalid length. [ 914.648880][ T29] audit: type=1326 audit(1761167969.013:75664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.656642][T12821] netlink: 'syz.9.13874': attribute type 1 has an invalid length. [ 914.680317][ T29] audit: type=1326 audit(1761167969.013:75665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.711832][ T29] audit: type=1326 audit(1761167969.013:75666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.735683][ T29] audit: type=1326 audit(1761167969.013:75667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.742338][ T3536] hid_parser_main: 94 callbacks suppressed [ 914.742354][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.759326][ T29] audit: type=1326 audit(1761167969.013:75668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.767975][ T29] audit: type=1326 audit(1761167969.013:75669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.772695][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.796321][ T29] audit: type=1326 audit(1761167969.013:75670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.819995][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.827437][ T29] audit: type=1326 audit(1761167969.013:75671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.9.13874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 914.882206][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.889753][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.897189][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.904560][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.912344][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.919937][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.927341][ T3536] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 914.950572][ T3536] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz0] on syz1 [ 914.983560][T12821] netlink: 'syz.9.13874': attribute type 4 has an invalid length. [ 915.004943][T12834] serio: Serial port ptm0 [ 915.117995][T12850] loop0: detected capacity change from 0 to 1024 [ 915.145492][T12850] EXT4-fs: Ignoring removed orlov option [ 915.293340][T12859] loop8: detected capacity change from 0 to 512 [ 915.300518][T12861] loop0: detected capacity change from 0 to 1024 [ 915.315297][T12861] EXT4-fs: Ignoring removed orlov option [ 915.322609][T12859] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.466653][T12876] netlink: 'syz.4.13894': attribute type 2 has an invalid length. [ 915.474498][T12876] netlink: 'syz.4.13894': attribute type 1 has an invalid length. [ 915.518571][ T3536] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz0] on syz1 [ 915.536219][T12880] loop8: detected capacity change from 0 to 512 [ 915.551065][T12883] program syz.9.13897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.565859][T12880] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 915.574420][T12876] netlink: 'syz.4.13894': attribute type 4 has an invalid length. [ 915.597123][T12880] EXT4-fs (loop8): invalid journal inode [ 915.599933][T12885] loop9: detected capacity change from 0 to 1024 [ 915.602847][T12880] EXT4-fs (loop8): can't get journal size [ 915.620780][T12885] EXT4-fs: Ignoring removed orlov option [ 915.626728][T12880] EXT4-fs (loop8): 1 truncate cleaned up [ 915.786067][T12902] serio: Serial port ptm0 [ 916.046784][ T3536] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz0] on syz1 [ 916.191072][T12917] loop1: detected capacity change from 0 to 512 [ 916.198585][T12917] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 916.209898][T12917] EXT4-fs (loop1): 1 truncate cleaned up [ 916.236248][T12920] program syz.0.13912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.398292][T12937] serio: Serial port ptm1 [ 916.583339][ T3536] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz0] on syz1 [ 916.635073][T12945] loop9: detected capacity change from 0 to 512 [ 916.641965][T12945] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 916.653404][T12945] EXT4-fs (loop9): 1 truncate cleaned up [ 916.672548][T12950] program syz.8.13924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.678117][T12945] bridge0: port 3(ipvlan2) entered blocking state [ 916.686321][T12947] loop1: detected capacity change from 0 to 512 [ 916.688477][T12945] bridge0: port 3(ipvlan2) entered disabled state [ 916.698205][T12947] /dev/loop1: Can't open blockdev [ 916.701397][T12945] ipvlan2: entered allmulticast mode [ 916.711490][T12945] bridge0: entered allmulticast mode [ 916.715125][T12947] Restarting kernel threads ... [ 916.717432][T12945] ipvlan2: left allmulticast mode [ 916.726774][T12945] bridge0: left allmulticast mode [ 916.730464][T12947] Done restarting kernel threads. [ 916.836856][T12968] loop4: detected capacity change from 0 to 512 [ 916.848389][T12968] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 916.867033][T12975] program syz.1.13935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.975367][T12991] binfmt_misc: register: failed to install interpreter file ./file0 [ 917.250526][T12998] loop0: detected capacity change from 0 to 1024 [ 917.257616][T12998] EXT4-fs: Ignoring removed orlov option [ 917.289518][T13001] serio: Serial port ptm0 [ 917.640263][ T3536] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 917.720497][T13009] program syz.8.13948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.758350][T13013] loop8: detected capacity change from 0 to 512 [ 917.765507][T13013] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 917.774276][T13013] EXT4-fs (loop8): invalid journal inode [ 917.780094][T13013] EXT4-fs (loop8): can't get journal size [ 917.789009][T13013] EXT4-fs (loop8): 1 truncate cleaned up [ 917.810526][T13015] loop4: detected capacity change from 0 to 512 [ 917.826754][T13015] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.856333][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13952'. [ 917.860570][T13025] loop1: detected capacity change from 0 to 512 [ 917.873069][T13025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 917.885064][T13025] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.13954: orphan file block 0: bad magic [ 917.897833][T13025] EXT4-fs (loop1): Remounting filesystem read-only [ 917.904522][T13025] EXT4-fs (loop1): mount failed [ 917.950938][T13038] serio: Serial port ptm1 [ 917.975874][T13043] program syz.1.13960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 918.007894][T13049] loop9: detected capacity change from 0 to 512 [ 918.015400][T13049] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 918.027176][T13049] EXT4-fs (loop9): 1 truncate cleaned up [ 918.812296][T13068] loop8: detected capacity change from 0 to 512 [ 918.828008][T13068] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 918.901965][ T3536] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 919.066086][T13083] serio: Serial port ptm0 [ 919.080609][T13086] program syz.4.13976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.102882][T13088] loop1: detected capacity change from 0 to 512 [ 919.125705][T13088] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 919.138623][T13088] EXT4-fs (loop1): invalid journal inode [ 919.142624][T13092] loop4: detected capacity change from 0 to 1024 [ 919.145001][T13088] EXT4-fs (loop1): can't get journal size [ 919.152744][T13092] EXT4-fs: Ignoring removed orlov option [ 919.160091][T13088] EXT4-fs (loop1): 1 truncate cleaned up [ 919.189176][T13094] loop0: detected capacity change from 0 to 512 [ 919.213946][T13094] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.230676][T13098] loop1: detected capacity change from 0 to 512 [ 919.237668][T13098] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 919.252264][T13098] EXT4-fs (loop1): invalid journal inode [ 919.259014][T13098] EXT4-fs (loop1): can't get journal size [ 919.269557][T13098] EXT4-fs (loop1): 1 truncate cleaned up [ 919.350996][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13989'. [ 919.432608][T13124] loop0: detected capacity change from 0 to 512 [ 919.452317][T13124] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.521415][T13131] loop0: detected capacity change from 0 to 512 [ 919.529541][T13131] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 919.538275][T13131] EXT4-fs (loop0): invalid journal inode [ 919.543956][T13131] EXT4-fs (loop0): can't get journal size [ 919.550640][T13131] EXT4-fs (loop0): 1 truncate cleaned up [ 919.574684][T13134] loop0: detected capacity change from 0 to 512 [ 919.581759][T13134] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 919.584921][T13135] validate_nla: 22 callbacks suppressed [ 919.584935][T13135] netlink: 'syz.1.13988': attribute type 1 has an invalid length. [ 919.601301][T13134] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.13994: orphan file block 0: bad magic [ 919.605136][T13135] netlink: 'syz.1.13988': attribute type 2 has an invalid length. [ 919.619287][T13134] EXT4-fs (loop0): Remounting filesystem read-only [ 919.631248][T13134] EXT4-fs (loop0): mount failed [ 919.699380][T13144] serio: Serial port ptm0 [ 919.906994][ T29] kauditd_printk_skb: 1274 callbacks suppressed [ 919.907008][ T29] audit: type=1326 audit(1761167974.293:76946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 919.937071][ T29] audit: type=1326 audit(1761167974.293:76947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 919.961670][T13155] loop0: detected capacity change from 0 to 512 [ 919.968904][ T29] audit: type=1326 audit(1761167974.293:76948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 919.986938][T13155] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.992665][ T29] audit: type=1326 audit(1761167974.293:76949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 920.027068][ T29] audit: type=1326 audit(1761167974.293:76950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 920.050736][ T29] audit: type=1326 audit(1761167974.293:76951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 920.074396][ T29] audit: type=1326 audit(1761167974.293:76952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 920.098154][ T29] audit: type=1326 audit(1761167974.293:76953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 920.121849][ T29] audit: type=1326 audit(1761167974.293:76954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 920.145460][ T29] audit: type=1326 audit(1761167974.293:76955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.0.