last executing test programs: 22m33.631358894s ago: executing program 0 (id=131): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x333d898, &(0x7f0000000100)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@rodir}, {@numtail}, {@fat=@errors_continue}, {@fat=@nfs}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) keyctl$setperm(0x5, 0x0, 0x10000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) 22m30.627221808s ago: executing program 0 (id=138): ptrace$getregset(0x4205, 0x0, 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x75) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b86dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0x6, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 22m27.455719706s ago: executing program 0 (id=145): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(0x0, 0x54400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22m25.682656508s ago: executing program 0 (id=149): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[], 0x0, 0x234, &(0x7f0000000500)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) sendmmsg$inet(r0, 0x0, 0x0, 0x840) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x800000000000) fcntl$setown(0xffffffffffffffff, 0x8, r1) 22m25.112316498s ago: executing program 0 (id=152): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsopen(0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b43706192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) 22m22.78633196s ago: executing program 0 (id=158): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x7f}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x8, 0x81, 0x9, 0x80000000, 0x5, 0x9}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4800}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22m22.733939111s ago: executing program 32 (id=158): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x7f}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x8, 0x81, 0x9, 0x80000000, 0x5, 0x9}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4800}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.890157777s ago: executing program 3 (id=4393): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$int_in(r5, 0x5452, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x7, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x2800418, &(0x7f0000000180), 0xfe, 0x263, &(0x7f0000000700)="$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") connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 48.419664041s ago: executing program 3 (id=4396): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$int_in(r5, 0x5452, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x7, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x2800418, &(0x7f0000000180), 0xfe, 0x263, &(0x7f0000000700)="$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") connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 45.081543063s ago: executing program 3 (id=4399): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xb, 0x9, 0x6, 0x1c2, 0x5, 0x2, 0x9, 0x8, [{0x400, 0x0, 0x0, 0x20800}, {0x6, 0x2cb, 0x1, 0x401}, {0x9, 0x91, 0xffff, 0x1000}, {0x2, 0xf5, 0xffffff0e, 0x7fff}, {0x6, 0x7fffffff, 0x5, 0x3}, {0x7, 0x7, 0xc00000, 0x7f}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xe}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect$uac1(0x2, 0x71, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='bond0\x00') 41.867849252s ago: executing program 3 (id=4406): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) 41.812938803s ago: executing program 3 (id=4408): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0xffff67a9, 0xd4e3, 0x2, 0x7}, 0x8, 0x1, 0x3, 0x6, 0x6, 0x3, 0x11, 0xf, 0x3, 0xd, {0x83, 0x9, 0xfff, 0x232, 0x417, 0x5}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xb, 0x9, 0x6, 0x1c2, 0x5, 0x2, 0x9, 0x8, [{0x400, 0x0, 0x0, 0x20800}, {0x6, 0x2cb, 0x1, 0x401}, {0x9, 0x91, 0xffff, 0x1000}, {0x2, 0xf5, 0xffffff0e, 0x7fff}, {0x6, 0x7fffffff, 0x5, 0x3}, {0x7, 0x7, 0xc00000, 0x7f}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xe}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect$uac1(0x2, 0x71, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='bond0\x00') 37.342378872s ago: executing program 3 (id=4412): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x57d, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x48140, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), 0x0, 0x841, 0x1) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 36.84079807s ago: executing program 2 (id=4414): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240), 0x80000) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) 36.661209243s ago: executing program 2 (id=4415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) 35.412208532s ago: executing program 2 (id=4420): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 33.996997204s ago: executing program 2 (id=4424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000f0000060026000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r1 = creat(0x0, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x25}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) 32.115929253s ago: executing program 2 (id=4426): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) 31.229985016s ago: executing program 2 (id=4429): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$int_in(r5, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_open_dev$hiddev(0x0, 0x7, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x2800418, &(0x7f0000000180), 0xfe, 0x263, &(0x7f0000000700)="$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") connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 21.631472709s ago: executing program 33 (id=4412): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x57d, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x48140, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), 0x0, 0x841, 0x1) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 15.024940007s ago: executing program 34 (id=4429): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$int_in(r5, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_open_dev$hiddev(0x0, 0x7, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x2800418, &(0x7f0000000180), 0xfe, 0x263, &(0x7f0000000700)="$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") connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 10.232312088s ago: executing program 4 (id=4451): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$int_in(r4, 0x5452, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_open_dev$hiddev(0x0, 0x7, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x2800418, &(0x7f0000000180), 0xfe, 0x263, &(0x7f0000000700)="$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") connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 6.831380528s ago: executing program 4 (id=4455): socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0xffffffffffffffff) 5.651513386s ago: executing program 6 (id=4434): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=r1, @ANYBLOB="e8ac5bcdebf412ddd74920a1483f07cded9a1cb6a0c854a4cec4c52ed224f1085e15bbd2e54035b847f96847525f961d41b62d064a5228e6a73a19729afc5257a8d7fb94398b7d18159bf6181968615058922818da0d76ab441633ccc3be9f5c273ae01b7bc79522cc14fab787ba14cb03e4a472227b82bba59d82aa00b29e89dfd7022498cc97b0d4d38fb40619521457419843c142c0cd159c16d3cb6db1c01dcc23e820a03ff7ba0389ec431f676333aae3c0a6d100cc4f842bccf189b5838f64c52b1f0587e0bf1bbf3e1c1ee3c98e9db93637274b25", @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x5, 0x7f) openat$ptmx(0xffffffffffffff9c, 0x0, 0x446000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x89) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff63, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x0, 0x44a, &(0x7f0000000400)="$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") 5.37670999s ago: executing program 4 (id=4458): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=r1, @ANYBLOB="e8ac5bcdebf412ddd74920a1483f07cded9a1cb6a0c854a4cec4c52ed224f1085e15bbd2e54035b847f96847525f961d41b62d064a5228e6a73a19729afc5257a8d7fb94398b7d18159bf6181968615058922818da0d76ab441633ccc3be9f5c273ae01b7bc79522cc14fab787ba14cb03e4a472227b82bba59d82aa00b29e89dfd7022498cc97b0d4d38fb40619521457419843c142c0cd159c16d3cb6db1c01dcc23e820a03ff7ba0389ec431f676333aae3c0a6d100cc4f842bccf189b5838f64c52b1f0587e0bf1bbf3e1c1ee3c98e9db93637274b25", @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x5, 0x7f) openat$ptmx(0xffffffffffffff9c, 0x0, 0x446000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x89) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, 0x0, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff63, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x0, 0x44a, &(0x7f0000000400)="$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") 5.338330091s ago: executing program 4 (id=4459): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) 5.294446311s ago: executing program 6 (id=4460): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) 4.520303653s ago: executing program 1 (id=4464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000f0000060026000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r1 = creat(0x0, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x25}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) 3.957503371s ago: executing program 7 (id=4440): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.617951986s ago: executing program 1 (id=4466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0600000004000000082000000100000080000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1000000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getuid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) 3.479135528s ago: executing program 7 (id=4467): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$int_in(r5, 0x5452, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_open_dev$hiddev(0x0, 0x7, 0x400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x2800418, &(0x7f0000000180), 0xfe, 