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 920.228370][T13170] loop0: detected capacity change from 0 to 512 [ 920.235601][T13170] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 920.284566][T13170] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.14006: orphan file block 0: bad magic [ 920.297491][T13170] EXT4-fs (loop0): Remounting filesystem read-only [ 920.304289][T13170] EXT4-fs (loop0): mount failed [ 920.317204][T13172] program syz.9.14009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 920.386111][T13179] loop9: detected capacity change from 0 to 512 [ 920.394379][T13182] netlink: 'syz.0.14012': attribute type 2 has an invalid length. [ 920.402314][T13182] netlink: 'syz.0.14012': attribute type 1 has an invalid length. [ 920.403261][T13179] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 920.419890][T13174] loop1: detected capacity change from 0 to 512 [ 920.431268][T13179] EXT4-fs (loop9): invalid journal inode [ 920.437648][T13179] EXT4-fs (loop9): can't get journal size [ 920.440626][ T3536] hid_parser_main: 146 callbacks suppressed [ 920.440642][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.444989][T13174] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.449362][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.457308][T13179] EXT4-fs (loop9): 1 truncate cleaned up [ 920.467110][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.487479][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.494923][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.502306][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.509724][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.517138][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.524525][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.532001][ T3536] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 920.540134][T13184] loop4: detected capacity change from 0 to 512 [ 920.546623][ T3536] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 920.557234][T13184] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 920.575485][T13182] netlink: 'syz.0.14012': attribute type 4 has an invalid length. [ 920.587985][T13184] EXT4-fs (loop4): 1 truncate cleaned up [ 920.607351][T13184] bridge0: port 3(ipvlan2) entered blocking state [ 920.613810][T13184] bridge0: port 3(ipvlan2) entered disabled state [ 920.620535][T13184] ipvlan2: entered allmulticast mode [ 920.625931][T13184] bridge0: entered allmulticast mode [ 920.631832][T13184] ipvlan2: left allmulticast mode [ 920.636869][T13184] bridge0: left allmulticast mode [ 920.707902][T13191] program syz.9.14014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 920.853086][T13207] program syz.4.14022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 920.902069][T13212] loop4: detected capacity change from 0 to 512 [ 920.909020][T13212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 920.919762][T13212] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.14023: orphan file block 0: bad magic [ 920.934764][T13212] EXT4-fs (loop4): Remounting filesystem read-only [ 920.941584][T13212] EXT4-fs (loop4): mount failed [ 920.977643][T13203] netlink: 'syz.0.14020': attribute type 1 has an invalid length. [ 920.985528][T13203] netlink: 'syz.0.14020': attribute type 2 has an invalid length. [ 921.128402][T13224] loop8: detected capacity change from 0 to 512 [ 921.136025][T13224] EXT4-fs (loop8): orphan cleanup on readonly fs [ 921.142804][T13224] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.14028: bad orphan inode 13 [ 921.153196][T13224] ext4_test_bit(bit=12, block=18) = 1 [ 921.158687][T13224] is_bad_inode(inode)=0 [ 921.162889][T13224] NEXT_ORPHAN(inode)=2130706432 [ 921.167778][T13224] max_ino=32 [ 921.170960][T13224] i_nlink=1 [ 921.183893][T13224] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 921.195891][T13224] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 921.205685][T13224] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 921.214876][T13224] Restarting kernel threads ... [ 921.219998][T13224] Done restarting kernel threads. [ 921.270551][T13233] loop4: detected capacity change from 0 to 512 [ 921.277428][T13233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 921.288587][T13233] EXT4-fs (loop4): 1 truncate cleaned up [ 921.312895][T13233] bridge0: port 3(ipvlan2) entered blocking state [ 921.319394][T13233] bridge0: port 3(ipvlan2) entered disabled state [ 921.326737][T13233] ipvlan2: entered allmulticast mode [ 921.332025][T13233] bridge0: entered allmulticast mode [ 921.338185][T13233] ipvlan2: left allmulticast mode [ 921.343214][T13233] bridge0: left allmulticast mode [ 921.458062][T13238] loop9: detected capacity change from 0 to 512 [ 921.464971][T13238] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 921.476666][T13238] EXT4-fs (loop9): invalid journal inode [ 921.491411][T13238] EXT4-fs (loop9): can't get journal size [ 921.498051][T13238] EXT4-fs (loop9): 1 truncate cleaned up [ 921.613222][T13259] loop9: detected capacity change from 0 to 512 [ 921.620164][T13259] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 921.632040][T13259] EXT4-fs (loop9): 1 truncate cleaned up [ 921.659386][T13259] bridge0: port 3(ipvlan2) entered blocking state [ 921.665920][T13259] bridge0: port 3(ipvlan2) entered disabled state [ 921.695064][T13259] ipvlan2: entered allmulticast mode [ 921.700387][T13259] bridge0: entered allmulticast mode [ 921.730323][T13259] ipvlan2: left allmulticast mode [ 921.735417][T13259] bridge0: left allmulticast mode [ 921.764487][T13267] loop8: detected capacity change from 0 to 512 [ 921.782628][T13267] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.803493][T13271] loop0: detected capacity change from 0 to 512 [ 921.816710][T13271] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 921.832797][T13271] EXT4-fs (loop0): invalid journal inode [ 921.838734][T13271] EXT4-fs (loop0): can't get journal size [ 921.859627][T13271] EXT4-fs (loop0): 1 truncate cleaned up [ 921.971694][T13296] serio: Serial port ptm0 [ 921.995185][T13301] loop9: detected capacity change from 0 to 512 [ 922.041214][T13301] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.373357][T13312] netlink: 'syz.9.14059': attribute type 1 has an invalid length. [ 922.381233][T13312] netlink: 'syz.9.14059': attribute type 2 has an invalid length. [ 922.417095][T13314] loop8: detected capacity change from 0 to 512 [ 922.471308][T13314] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 922.481911][T13314] EXT4-fs (loop8): invalid journal inode [ 922.488077][T13314] EXT4-fs (loop8): can't get journal size [ 922.495885][T13314] EXT4-fs (loop8): 1 truncate cleaned up [ 922.505999][T13319] loop4: detected capacity change from 0 to 512 [ 922.514001][T13319] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 922.526974][T13319] EXT4-fs (loop4): 1 truncate cleaned up [ 922.539184][T13326] loop1: detected capacity change from 0 to 512 [ 922.546122][T13326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 922.551355][T13328] loop8: detected capacity change from 0 to 512 [ 922.564748][T13326] EXT4-fs (loop1): 1 truncate cleaned up [ 922.567773][T13319] bridge0: port 3(ipvlan2) entered blocking state [ 922.571097][T13328] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 922.576902][T13319] bridge0: port 3(ipvlan2) entered disabled state [ 922.591146][T13328] EXT4-fs (loop8): invalid journal inode [ 922.597478][T13328] EXT4-fs (loop8): can't get journal size [ 922.603766][T13319] ipvlan2: entered allmulticast mode [ 922.609220][T13319] bridge0: entered allmulticast mode [ 922.615339][T13319] ipvlan2: left allmulticast mode [ 922.615365][T13328] EXT4-fs (loop8): 1 truncate cleaned up [ 922.620403][T13319] bridge0: left allmulticast mode [ 922.738842][T13338] loop8: detected capacity change from 0 to 512 [ 922.760745][T13340] serio: Serial port ptm0 [ 922.765714][T13338] EXT4-fs (loop8): orphan cleanup on readonly fs [ 922.772320][T13338] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.14069: bad orphan inode 13 [ 922.784661][T13338] ext4_test_bit(bit=12, block=18) = 1 [ 922.790092][T13338] is_bad_inode(inode)=0 [ 922.794240][T13338] NEXT_ORPHAN(inode)=2130706432 [ 922.799135][T13338] max_ino=32 [ 922.802344][T13338] i_nlink=1 [ 922.806931][T13336] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 922.828357][T13336] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 922.838162][T13336] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 922.846940][T13336] Restarting kernel threads ... [ 922.852068][T13336] Done restarting kernel threads. [ 922.908192][T13349] netlink: 'syz.1.14067': attribute type 1 has an invalid length. [ 922.960227][ T3536] hid-generic 0000:0000:0000.005D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 923.229847][T13373] loop0: detected capacity change from 0 to 1024 [ 923.237256][T13373] EXT4-fs: Ignoring removed orlov option [ 923.284441][T13375] loop8: detected capacity change from 0 to 512 [ 923.314960][T13375] EXT4-fs (loop8): orphan cleanup on readonly fs [ 923.338436][T13375] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.14083: bad orphan inode 13 [ 923.373485][T13375] ext4_test_bit(bit=12, block=18) = 1 [ 923.378933][T13375] is_bad_inode(inode)=0 [ 923.383121][T13375] NEXT_ORPHAN(inode)=2130706432 [ 923.387976][T13375] max_ino=32 [ 923.391163][T13375] i_nlink=1 [ 923.437316][T13372] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 923.485737][T13372] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 923.507304][T13375] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 923.547963][T13372] Restarting kernel threads ... [ 923.553184][T13372] Done restarting kernel threads. [ 923.600882][T13381] loop8: detected capacity change from 0 to 512 [ 923.607704][T13381] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 923.616554][T13381] EXT4-fs (loop8): invalid journal inode [ 923.622255][T13381] EXT4-fs (loop8): can't get journal size [ 923.629655][T13381] EXT4-fs (loop8): 1 truncate cleaned up [ 923.690987][T13387] serio: Serial port ptm0 [ 923.831185][T13392] loop4: detected capacity change from 0 to 512 [ 923.838248][T13392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 923.852525][T13392] EXT4-fs (loop4): 1 truncate cleaned up [ 923.905673][T13395] program syz.0.14088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.980265][T13403] loop4: detected capacity change from 0 to 512 [ 923.985952][ T3395] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 923.987519][T13403] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 924.005175][T13403] EXT4-fs (loop4): invalid journal inode [ 924.010967][T13403] EXT4-fs (loop4): can't get journal size [ 924.017219][T13403] EXT4-fs (loop4): 1 truncate cleaned up [ 924.051156][T13408] serio: Serial port ptm1 [ 924.067651][T13411] loop0: detected capacity change from 0 to 512 [ 924.090206][T13411] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.121965][T13417] program syz.9.14098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 924.152467][T13421] loop9: detected capacity change from 0 to 1024 [ 924.159640][T13421] EXT4-fs: Ignoring removed orlov option [ 924.168825][T13423] loop0: detected capacity change from 0 to 512 [ 924.187632][T13423] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.248909][T13433] loop4: detected capacity change from 0 to 512 [ 924.259212][T13433] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 924.280653][T13433] EXT4-fs (loop4): 1 truncate cleaned up [ 924.334521][ T3395] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 924.421162][T13448] loop0: detected capacity change from 0 to 512 [ 924.437370][T13448] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.495110][T13454] program syz.0.14109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 924.509564][T13456] loop4: detected capacity change from 0 to 512 [ 924.525205][T13456] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 924.569322][T13456] EXT4-fs (loop4): 1 truncate cleaned up [ 924.614906][T13458] serio: Serial port ptm0 [ 924.619374][T13466] loop8: detected capacity change from 0 to 512 [ 924.626257][T13466] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 924.638972][T13466] EXT4-fs (loop8): invalid journal inode [ 924.639843][T13456] bridge0: port 3(ipvlan2) entered blocking state [ 924.644690][T13466] EXT4-fs (loop8): can't get journal size [ 924.651227][T13456] bridge0: port 3(ipvlan2) entered disabled state [ 924.659403][T13466] EXT4-fs (loop8): 1 truncate cleaned up [ 924.663628][T13456] ipvlan2: entered allmulticast mode [ 924.674336][T13456] bridge0: entered allmulticast mode [ 924.680298][T13456] ipvlan2: left allmulticast mode [ 924.685360][T13456] bridge0: left allmulticast mode [ 924.696267][T13468] loop1: detected capacity change from 0 to 512 [ 924.705754][T13468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 924.720651][T13468] EXT4-fs (loop1): 1 truncate cleaned up [ 924.741611][T13472] validate_nla: 10 callbacks suppressed [ 924.741626][T13472] netlink: 'syz.8.14118': attribute type 2 has an invalid length. [ 924.755069][T13472] netlink: 'syz.8.14118': attribute type 1 has an invalid length. [ 924.756539][T13474] netlink: 'syz.9.14117': attribute type 2 has an invalid length. [ 924.770741][T13474] netlink: 'syz.9.14117': attribute type 1 has an invalid length. [ 924.791352][ T3395] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz0] on syz1 [ 924.804223][ T3536] hid-generic 0000:0000:0000.0061: hidraw1: HID v0.00 Device [syz0] on syz1 [ 924.818528][T13474] netlink: 'syz.9.14117': attribute type 4 has an invalid length. [ 924.834568][T13477] loop0: detected capacity change from 0 to 512 [ 924.835311][T13472] netlink: 'syz.8.14118': attribute type 4 has an invalid length. [ 924.856523][T13477] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.894778][T13485] loop9: detected capacity change from 0 to 512 [ 924.919996][ T29] kauditd_printk_skb: 1183 callbacks suppressed [ 924.920008][ T29] audit: type=1326 audit(1761167979.303:78139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.8.14124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae63a0efc9 code=0x0 [ 924.959082][T13485] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.970197][ T29] audit: type=1326 audit(1761167979.353:78140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.9.14122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5e6c5d810 code=0x7ffc0000 [ 924.994077][ T29] audit: type=1326 audit(1761167979.353:78141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.9.14122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd5e6c5dd17 code=0x7ffc0000 [ 925.017726][ T29] audit: type=1326 audit(1761167979.353:78142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.9.14122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5e6c5d810 code=0x7ffc0000 [ 925.041437][ T29] audit: type=1326 audit(1761167979.353:78143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.9.14122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 925.065118][ T29] audit: type=1326 audit(1761167979.353:78144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.9.14122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 925.075275][T13505] loop0: detected capacity change from 0 to 1024 [ 925.095663][T13505] EXT4-fs: Ignoring removed orlov option [ 925.101579][ T29] audit: type=1326 audit(1761167979.393:78145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.9.14122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 925.125215][ T29] audit: type=1326 audit(1761167979.453:78146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.9.14122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 925.149122][ T29] audit: type=1326 audit(1761167979.453:78147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.9.14122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 925.173569][ T29] audit: type=1326 audit(1761167979.453:78148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13502 comm="syz.0.14128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3004d2efc9 code=0x7ffc0000 [ 925.205695][T13511] loop1: detected capacity change from 0 to 512 [ 925.212450][T13511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 925.226769][T13511] EXT4-fs (loop1): 1 truncate cleaned up [ 925.230146][T13513] serio: Serial port ptm0 [ 925.248814][T13511] bridge0: port 3(ipvlan2) entered blocking state [ 925.255317][T13511] bridge0: port 3(ipvlan2) entered disabled state [ 925.262260][T13511] ipvlan2: entered allmulticast mode [ 925.267576][T13511] bridge0: entered allmulticast mode [ 925.273870][T13511] ipvlan2: left allmulticast mode [ 925.278985][T13511] bridge0: left allmulticast mode [ 925.420899][T13522] netlink: 'syz.9.14134': attribute type 2 has an invalid length. [ 925.428833][T13522] netlink: 'syz.9.14134': attribute type 1 has an invalid length. [ 925.443532][T13524] loop1: detected capacity change from 0 to 512 [ 925.450573][T13524] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 925.463125][ T3536] hid_parser_main: 146 callbacks suppressed [ 925.463141][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.476515][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.483892][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.491294][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.498771][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.506208][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.513621][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.521288][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.528704][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.536198][ T3536] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.546702][T13524] EXT4-fs (loop1): 1 truncate cleaned up [ 925.571995][T13524] bridge0: port 3(ipvlan2) entered blocking state [ 925.578499][T13524] bridge0: port 3(ipvlan2) entered disabled state [ 925.585417][T13524] ipvlan2: entered allmulticast mode [ 925.590781][T13524] bridge0: entered allmulticast mode [ 925.596606][T13524] ipvlan2: left allmulticast mode [ 925.601667][T13524] bridge0: left allmulticast mode [ 925.605236][ T3536] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz0] on syz1 [ 925.618862][T13522] netlink: 'syz.9.14134': attribute type 4 has an invalid length. [ 925.798518][T13545] loop8: detected capacity change from 0 to 512 [ 925.813576][T13543] serio: Serial port ptm0 [ 925.816974][T13548] loop1: detected capacity change from 0 to 512 [ 925.825865][T13545] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 925.834518][T13545] EXT4-fs (loop8): invalid journal inode [ 925.840692][T13545] EXT4-fs (loop8): can't get journal size [ 926.222563][T13562] netlink: 'syz.9.14150': attribute type 2 has an invalid length. [ 926.243000][ T3402] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz0] on syz1 [ 926.253258][T13545] EXT4-fs (loop8): 1 truncate cleaned up [ 926.259987][T13548] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.402301][T13583] program syz.9.14158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 926.444985][T13587] loop9: detected capacity change from 0 to 512 [ 926.458420][T13587] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.509102][T13595] loop9: detected capacity change from 0 to 512 [ 926.516739][T13595] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 926.527309][T13595] EXT4-fs (loop9): invalid journal inode [ 926.533919][ T3402] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz0] on syz1 [ 926.538949][T13595] EXT4-fs (loop9): can't get journal size [ 926.560850][T13595] EXT4-fs (loop9): 1 truncate cleaned up [ 926.697045][T13618] loop4: detected capacity change from 0 to 512 [ 926.717790][T13618] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.785792][T13626] loop1: detected capacity change from 0 to 512 [ 926.792684][T13626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 926.794009][T13628] loop4: detected capacity change from 0 to 512 [ 926.804219][T13626] EXT4-fs (loop1): 1 truncate cleaned up [ 926.829808][T13626] bridge0: port 3(ipvlan2) entered blocking state [ 926.836381][T13626] bridge0: port 3(ipvlan2) entered disabled state [ 926.843017][T13626] ipvlan2: entered allmulticast mode [ 926.848342][T13626] bridge0: entered allmulticast mode [ 926.852380][T13628] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 926.854209][T13626] ipvlan2: left allmulticast mode [ 926.866840][T13626] bridge0: left allmulticast mode [ 926.885133][T13628] EXT4-fs (loop4): invalid journal inode [ 926.895722][T13628] EXT4-fs (loop4): can't get journal size [ 926.908131][T13628] EXT4-fs (loop4): 1 truncate cleaned up [ 926.954950][T13638] loop4: detected capacity change from 0 to 512 [ 926.972254][T13638] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 926.991612][T13638] EXT4-fs (loop4): invalid journal inode [ 927.001076][T13638] EXT4-fs (loop4): can't get journal size [ 927.015980][T13638] EXT4-fs (loop4): 1 truncate cleaned up [ 927.403359][T13656] loop8: detected capacity change from 0 to 512 [ 927.418847][T13656] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 927.465944][T13656] EXT4-fs (loop8): 1 truncate cleaned up [ 927.558137][T13666] loop9: detected capacity change from 0 to 512 [ 927.565313][T13666] /dev/loop9: Can't open blockdev [ 927.616644][T13670] bridge0: port 3(ipvlan2) entered blocking state [ 927.623161][T13670] bridge0: port 3(ipvlan2) entered disabled state [ 927.631001][T13670] ipvlan2: entered allmulticast mode [ 927.636405][T13670] bridge0: entered allmulticast mode [ 927.642592][T13670] ipvlan2: left allmulticast mode [ 927.647681][T13670] bridge0: left allmulticast mode [ 927.656080][T13673] loop8: detected capacity change from 0 to 512 [ 927.662936][T13673] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 927.676184][T13673] EXT4-fs (loop8): 1 truncate cleaned up [ 927.697938][T13673] bridge0: port 3(ipvlan2) entered blocking state [ 927.704430][T13673] bridge0: port 3(ipvlan2) entered disabled state [ 927.712401][T13673] ipvlan2: entered allmulticast mode [ 927.717775][T13673] bridge0: entered allmulticast mode [ 927.723503][T13673] ipvlan2: left allmulticast mode [ 927.728589][T13673] bridge0: left allmulticast mode [ 927.765415][T13677] loop0: detected capacity change from 0 to 1024 [ 927.772269][T13677] EXT4-fs: Ignoring removed orlov option [ 927.808725][T13682] loop0: detected capacity change from 0 to 512 [ 927.819907][T13682] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 927.838931][T13682] EXT4-fs (loop0): 1 truncate cleaned up [ 927.921798][T13694] loop0: detected capacity change from 0 to 512 [ 927.929247][T13694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 927.940461][T13694] EXT4-fs (loop0): 1 truncate cleaned up [ 928.016865][T13699] loop1: detected capacity change from 0 to 512 [ 928.032467][T13699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 928.055642][T13699] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.14199: orphan file block 0: bad magic [ 928.067523][T13699] EXT4-fs (loop1): Remounting filesystem read-only [ 928.077549][T13699] EXT4-fs (loop1): mount failed [ 928.113401][T13708] loop8: detected capacity change from 0 to 512 [ 928.120426][T13708] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 928.132287][T13708] EXT4-fs (loop8): 1 truncate cleaned up [ 928.140130][ T3395] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz0] on syz1 [ 928.152492][T13708] bridge0: port 3(ipvlan2) entered blocking