0x263, &(0x7f0000000700)="$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") connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 3.478246918s ago: executing program 5 (id=4468): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=r1, @ANYBLOB="e8ac5bcdebf412ddd74920a1483f07cded9a1cb6a0c854a4cec4c52ed224f1085e15bbd2e54035b847f96847525f961d41b62d064a5228e6a73a19729afc5257a8d7fb94398b7d18159bf6181968615058922818da0d76ab441633ccc3be9f5c273ae01b7bc79522cc14fab787ba14cb03e4a472227b82bba59d82aa00b29e89dfd7022498cc97b0d4d38fb40619521457419843c142c0cd159c16d3cb6db1c01dcc23e820a03ff7ba0389ec431f676333aae3c0a6d100cc4f842bccf189b5838f64c52b1f0587e0bf1bbf3e1c1ee3c98e9db93637274b25", @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x5, 0x7f) openat$ptmx(0xffffffffffffff9c, 0x0, 0x446000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x89) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0), 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff63, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x0, 0x44a, &(0x7f0000000400)="$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") 3.097169324s ago: executing program 5 (id=4469): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.787031839s ago: executing program 4 (id=4470): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0xffff67a9, 0xd4e3, 0x2, 0x7}, 0x8, 0x1, 0x3, 0x6, 0x6, 0x3, 0x11, 0xf, 0x3, 0xd, {0x83, 0x9, 0xfff, 0x232, 0x417, 0x5}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xb, 0x9, 0x6, 0x1c2, 0x5, 0x2, 0x9, 0x8, [{0x400, 0x0, 0x0, 0x20800}, {0x6, 0x2cb, 0x1, 0x401}, {0x9, 0x91, 0xffff, 0x1000}, {0x2, 0xf5, 0xffffff0e, 0x7fff}, {0x6, 0x7fffffff, 0x5, 0x3}, {0x7, 0x7, 0xc00000, 0x7f}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xe}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect$uac1(0x2, 0x71, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='bond0\x00') 2.773658249s ago: executing program 6 (id=4471): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.68185526s ago: executing program 1 (id=4472): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) 2.320706835s ago: executing program 7 (id=4473): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0xffff67a9, 0xd4e3, 0x2, 0x7}, 0x8, 0x1, 0x3, 0x6, 0x6, 0x3, 0x11, 0xf, 0x3, 0xd, {0x83, 0x9, 0xfff, 0x232, 0x417, 0x5}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xb, 0x9, 0x6, 0x1c2, 0x5, 0x2, 0x9, 0x8, [{0x400, 0x0, 0x0, 0x20800}, {0x6, 0x2cb, 0x1, 0x401}, {0x9, 0x91, 0xffff, 0x1000}, {0x2, 0xf5, 0xffffff0e, 0x7fff}, {0x6, 0x7fffffff, 0x5, 0x3}, {0x7, 0x7, 0xc00000, 0x7f}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xe}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect$uac1(0x2, 0x71, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='bond0\x00') 2.265267456s ago: executing program 5 (id=4474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0600000004000000082000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1000000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getuid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) 1.611951516s ago: executing program 4 (id=4475): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.591168896s ago: executing program 5 (id=4476): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.191662102s ago: executing program 1 (id=4477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) 787.736128ms ago: executing program 1 (id=4478): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 367.521534ms ago: executing program 6 (id=4479): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0xffff67a9, 0xd4e3, 0x2, 0x7}, 0x8, 0x1, 0x3, 0x6, 0x6, 0x3, 0x11, 0xf, 0x3, 0xd, {0x83, 0x9, 0xfff, 0x232, 0x417, 0x5}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xb, 0x9, 0x6, 0x1c2, 0x5, 0x2, 0x9, 0x8, [{0x400, 0x0, 0x0, 0x20800}, {0x6, 0x2cb, 0x1, 0x401}, {0x9, 0x91, 0xffff, 0x1000}, {0x2, 0xf5, 0xffffff0e, 0x7fff}, {0x6, 0x7fffffff, 0x5, 0x3}, {0x7, 0x7, 0xc00000, 0x7f}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xe}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect$uac1(0x2, 0x71, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='bond0\x00') 266.256646ms ago: executing program 1 (id=4480): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}]}}}]}, 0x3c}}, 0x48000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 203.995186ms ago: executing program 5 (id=4481): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=r1, @ANYBLOB="e8ac5bcdebf412ddd74920a1483f07cded9a1cb6a0c854a4cec4c52ed224f1085e15bbd2e54035b847f96847525f961d41b62d064a5228e6a73a19729afc5257a8d7fb94398b7d18159bf6181968615058922818da0d76ab441633ccc3be9f5c273ae01b7bc79522cc14fab787ba14cb03e4a472227b82bba59d82aa00b29e89dfd7022498cc97b0d4d38fb40619521457419843c142c0cd159c16d3cb6db1c01dcc23e820a03ff7ba0389ec431f676333aae3c0a6d100cc4f842bccf189b5838f64c52b1f0587e0bf1bbf3e1c1ee3c98e9db93637274b25", @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x5, 0x7f) openat$ptmx(0xffffffffffffff9c, 0x0, 