state [ 928.159020][T13708] bridge0: port 3(ipvlan2) entered disabled state [ 928.163215][T13714] loop1: detected capacity change from 0 to 1024 [ 928.172505][T13714] EXT4-fs: Ignoring removed orlov option [ 928.177189][T13708] ipvlan2: entered allmulticast mode [ 928.183551][T13708] bridge0: entered allmulticast mode [ 928.192214][T13708] ipvlan2: left allmulticast mode [ 928.197285][T13708] bridge0: left allmulticast mode [ 928.240507][T13720] program syz.4.14206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 928.289490][T13727] loop4: detected capacity change from 0 to 512 [ 928.296896][T13727] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 928.308911][T13727] EXT4-fs (loop4): 1 truncate cleaned up [ 928.348531][T13733] serio: Serial port ptm0 [ 928.375039][T13736] loop0: detected capacity change from 0 to 512 [ 928.381951][T13736] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 928.396192][T13736] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.14213: orphan file block 0: bad magic [ 928.408225][T13736] EXT4-fs (loop0): Remounting filesystem read-only [ 928.415239][T13736] EXT4-fs (loop0): mount failed [ 928.435907][T13741] program syz.0.14214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 928.588569][T13746] loop0: detected capacity change from 0 to 512 [ 928.625835][T13746] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 928.651100][ T3402] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz1 [ 928.676747][T13757] program syz.4.14220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 928.748149][T13765] serio: Serial port ptm0 [ 928.753010][T13764] loop9: detected capacity change from 0 to 512 [ 928.759921][T13764] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 928.775536][T13764] EXT4-fs (loop9): 1 truncate cleaned up [ 928.779225][T13769] loop8: detected capacity change from 0 to 512 [ 928.788738][T13769] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 928.824446][T13769] EXT4-fs error (device loop8): ext4_init_orphan_info:618: comm syz.8.14225: orphan file block 0: bad magic [ 928.837185][T13769] EXT4-fs (loop8): Remounting filesystem read-only [ 928.845726][T13769] EXT4-fs (loop8): mount failed [ 928.860828][T13774] serio: Serial port ptm1 [ 928.887820][T13781] loop8: detected capacity change from 0 to 512 [ 928.894573][T13781] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 928.910603][T13781] EXT4-fs (loop8): 1 truncate cleaned up [ 928.921613][T13777] loop9: detected capacity change from 0 to 512 [ 928.932082][T13777] EXT4-fs (loop9): orphan cleanup on readonly fs [ 928.939662][T13777] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.14226: bad orphan inode 13 [ 928.950088][T13777] ext4_test_bit(bit=12, block=18) = 1 [ 928.955562][T13777] is_bad_inode(inode)=0 [ 928.959722][T13777] NEXT_ORPHAN(inode)=2130706432 [ 928.964569][T13777] max_ino=32 [ 928.967771][T13777] i_nlink=1 [ 928.978384][T13777] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 928.999732][T13777] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 929.004939][T13791] program syz.8.14233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.016888][T13777] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 929.048457][T13777] Restarting kernel threads ... [ 929.055998][T13799] loop0: detected capacity change from 0 to 512 [ 929.062479][T13777] Done restarting kernel threads. [ 929.068865][T13799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 929.092634][T13799] EXT4-fs (loop0): 1 truncate cleaned up [ 929.117078][T13810] serio: Serial port ptm0 [ 929.165754][T13813] loop9: detected capacity change from 0 to 512 [ 929.173166][T13813] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 929.190093][T13813] EXT4-fs (loop9): 1 truncate cleaned up [ 929.232829][T13819] program syz.9.14245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.501396][T13824] serio: Serial port ptm0 [ 929.525840][T13827] loop9: detected capacity change from 0 to 512 [ 929.533324][T13827] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 929.543624][T13827] EXT4-fs (loop9): invalid journal inode [ 929.549480][T13827] EXT4-fs (loop9): can't get journal size [ 929.557331][T13827] EXT4-fs (loop9): 1 truncate cleaned up [ 929.564349][T13827] EXT4-fs mount: 215 callbacks suppressed [ 929.564413][T13827] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.585477][T13827] binfmt_misc: register: failed to install interpreter file ./file0 [ 929.603346][ T4378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.620591][T13831] program syz.9.14249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.689663][ T3402] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz0] on syz1 [ 929.718509][T13841] loop9: detected capacity change from 0 to 512 [ 929.736743][T13841] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.749404][T13841] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.800598][ T4378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.837907][T13848] program syz.9.14256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.926017][ T29] kauditd_printk_skb: 1023 callbacks suppressed [ 929.926032][ T29] audit: type=1326 audit(1761167984.313:79172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 929.993606][ T29] audit: type=1326 audit(1761167984.313:79173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.017435][ T29] audit: type=1326 audit(1761167984.313:79174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.054919][T13852] loop9: detected capacity change from 0 to 512 [ 930.115009][T13852] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.135502][ T29] audit: type=1326 audit(1761167984.423:79175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.159313][ T29] audit: type=1326 audit(1761167984.423:79176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.183196][ T29] audit: type=1326 audit(1761167984.423:79177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.206879][ T29] audit: type=1326 audit(1761167984.423:79178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.230843][ T29] audit: type=1326 audit(1761167984.423:79179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.254579][ T29] audit: type=1326 audit(1761167984.423:79180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.279062][ T29] audit: type=1326 audit(1761167984.423:79181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.9.14258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5e6c5efc9 code=0x7ffc0000 [ 930.306221][T13864] serio: Serial port ptm0 [ 930.314772][T13852] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.365187][ T4378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.489232][T13868] loop0: detected capacity change from 0 to 512 [ 930.513204][T13872] loop1: detected capacity change from 0 to 512 [ 930.525536][T13868] EXT4-fs (loop0): orphan cleanup on readonly fs [ 930.530886][T13872] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 930.540405][T13868] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.14263: bad orphan inode 13 [ 930.579974][T13868] ext4_test_bit(bit=12, block=18) = 1 [ 930.585535][T13868] is_bad_inode(inode)=0 [ 930.589746][T13868] NEXT_ORPHAN(inode)=2130706432 [ 930.594581][T13868] max_ino=32 [ 930.597786][T13868] i_nlink=1 [ 930.602536][T13872] EXT4-fs (loop1): invalid journal inode [ 930.610033][T13861] validate_nla: 22 callbacks suppressed [ 930.610048][T13861] netlink: 'syz.8.14259': attribute type 1 has an invalid length. [ 930.622786][T13868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 930.623448][T13861] netlink: 'syz.8.14259': attribute type 2 has an invalid length. [ 930.637204][T13872] EXT4-fs (loop1): can't get journal size [ 930.651547][T13868] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 930.665757][T13885] loop4: detected capacity change from 0 to 512 [ 930.673592][T13872] EXT4-fs (loop1): 1 truncate cleaned up [ 930.679584][T13872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.692906][T13885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 930.703291][T13868] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 930.715729][T13870] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 930.724396][T13885] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.14266: orphan file block 0: bad magic [ 930.736428][T13885] EXT4-fs (loop4): Remounting filesystem read-only [ 930.737385][ T9502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.743542][T13885] EXT4-fs (loop4): mount failed [ 930.752061][T13868] Restarting kernel threads ... [ 930.762003][T13868] Done restarting kernel threads. [ 930.783002][ T5702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.783902][T13892] program syz.1.14267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.794434][T13873] chnl_net:caif_netlink_parms(): no params data found [ 930.841175][T13897] loop1: detected capacity change from 0 to 512 [ 930.848009][T13897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 930.859609][T13897] EXT4-fs (loop1): 1 truncate cleaned up [ 930.865909][T13897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.907652][T13897] bridge0: port 3(ipvlan2) entered blocking state [ 930.914141][T13897] bridge0: port 3(ipvlan2) entered disabled state [ 930.920794][T13897] ipvlan2: entered allmulticast mode [ 930.926156][T13897] bridge0: entered allmulticast mode [ 930.931988][T13897] ipvlan2: left allmulticast mode [ 930.937127][T13897] bridge0: left allmulticast mode [ 930.962004][T13873] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.969266][T13873] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.976783][T13873] bridge_slave_0: entered allmulticast mode [ 930.983565][T13873] bridge_slave_0: entered promiscuous mode [ 930.990737][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.997892][T13873] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.005482][T13873] bridge_slave_1: entered allmulticast mode [ 931.012430][T13873] bridge_slave_1: entered promiscuous mode [ 931.154100][T13873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.171588][T13873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.204290][T13908] netlink: 'syz.0.14271': attribute type 1 has an invalid length. [ 931.212156][T13908] netlink: 'syz.0.14271': attribute type 2 has an invalid length. [ 931.279304][T13873] team0: Port device team_slave_0 added [ 931.308281][ T9502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.311402][T13911] loop8: detected capacity change from 0 to 512 [ 931.324219][T13873] team0: Port device team_slave_1 added [ 931.330161][T17037] bridge_slave_1: left allmulticast mode [ 931.335832][T17037] bridge_slave_1: left promiscuous mode [ 931.341522][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.348682][T13911] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 931.359033][T17037] bridge_slave_0: left allmulticast mode [ 931.364808][T17037] bridge_slave_0: left promiscuous mode [ 931.370532][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.380608][T13911] EXT4-fs (loop8): 1 truncate cleaned up [ 931.394037][T13911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 931.443111][T12300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.740164][T17037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.749130][T13924] netlink: 'syz.8.14276': attribute type 1 has an invalid length. [ 931.757026][T13924] netlink: 'syz.8.14276': attribute type 2 has an invalid length. [ 931.766177][T17037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.775445][T17037] bond0 (unregistering): Released all slaves [ 931.785245][T13928] loop4: detected capacity change from 0 to 512 [ 931.806551][T13928] EXT4-fs (loop4): orphan cleanup on readonly fs [ 931.814470][T13873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.821459][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.847394][T13873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.858489][T13928] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.14277: bad orphan inode 13 [ 931.868969][T13928] ext4_test_bit(bit=12, block=18) = 1 [ 931.874359][T13928] is_bad_inode(inode)=0 [ 931.878553][T13928] NEXT_ORPHAN(inode)=2130706432 [ 931.883414][T13928] max_ino=32 [ 931.886664][T13928] i_nlink=1 [ 931.890514][T13873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.897504][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.923478][T13873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.934462][T13928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 931.950618][T17037] hsr_slave_0: left promiscuous mode [ 931.962948][T13926] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 931.974656][T17037] hsr_slave_1: left promiscuous mode [ 931.980467][T17037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.980577][T13926] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 931.996948][T17037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.008098][T13926] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 932.026869][T13926] Restarting kernel threads ... [ 932.038251][T13926] Done restarting kernel threads. [ 932.051161][T17037] team0 (unregistering): Port device team_slave_1 removed [ 932.057060][T13934] loop0: detected capacity change from 0 to 512 [ 932.065405][T13934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 932.077728][T17037] team0 (unregistering): Port device team_slave_0 removed [ 932.096909][T13934] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.14279: orphan file block 0: bad magic [ 932.123301][T13934] EXT4-fs (loop0): Remounting filesystem read-only [ 932.130536][T13934] EXT4-fs (loop0): mount failed [ 932.175148][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.187402][T13873] hsr_slave_0: entered promiscuous mode [ 932.193810][T13873] hsr_slave_1: entered promiscuous mode [ 932.218773][T13873] debugfs: 'hsr0' already exists in 'hsr' [ 932.224648][T13873] Cannot create hsr debugfs directory [ 932.234184][T13939] loop4: detected capacity change from 0 to 512 [ 932.244188][T13939] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 932.256944][T13939] EXT4-fs (loop4): invalid journal inode [ 932.262904][T13939] EXT4-fs (loop4): can't get journal size [ 932.270200][T13939] EXT4-fs (loop4): 1 truncate cleaned up [ 932.277927][T13939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.301988][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.313437][T13941] loop1: detected capacity change from 0 to 512 [ 932.333616][T13941] /dev/loop1: Can't open blockdev [ 932.395627][T13949] netlink: 'syz.4.14285': attribute type 2 has an invalid length. [ 932.403442][T13949] netlink: 'syz.4.14285': attribute type 1 has an invalid length. [ 932.421595][ T3395] hid_parser_main: 146 callbacks suppressed [ 932.421610][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.434984][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.442359][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.449878][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.457312][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.464705][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.472115][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.479522][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.486942][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.494334][ T3395] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 932.503165][T13942] netlink: 'syz.0.14281': attribute type 1 has an invalid length. [ 932.511117][T13942] netlink: 'syz.0.14281': attribute type 2 has an invalid length. [ 932.521592][ T3395] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz0] on syz1 [ 932.606979][T13963] loop4: detected capacity change from 0 to 512 [ 932.623925][T13963] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 932.643121][T13963] EXT4-fs (loop4): invalid journal inode [ 932.649019][T13963] EXT4-fs (loop4): can't get journal size [ 932.664389][T13963] EXT4-fs (loop4): 1 truncate cleaned up [ 932.670707][T13963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.697796][T13873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 932.707273][T13873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 932.715571][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.716767][T13873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 932.733748][T13873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 932.772154][T13873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.785914][T13873] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.797331][T17037] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.804596][T17037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.823939][T13873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 932.834376][T13873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.848679][T17037] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.855794][T17037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.898383][T13873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.914988][T13976] program syz.4.14289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 932.992964][T13873] veth0_vlan: entered promiscuous mode [ 933.000276][T13873] veth1_vlan: entered promiscuous mode [ 933.014195][T13873] veth0_macvtap: entered promiscuous mode [ 933.021552][T13873] veth1_macvtap: entered promiscuous mode [ 933.032101][T13873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.042816][T13873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.053502][T17054] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.062839][T17054] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.085130][T17054] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.097687][T17025] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.132406][T13995] loop9: detected capacity change from 0 to 512 [ 933.139612][T13995] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 933.151311][T13995] EXT4-fs (loop9): 1 truncate cleaned up [ 933.157676][T13995] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 933.177501][T13997] loop0: detected capacity change from 0 to 512 [ 933.185405][T13997] EXT4-fs (loop0): orphan cleanup on readonly fs [ 933.192050][T13997] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.14290: bad orphan inode 13 [ 933.202491][T13997] ext4_test_bit(bit=12, block=18) = 1 [ 933.207900][T13997] is_bad_inode(inode)=0 [ 933.212096][T13997] NEXT_ORPHAN(inode)=2130706432 [ 933.217021][T13997] max_ino=32 [ 933.220206][T13997] i_nlink=1 [ 933.223731][T13997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 933.226251][T13873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.246698][T13997] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 933.265062][T13997] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 933.275954][T13997] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 933.286554][T13997] Restarting kernel threads ... [ 933.291728][T13997] Done restarting kernel threads. [ 933.293379][T14004] loop9: detected capacity change from 0 to 512 [ 933.303694][T14004] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 933.313016][T14004] EXT4-fs (loop9): invalid journal inode [ 933.313035][ T5702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.318902][T14004] EXT4-fs (loop9): can't get journal size [ 933.333957][T14004] EXT4-fs (loop9): 1 truncate cleaned up [ 933.353645][T14007] loop0: detected capacity change from 0 to 512 [ 933.355656][T14004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 933.383041][T14007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.398223][T13873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.407908][T14007] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.439603][ T5702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.639232][T14029] loop4: detected capacity change from 0 to 512 [ 933.670234][T14029] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 933.711860][T14029] EXT4-fs (loop4): invalid journal inode [ 933.739448][T14029] EXT4-fs (loop4): can't get journal size [ 933.805891][T14029] EXT4-fs (loop4): 1 truncate cleaned up [ 933.828050][T14029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 933.965083][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.010879][T14033] loop4: detected capacity change from 0 to 512 [ 934.030072][T14033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 934.057450][T14033] EXT4-fs (loop4): 1 truncate cleaned up [ 934.063667][T14033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.142156][T14033] bridge0: port 3(ipvlan2) entered blocking state [ 934.148718][T14033] bridge0: port 3(ipvlan2) entered disabled state [ 934.157445][T14033] ipvlan2: entered allmulticast mode [ 934.162933][T14033] bridge0: entered allmulticast mode [ 934.182486][T14033] ipvlan2: left allmulticast mode [ 934.187800][T14033] bridge0: left allmulticast mode [ 934.277508][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.377209][T14039] loop4: detected capacity change from 0 to 512 [ 934.408906][T14039] EXT4-fs (loop4): orphan cleanup on readonly fs [ 934.435096][T14039] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.14303: bad orphan inode 13 [ 934.484731][T14039] ext4_test_bit(bit=12, block=18) = 1 [ 934.490147][T14039] is_bad_inode(inode)=0 [ 934.494291][T14039] NEXT_ORPHAN(inode)=2130706432 [ 934.499244][T14039] max_ino=32 [ 934.502427][T14039] i_nlink=1 [ 934.550836][T14039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 934.576931][T14036] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 934.612529][T14036] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 934.632215][T14039] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 934.650285][T14036] Restarting kernel threads ... [ 934.662300][T14051] loop8: detected capacity change from 0 to 512 [ 934.664899][T14036] Done restarting kernel threads. [ 934.668675][T14056] serio: Serial port ptm0 [ 934.693806][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.718804][T14051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.748296][T14051] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.794397][T12300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.883864][T14069] loop1: detected capacity change from 0 to 512 [ 934.898112][T14069] /dev/loop1: Can't open blockdev [ 935.009131][T14074] loop8: detected capacity change from 0 to 512 [ 935.033978][T14074] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.14315: bg 0: block 248: padding at end of block bitmap is not set [ 935.050490][T14074] __quota_error: 639 callbacks suppressed [ 935.050541][T14074] Quota error (device loop8): write_blk: dquota write failed [ 935.065337][T14074] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 935.078039][T14074] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.14315: Failed to acquire dquot type 1 [ 935.093094][T14074] EXT4-fs (loop8): 1 truncate cleaned up [ 935.103196][T14074] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.116694][T14074] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.131312][T14074] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.269676][T14091] loop8: detected capacity change from 0 to 512 [ 935.282935][T14091] EXT4-fs (loop8): orphan cleanup on readonly fs [ 935.299000][T14091] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.14321: bad orphan inode 13 [ 935.317391][T14091] ext4_test_bit(bit=12, block=18) = 1 [ 935.322799][T14091] is_bad_inode(inode)=0 [ 935.326979][T14091] NEXT_ORPHAN(inode)=2130706432 [ 935.331807][T14091] max_ino=32 [ 935.335058][T14091] i_nlink=1 [ 935.357395][T14091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 935.390024][ T29] audit: type=1326 audit(1761167989.773:79821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.9.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7609eefc9 code=0x7ffc0000 [ 935.413845][ T29] audit: type=1326 audit(1761167989.773:79822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.9.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7609eefc9 code=0x7ffc0000 [ 935.437724][ T29] audit: type=1326 audit(1761167989.773:79823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.9.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7609eefc9 code=0x7ffc0000 [ 935.437796][T14091] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 935.461430][ T29] audit: type=1326 audit(1761167989.773:79824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.9.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7609eefc9 code=0x7ffc0000 [ 935.494392][ T29] audit: type=1326 audit(1761167989.773:79825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.9.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7609eefc9 code=0x7ffc0000 [ 935.560896][T14096] loop9: detected capacity change from 0 to 512 [ 935.582733][T14099] Restarting kernel threads ... [ 935.588188][T14099] Done restarting kernel threads. [ 935.605075][T14091] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 935.611775][ T29] audit: type=1326 audit(1761167989.773:79826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.9.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7609eefc9 code=0x7ffc0000 [ 935.637200][ T29] audit: type=1326 audit(1761167989.773:79827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.9.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7609eefc9 code=0x7ffc0000 [ 935.661088][ T29] audit: type=1326 audit(1761167989.773:79828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.9.14323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7609eefc9 code=0x7ffc0000 [ 935.695993][T14096] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.709084][T14103] loop4: detected capacity change from 0 to 512 [ 935.734763][T14096] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.745102][T14097] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 935.769952][T12300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.780788][T13873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.796692][T14103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.813522][T14106] loop1: detected capacity change from 0 to 512 [ 935.824912][T14103] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.845123][T14106] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 935.890201][T14106] EXT4-fs (loop1): 1 truncate cleaned up [ 935.892145][T14125] loop8: detected capacity change from 0 to 512 [ 935.903159][T14125] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 935.903338][T14106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 935.933871][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.951056][T14125] EXT4-fs (loop8): 1 truncate cleaned up [ 935.959307][T14132] loop4: detected capacity change from 0 to 512 [ 935.970870][T14125] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 935.983385][T14132] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 936.009466][T14132] EXT4-fs (loop4): invalid journal inode [ 936.024160][T14106] bridge0: port 3(ipvlan2) entered blocking state [ 936.030836][T14106] bridge0: port 3(ipvlan2) entered disabled state [ 936.045179][T14132] EXT4-fs (loop4): can't get journal size [ 936.056201][T14132] EXT4-fs (loop4): 1 truncate cleaned up [ 936.066607][T14132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.067121][T14106] ipvlan2: entered allmulticast mode [ 936.083939][T14106] bridge0: entered allmulticast mode [ 936.103701][T14106] ipvlan2: left allmulticast mode [ 936.108851][T14106] bridge0: left allmulticast mode [ 936.124908][T14125] bridge0: port 3(ipvlan2) entered blocking state [ 936.131414][T14125] bridge0: port 3(ipvlan2) entered disabled state [ 936.138780][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.152497][T14125] ipvlan2: entered allmulticast mode [ 936.157894][T14125] bridge0: entered allmulticast mode [ 936.164116][T14125] ipvlan2: left allmulticast mode [ 936.169261][T14125] bridge0: left allmulticast mode [ 936.197107][T14138] loop0: detected capacity change from 0 to 512 [ 936.216409][ T9502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.226372][T14138] EXT4-fs (loop0): orphan cleanup on readonly fs [ 936.244982][T14138] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.14337: bad orphan inode 13 [ 936.264791][T14138] ext4_test_bit(bit=12, block=18) = 1 [ 936.270191][T14138] is_bad_inode(inode)=0 [ 936.274344][T14138] NEXT_ORPHAN(inode)=2130706432 [ 936.279285][T14138] max_ino=32 [ 936.282469][T14138] i_nlink=1 [ 936.294074][T14138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 936.311844][T12300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.323708][T14135] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 936.342727][T14135] Restarting kernel threads ... [ 936.365091][T14145] loop1: detected capacity change from 0 to 512 [ 936.370002][T14135] Done restarting kernel threads. [ 936.399223][T14145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.416841][T14145] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.427862][ T5702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.492240][T14161] loop0: detected capacity change from 0 to 512 [ 936.497929][T14148] validate_nla: 9 callbacks suppressed [ 936.497960][T14148] netlink: 'syz.4.14338': attribute type 1 has an invalid length. [ 936.499652][T14161] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 936.504058][T14148] netlink: 'syz.4.14338': attribute type 2 has an invalid length. [ 936.512896][T14161] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.14345: orphan file block 0: bad magic [ 936.542145][ T9502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.549999][T14161] EXT4-fs (loop0): Remounting filesystem read-only [ 936.557820][T14161] EXT4-fs (loop0): mount failed [ 936.568585][T14166] serio: Serial port ptm0 [ 936.588471][T14169] loop1: detected capacity change from 0 to 512 [ 936.611609][T14169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.627243][T14169] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.673997][T14176] loop0: detected capacity change from 0 to 512 [ 936.686862][ T9502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.722497][T14176] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14351: bg 0: block 248: padding at end of block bitmap is not set [ 936.741460][T14176] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.14351: Failed to acquire dquot type 1 [ 936.754414][T14176] EXT4-fs (loop0): 1 truncate cleaned up [ 936.760885][T14176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.773963][T14176] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.792690][T14182] loop1: detected capacity change from 0 to 512 [ 936.801217][T14176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.819914][T14185] loop8: detected capacity change from 0 to 512 [ 936.826915][T14182] EXT4-fs (loop1): orphan cleanup on readonly fs [ 936.827209][T14185] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 936.862770][T14188] loop9: detected capacity change from 0 to 512 [ 936.869331][T14182] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.14353: bad orphan inode 13 [ 936.880176][T14185] EXT4-fs (loop8): 1 truncate cleaned up [ 936.886454][T14188] /dev/loop9: Can't open blockdev [ 936.892075][T14185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.904387][T14182] ext4_test_bit(bit=12, block=18) = 1 [ 936.909953][T14182] is_bad_inode(inode)=0 [ 936.914146][T14182] NEXT_ORPHAN(inode)=2130706432 [ 936.919042][T14182] max_ino=32 [ 936.922253][T14182] i_nlink=1 [ 936.925825][T14182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 936.939239][T14182] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 936.957391][T14190] syz.0.14356 (14190): /proc/14189/oom_adj is deprecated, please use /proc/14189/oom_score_adj instead. [ 936.970815][T14182] Restarting kernel threads ... [ 936.975965][T14182] Done restarting kernel threads. [ 937.013346][T12300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.033280][ T9502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.073436][T14201] loop8: detected capacity change from 0 to 512 [ 937.103245][T14201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.141328][T14201] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.162624][T14209] serio: Serial port ptm0 [ 937.212301][T12300] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.360251][T14219] loop4: detected capacity change from 0 to 512 [ 937.394154][T14219] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.14368: bg 0: block 248: padding at end of block bitmap is not set [ 937.428324][T14219] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.14368: Failed to acquire dquot type 1 [ 937.479615][T14219] EXT4-fs (loop4): 1 truncate cleaned up [ 937.500375][T14219] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.583529][T14231] loop1: detected capacity change from 0 to 512 [ 937.597582][T14231] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 937.622234][T14231] EXT4-fs (loop1): 1 truncate cleaned up [ 937.725319][T14238] loop9: detected capacity change from 0 to 512 [ 937.746600][T14236] loop4: detected capacity change from 0 to 512 [ 937.758975][T14238] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 937.778983][T14238] EXT4-fs (loop9): invalid journal inode [ 937.787525][T14238] EXT4-fs (loop9): can't get journal size [ 937.855815][T14236] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.905488][T14238] EXT4-fs (loop9): 1 truncate cleaned up [ 937.930380][T14246] loop8: detected capacity change from 0 to 512 [ 937.939255][T14246] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 937.966696][T14246] EXT4-fs (loop8): 1 truncate cleaned up [ 938.031712][T14246] bridge0: port 3(ipvlan2) entered blocking state [ 938.038276][T14246] bridge0: port 3(ipvlan2) entered disabled state [ 938.094791][T14246] ipvlan2: entered allmulticast mode [ 938.100116][T14246] bridge0: entered allmulticast mode [ 938.177453][T14246] ipvlan2: left allmulticast mode [ 938.182515][T14246] bridge0: left allmulticast mode [ 938.351048][T14253] loop4: detected capacity change from 0 to 1024 [ 938.370915][T14253] EXT4-fs: Ignoring removed orlov option [ 938.676490][T14275] loop1: detected capacity change from 0 to 512 [ 938.700003][T14275] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.782064][T14279] loop1: detected capacity change from 0 to 512 [ 938.810342][T14279] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 938.838988][T14279] EXT4-fs (loop1): invalid journal inode [ 938.854870][T14279] EXT4-fs (loop1): can't get journal size [ 938.876549][T14279] EXT4-fs (loop1): 1 truncate cleaned up [ 939.024610][T14288] loop0: detected capacity change from 0 to 512 [ 939.031595][T14288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 939.047519][T14284] loop8: detected capacity change from 0 to 512 [ 939.070877][T14288] EXT4-fs (loop0): 1 truncate cleaned up [ 939.078602][T14284] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.091180][T14290] loop1: detected capacity change from 0 to 1024 [ 939.098529][T14290] EXT4-fs: Ignoring removed orlov option [ 939.137902][T14288] bridge0: port 3(ipvlan3) entered blocking state [ 939.144498][T14288] bridge0: port 3(ipvlan3) entered disabled state [ 939.151572][T14288] ipvlan3: entered allmulticast mode [ 939.154520][T14302] loop1: detected capacity change from 0 to 512 [ 939.157015][T14288] bridge0: entered allmulticast mode [ 939.163901][T14288] ipvlan3: left allmulticast mode [ 939.173720][T14288] bridge0: left allmulticast mode [ 939.173980][T14302] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 939.188103][T14302] EXT4-fs (loop1): invalid journal inode [ 939.193983][T14302] EXT4-fs (loop1): can't get journal size [ 939.203410][T14302] EXT4-fs (loop1): 1 truncate cleaned up [ 939.208295][T14307] serio: Serial port ptm0 [ 939.229406][T14310] loop8: detected capacity change from 0 to 512 [ 939.236806][T14310] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 939.245606][T14310] EXT4-fs (loop8): invalid journal inode [ 939.251353][T14310] EXT4-fs (loop8): can't get journal size [ 939.257766][T14310] EXT4-fs (loop8): 1 truncate cleaned up [ 939.272378][T14312] loop1: detected capacity change from 0 to 512 [ 939.288895][T14312] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.356429][T14325] loop0: detected capacity change from 0 to 512 [ 939.400902][T14325] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.425200][T14328] loop9: detected capacity change from 0 to 1024 [ 939.452703][T14328] EXT4-fs: Ignoring removed orlov option [ 939.463494][T14335] program syz.4.14412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 939.542996][T14345] loop1: detected capacity change from 0 to 512 [ 939.547107][T14346] loop9: detected capacity change from 0 to 512 [ 939.560695][T14345] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 939.575052][T14346] /dev/loop9: Can't open blockdev [ 939.587514][T14346] binfmt_misc: register: failed to install interpreter file ./file0 [ 939.597760][T14345] EXT4-fs (loop1): invalid journal inode [ 939.602521][T14348] loop0: detected capacity change from 0 to 512 [ 939.610581][T14345] EXT4-fs (loop1): can't get journal size [ 939.634787][T14345] EXT4-fs (loop1): 1 truncate cleaned up [ 939.647168][T14348] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.703511][T14359] serio: Serial port ptm0 [ 939.806191][T14349] netlink: 'syz.4.14416': attribute type 1 has an invalid length. [ 939.814058][T14349] netlink: 'syz.4.14416': attribute type 2 has an invalid length. [ 939.906007][T14368] loop0: detected capacity change from 0 to 512 [ 939.916215][T14368] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.952362][T14370] loop1: detected capacity change from 0 to 1024 [ 939.965150][T14370] EXT4-fs: Ignoring removed orlov option [ 940.013406][T14379] loop0: detected capacity change from 0 to 512 [ 940.021053][T14379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 940.038834][T14379] EXT4-fs (loop0): 1 truncate cleaned up [ 940.141834][T14387] serio: Serial port ptm0 [ 940.213426][ T29] kauditd_printk_skb: 1245 callbacks suppressed [ 940.213441][ T29] audit: type=1326 audit(1761167994.593:81070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.244533][ T29] audit: type=1326 audit(1761167994.593:81071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.268366][ T29] audit: type=1326 audit(1761167994.593:81072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.291915][ T29] audit: type=1326 audit(1761167994.593:81073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.315581][ T29] audit: type=1326 audit(1761167994.593:81074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.339326][ T29] audit: type=1326 audit(1761167994.593:81075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.363152][ T29] audit: type=1326 audit(1761167994.593:81076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.386911][ T29] audit: type=1326 audit(1761167994.593:81077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.410622][ T29] audit: type=1326 audit(1761167994.593:81078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.434265][ T29] audit: type=1326 audit(1761167994.603:81079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.14433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae63a0efc9 code=0x7ffc0000 [ 940.459115][T14394] loop8: detected capacity change from 0 to 512 [ 940.499211][T14394] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.522639][T14398] loop1: detected capacity change from 0 to 512 [ 940.560590][T14398] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.584451][T14404] loop9: detected capacity change from 0 to 512 [ 940.611346][T14404] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 940.626838][T14408] loop4: detected capacity change from 0 to 1024 [ 940.635232][T14408] EXT4-fs: Ignoring removed orlov option [ 940.648434][T14404] EXT4-fs (loop9): invalid journal inode [ 940.654814][T14404] EXT4-fs (loop9): can't get journal size [ 940.664775][T14404] EXT4-fs (loop9): 1 truncate cleaned up [ 940.737176][T14425] serio: Serial port ptm0 [ 940.748550][T14430] loop9: detected capacity change from 0 to 512 [ 940.759154][T14430] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 940.778642][T17013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.780226][T14430] EXT4-fs (loop9): 1 truncate cleaned up [ 940.788991][T17013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.840408][T17013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.850853][T17013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.911070][T17013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.921454][T17013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.001910][T14409] chnl_net:caif_netlink_parms(): no params data found [ 941.038945][T17013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.049366][T17013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.119183][T14454] loop1: detected capacity change from 0 to 1024 [ 941.142659][T14454] EXT4-fs: Ignoring removed orlov option [ 941.187573][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.194783][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.198355][T14447] netlink: 'syz.9.14448': attribute type 1 has an invalid length. [ 941.202609][T14409] bridge_slave_0: entered allmulticast mode [ 941.209713][T14447] netlink: 'syz.9.14448': attribute type 2 has an invalid length. [ 941.225319][T14409] bridge_slave_0: entered promiscuous mode [ 941.255560][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.262623][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.269927][T14409] bridge_slave_1: entered allmulticast mode [ 941.276860][T14409] bridge_slave_1: entered promiscuous mode [ 941.287411][T17013] bridge_slave_1: left allmulticast mode [ 941.293113][T17013] bridge_slave_1: left promiscuous mode [ 941.298844][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.307046][T17013] bridge_slave_0: left allmulticast mode [ 941.312683][T17013] bridge_slave_0: left promiscuous mode [ 941.318356][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.354491][T14451] netlink: 'syz.4.14449': attribute type 1 has an invalid length. [ 941.362358][T14451] netlink: 'syz.4.14449': attribute type 2 has an invalid length. [ 941.496794][T17013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.506403][T17013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.515737][T17013] bond0 (unregistering): Released all slaves [ 941.529148][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.539494][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.555518][T17013] hsr_slave_0: left promiscuous mode [ 941.561052][T17013] hsr_slave_1: left promiscuous mode [ 941.566675][T17013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.574072][T17013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.581821][T17013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.589222][T17013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.598777][T17013] veth1_macvtap: left promiscuous mode [ 941.604335][T17013] veth0_macvtap: left promiscuous mode [ 941.609877][T17013] veth1_vlan: left promiscuous mode [ 941.615228][T17013] veth0_vlan: left promiscuous mode [ 941.652822][T14470] loop8: detected capacity change from 0 to 512 [ 941.660479][T14470] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 941.669654][T14470] EXT4-fs (loop8): invalid journal inode [ 941.675689][T14470] EXT4-fs (loop8): can't get journal size [ 941.682219][T14470] EXT4-fs (loop8): 1 truncate cleaned up [ 941.692545][T17013] team0 (unregistering): Port device team_slave_1 removed [ 941.703261][T17013] team0 (unregistering): Port device team_slave_0 removed [ 941.728462][T14475] loop8: detected capacity change from 0 to 512 [ 941.735501][T14475] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 941.744266][T14475] EXT4-fs (loop8): invalid journal inode [ 941.751122][T14475] EXT4-fs (loop8): can't get journal size [ 941.758534][T14409] team0: Port device team_slave_0 added [ 941.765982][T14475] EXT4-fs (loop8): 1 truncate cleaned up [ 941.766766][T14409] team0: Port device team_slave_1 added [ 941.787748][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.794866][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.820879][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.832245][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.839238][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.865178][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.894059][T14409] hsr_slave_0: entered promiscuous mode [ 941.900807][T14409] hsr_slave_1: entered promiscuous mode [ 941.907073][T14409] debugfs: 'hsr0' already exists in 'hsr' [ 941.912799][T14409] Cannot create hsr debugfs directory [ 941.925201][T14480] serio: Serial port ptm0 [ 941.974188][T14484] loop9: detected capacity change from 0 to 512 [ 941.981415][T14484] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 941.993411][T14484] EXT4-fs (loop9): 1 truncate cleaned up [ 942.113706][T14497] loop1: detected capacity change from 0 to 512 [ 942.120447][T14495] loop8: detected capacity change from 0 to 1024 [ 942.128642][T14497] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 942.131767][T14495] EXT4-fs: Ignoring removed orlov option [ 942.143587][T14497] EXT4-fs (loop1): invalid journal inode [ 942.156056][T14497] EXT4-fs (loop1): can't get journal size [ 942.173259][T14497] EXT4-fs (loop1): 1 truncate cleaned up [ 942.206167][T14505] program syz.4.14468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 942.238082][T14508] loop1: detected capacity change from 0 to 512 [ 942.248668][T14508] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 942.262420][T14409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 942.271337][T14508] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.14469: orphan file block 0: bad magic [ 942.293037][T14409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 942.304665][T14508] EXT4-fs (loop1): Remounting filesystem read-only [ 942.316845][T14409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 942.323788][T14508] EXT4-fs (loop1): mount failed [ 942.328868][T14513] loop4: detected capacity change from 0 to 512 [ 942.340968][T14409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 942.355147][T14513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 942.370897][T14513] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.14471: orphan file block 0: bad magic [ 942.389080][T14513] EXT4-fs (loop4): Remounting filesystem read-only [ 942.411448][T14513] EXT4-fs (loop4): mount failed [ 942.432293][T14513] ================================================================== [ 942.440385][T14513] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 942.447932][T14513] [ 942.450252][T14513] read-write to 0xffff888237d25ee8 of 1 bytes by task 14523 on cpu 1: [ 942.458389][T14513] folio_add_lru+0xa5/0x1f0 [ 942.462891][T14513] folio_add_lru_vma+0x49/0x70 [ 942.467652][T14513] do_wp_page+0x1550/0x2510 [ 942.472148][T14513] handle_mm_fault+0x77d/0x2be0 [ 942.476987][T14513] do_user_addr_fault+0x630/0x1080 [ 942.482094][T14513] exc_page_fault+0x62/0xa0 [ 942.486618][T14513] asm_exc_page_fault+0x26/0x30 [ 942.491485][T14513] [ 942.493798][T14513] read to 0xffff888237d25ee8 of 1 bytes by task 14513 on cpu 0: [ 942.501410][T14513] __lru_add_drain_all+0x17e/0x450 [ 942.506543][T14513] lru_add_drain_all+0x10/0x20 [ 942.511308][T14513] invalidate_bdev+0x47/0x70 [ 942.515906][T14513] ext4_fill_super+0x2d2c/0x3810 [ 942.520852][T14513] get_tree_bdev_flags+0x291/0x300 [ 942.525970][T14513] get_tree_bdev+0x1f/0x30 [ 942.530394][T14513] ext4_get_tree+0x1c/0x30 [ 942.534837][T14513] vfs_get_tree+0x57/0x1d0 [ 942.537162][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.539255][T14513] do_new_mount+0x24d/0x660 [ 942.550315][T14513] path_mount+0x4a5/0xb70 [ 942.554637][T14513] __se_sys_mount+0x28c/0x2e0 [ 942.559304][T14513] __x64_sys_mount+0x67/0x80 [ 942.563890][T14513] x64_sys_call+0x2b51/0x3000 [ 942.568556][T14513] do_syscall_64+0xd2/0x200 [ 942.573052][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.578929][T14513] [ 942.581231][T14513] value changed: 0x09 -> 0x0c [ 942.585886][T14513] [ 942.588193][T14513] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 942.594325][T14513] CPU: 0 UID: 0 PID: 14513 Comm: syz.4.14471 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 942.605765][T14513] Tainted: [W]=WARN [ 942.609546][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 942.619584][T14513] ================================================================== [ 942.632213][T14524] loop1: detected capacity change from 0 to 512 [ 942.636402][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.640224][T14524] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 942.685363][T14524] EXT4-fs (loop1): 1 truncate cleaned up [ 942.686431][T14409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 942.701350][T14409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.714388][T17025] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.721520][T17025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.730632][T17025] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.737696][T17025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.148329][T17053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.216698][T17053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.286968][T17053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.336673][T17053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.408405][T17053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.457330][T17053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.517569][T17053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.557033][T17053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.618619][T17053] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.657243][T17053] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.697079][T17053] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.747128][T17053] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.816828][T17053] bridge_slave_1: left allmulticast mode [ 943.822533][T17053] bridge_slave_1: left promiscuous mode [ 943.828303][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.836094][T17053] bridge_slave_0: left allmulticast mode [ 943.841780][T17053] bridge_slave_0: left promiscuous mode [ 943.847513][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.857592][T17053] bridge_slave_1: left allmulticast mode [ 943.863274][T17053] bridge_slave_1: left promiscuous mode [ 943.869023][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.878083][T17053] bridge_slave_0: left allmulticast mode [ 943.883699][T17053] bridge_slave_0: left promiscuous mode [ 943.889329][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.897331][T17053] bridge_slave_1: left allmulticast mode [ 943.902991][T17053] bridge_slave_1: left promiscuous mode [ 943.908715][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.916317][T17053] bridge_slave_0: left allmulticast mode [ 943.921933][T17053] bridge_slave_0: left promiscuous mode [ 943.927541][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.316641][T17053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.326243][T17053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.335553][T17053] bond0 (unregistering): Released all slaves [ 944.426349][T17053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.436074][T17053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.445326][T17053] bond0 (unregistering): Released all slaves [ 944.527470][T17053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.537003][T17053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.546381][T17053] bond0 (unregistering): Released all slaves [ 944.607570][T17053] tipc: Left network mode [ 944.614891][T17053] hsr_slave_0: left promiscuous mode [ 944.620482][T17053] hsr_slave_1: left promiscuous mode [ 944.626079][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.633434][T17053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.641185][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.648574][T17053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.657439][T17053] hsr_slave_0: left promiscuous mode [ 944.663219][T17053] hsr_slave_1: left promiscuous mode [ 944.669163][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.676567][T17053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.684022][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.691426][T17053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.700617][T17053] hsr_slave_0: left promiscuous mode [ 944.706146][T17053] hsr_slave_1: left promiscuous mode [ 944.711762][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.719119][T17053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.726483][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.733880][T17053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.747774][T17053] veth1_macvtap: left promiscuous mode [ 944.753233][T17053] veth0_macvtap: left promiscuous mode [ 944.758730][T17053] veth1_vlan: left promiscuous mode [ 944.763937][T17053] veth0_vlan: left promiscuous mode [ 944.769585][T17053] veth1_macvtap: left promiscuous mode [ 944.775120][T17053] veth0_macvtap: left promiscuous mode [ 944.780576][T17053] veth1_vlan: left promiscuous mode [ 944.785985][T17053] veth0_vlan: left promiscuous mode [ 944.791867][T17053] veth1_macvtap: left promiscuous mode [ 944.797333][T17053] veth0_macvtap: left promiscuous mode [ 944.802863][T17053] veth1_vlan: left promiscuous mode [ 944.808099][T17053] veth0_vlan: left promiscuous mode [ 944.908671][T17053] team0 (unregistering): Port device team_slave_1 removed [ 944.917774][T17053] team0 (unregistering): Port device team_slave_0 removed [ 944.963051][T17053] team0 (unregistering): Port device team_slave_1 removed [ 944.972213][T17053] team0 (unregistering): Port device team_slave_0 removed [ 945.016784][T17053] team0 (unregistering): Port device team_slave_1 removed [ 945.026459][T17053] team0 (unregistering): Port device team_slave_0 removed [ 945.938271][T17053] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.987045][T17053] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.027093][T17053] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.067008][T17053] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.117212][T17053] bridge_slave_1: left allmulticast mode [ 946.122856][T17053] bridge_slave_1: left promiscuous mode [ 946.128459][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.136377][T17053] bridge_slave_0: left allmulticast mode [ 946.142070][T17053] bridge_slave_0: left promiscuous mode [ 946.147824][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.156106][T17053] bridge_slave_1: left allmulticast mode [ 946.161731][T17053] bridge_slave_1: left promiscuous mode [ 946.167358][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.175113][T17053] bridge_slave_0: left allmulticast mode [ 946.180726][T17053] bridge_slave_0: left promiscuous mode [ 946.186373][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.256544][T17053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.266456][T17053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.275632][T17053] bond0 (unregistering): Released all slaves [ 946.336652][T17053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.346100][T17053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.355361][T17053] bond0 (unregistering): Released all slaves [ 946.419344][T17053] hsr_slave_0: left promiscuous mode [ 946.425037][T17053] hsr_slave_1: left promiscuous mode [ 946.430530][T17053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.437906][T17053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.446487][T17053] hsr_slave_0: left promiscuous mode [ 946.452120][T17053] hsr_slave_1: left promiscuous mode [ 946.457649][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.465088][T17053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.472559][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.479983][T17053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.490586][T17053] veth1_macvtap: left promiscuous mode [ 946.496100][T17053] veth0_macvtap: left promiscuous mode [ 946.501596][T17053] veth1_vlan: left promiscuous mode [ 946.506810][T17053] veth0_vlan: left promiscuous mode [ 946.566697][T17053] team0 (unregistering): Port device team_slave_1 removed [ 946.575833][T17053] team0 (unregistering): Port device team_slave_0 removed [ 946.619175][T17053] team0 (unregistering): Port device team_slave_1 removed [ 946.628153][T17053] team0 (unregistering): Port device team_slave_0 removed