0x446000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x89) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0), 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff63, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x0, 0x44a, &(0x7f0000000400)="$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") 0s ago: executing program 5 (id=4482): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000280), 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000004280)='./file2\x00', 0x1001a, &(0x7f0000000240)={[], [{@uid_lt={'uid<', r5}}]}, 0x1, 0x449, &(0x7f0000001100)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000140)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) kernel console output (not intermixed with test programs): large, truncated to 1048576 [ 873.440068][T10564] xt_hashlimit: size too large, truncated to 1048576 [ 873.922002][T10570] loop1: detected capacity change from 0 to 512 [ 873.960389][T10570] EXT4-fs (loop1): Test dummy encryption mode enabled [ 873.990132][T10570] EXT4-fs error (device loop1): __ext4_iget:4924: inode #11: block 1: comm syz.1.3005: invalid block [ 874.009518][T10570] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.3005: couldn't read orphan inode 11 (err -117) [ 874.039504][T10570] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 874.252584][T10581] overlayfs: failed to clone upperpath [ 874.280497][T10583] loop1: detected capacity change from 0 to 512 [ 874.292828][T10587] loop2: detected capacity change from 0 to 256 [ 874.445094][T10583] EXT4-fs (loop1): Test dummy encryption mode enabled [ 874.595957][T10583] EXT4-fs error (device loop1): __ext4_iget:4924: inode #11: block 1: comm syz.1.3006: invalid block [ 874.611602][T10583] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.3006: couldn't read orphan inode 11 (err -117) [ 874.624127][T10583] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 875.151073][T10598] xt_hashlimit: size too large, truncated to 1048576 [ 875.363951][T10605] loop2: detected capacity change from 0 to 256 [ 875.511787][T10608] overlayfs: missing 'lowerdir' [ 875.572075][T10609] overlayfs: missing 'lowerdir' [ 876.309387][T10620] overlayfs: missing 'lowerdir' [ 882.613860][T10680] loop2: detected capacity change from 0 to 512 [ 882.770193][T10680] EXT4-fs (loop2): Test dummy encryption mode enabled [ 882.796205][T10680] EXT4-fs error (device loop2): __ext4_iget:4924: inode #11: block 1: comm syz.2.3033: invalid block [ 882.839788][T10680] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3033: couldn't read orphan inode 11 (err -117) [ 882.911089][T10680] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 883.185176][T10692] overlayfs: missing 'lowerdir' [ 883.282838][T10695] overlayfs: missing 'lowerdir' [ 883.516678][T10699] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 883.734327][T10702] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3038'. [ 883.999732][T10685] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 884.207103][T10704] loop1: detected capacity change from 0 to 256 [ 886.476600][T10732] overlayfs: missing 'lowerdir' [ 887.291189][T10740] overlayfs: missing 'lowerdir' [ 888.629075][T10749] xt_hashlimit: size too large, truncated to 1048576 [ 890.338339][T10765] loop1: detected capacity change from 0 to 512 [ 890.390587][T10765] EXT4-fs (loop1): Test dummy encryption mode enabled [ 890.418316][T10765] EXT4-fs error (device loop1): __ext4_iget:4924: inode #11: block 1: comm syz.1.3054: invalid block [ 890.430129][T10765] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.3054: couldn't read orphan inode 11 (err -117) [ 890.442902][T10765] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 892.399673][T10775] overlayfs: missing 'lowerdir' [ 893.856972][T10789] loop2: detected capacity change from 0 to 256 [ 894.212054][T10793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3061'. [ 895.350387][T10798] loop1: detected capacity change from 0 to 512 [ 895.390146][T10798] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 895.473125][T10803] overlayfs: missing 'lowerdir' [ 895.899178][T10814] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3066'. [ 896.645679][T10824] loop2: detected capacity change from 0 to 256 [ 899.005682][T10852] loop1: detected capacity change from 0 to 256 [ 901.252907][T10867] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3078'. [ 901.352605][T10869] overlayfs: missing 'lowerdir' [ 901.483237][T10859] overlayfs: missing 'lowerdir' [ 901.846931][T10876] loop1: detected capacity change from 0 to 512 [ 901.960230][T10876] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 903.588224][T10891] overlayfs: missing 'lowerdir' [ 904.052280][T10897] loop2: detected capacity change from 0 to 512 [ 905.545254][T10897] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3088: inode #1: comm syz.2.3088: iget: illegal inode # [ 905.592579][T10897] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3088: error while reading EA inode 1 err=-117 [ 905.661375][T10897] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3088: inode #1: comm syz.2.3088: iget: illegal inode # [ 905.712150][T10897] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3088: error while reading EA inode 1 err=-117 [ 905.780298][T10897] EXT4-fs (loop2): 1 orphan inode deleted [ 905.786237][T10897] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 905.941989][T10919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3093'. [ 906.048010][T10905] overlayfs: missing 'lowerdir' [ 906.308896][T10924] overlayfs: missing 'lowerdir' [ 911.164539][T10955] overlayfs: missing 'lowerdir' [ 912.100961][T10977] overlayfs: missing 'lowerdir' [ 913.068967][T10981] loop1: detected capacity change from 0 to 512 [ 913.293110][T10981] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 913.329701][T10987] loop2: detected capacity change from 0 to 256 [ 913.849820][T10994] overlayfs: missing 'lowerdir' [ 914.130320][T10997] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3111'. [ 915.231191][T11011] loop1: detected capacity change from 0 to 256 [ 919.080644][T11037] loop1: detected capacity change from 0 to 512 [ 919.257650][T11046] loop2: detected capacity change from 0 to 256 [ 919.332323][T11037] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 919.340021][T11037] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 919.349079][T11037] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 919.359888][T11037] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 919.369770][T11037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 919.377913][T11037] System zones: 0-2, 18-18, 34-34 [ 919.384361][T11037] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 919.400242][T11037] EXT4-fs (loop1): 1 truncate cleaned up [ 919.405921][T11037] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 920.887516][T11054] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3128'. [ 924.465309][T11090] loop2: detected capacity change from 0 to 512 [ 927.163432][T11112] overlayfs: missing 'lowerdir' [ 928.412649][T11090] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3138: inode #1: comm syz.2.3138: iget: illegal inode # [ 928.440804][T11090] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3138: error while reading EA inode 1 err=-117 [ 928.509600][T11123] overlayfs: missing 'lowerdir' [ 928.875690][T11090] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3138: inode #1: comm syz.2.3138: iget: illegal inode # [ 928.889796][T11090] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3138: error while reading EA inode 1 err=-117 [ 928.910361][T11128] loop1: detected capacity change from 0 to 256 [ 928.919735][T11090] EXT4-fs (loop2): 1 orphan inode deleted [ 928.925512][T11090] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 929.460298][T11135] loop2: detected capacity change from 0 to 256 [ 929.573349][T11138] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3148'. [ 930.636604][T11151] overlayfs: missing 'lowerdir' [ 930.692479][T11152] xt_hashlimit: size too large, truncated to 1048576 [ 931.442725][T11160] loop2: detected capacity change from 0 to 512 [ 932.259172][T11160] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 933.185371][T11167] loop1: detected capacity change from 0 to 512 [ 933.234000][T11167] EXT4-fs (loop1): Test dummy encryption mode enabled [ 933.302202][T11167] EXT4-fs error (device loop1): __ext4_iget:4924: inode #11: block 1: comm syz.1.3157: invalid block [ 933.314046][T11167] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.3157: couldn't read orphan inode 11 (err -117) [ 933.362096][T11167] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 935.439680][T11117] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 940.238353][T11220] overlayfs: missing 'lowerdir' [ 940.579183][T11223] loop1: detected capacity change from 0 to 512 [ 940.723980][T11223] EXT4-fs (loop1): Test dummy encryption mode enabled [ 940.755542][T11227] xt_hashlimit: size too large, truncated to 1048576 [ 940.790008][T11223] EXT4-fs error (device loop1): __ext4_iget:4924: inode #11: block 1: comm syz.1.3168: invalid block [ 940.802876][T11223] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.3168: couldn't read orphan inode 11 (err -117) [ 940.816510][T11223] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 944.282383][T11267] loop2: detected capacity change from 0 to 256 [ 944.974316][T11270] overlayfs: missing 'lowerdir' [ 945.240550][T11273] overlayfs: missing 'lowerdir' [ 945.280814][T11274] overlayfs: missing 'lowerdir' [ 946.470115][T11290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3185'. [ 947.243310][T11303] loop2: detected capacity change from 0 to 512 [ 947.704125][T11303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3193: inode #1: comm syz.2.3193: iget: illegal inode # [ 947.778337][T11303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3193: error while reading EA inode 1 err=-117 [ 947.791427][T11303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3193: inode #1: comm syz.2.3193: iget: illegal inode # [ 947.805109][T11303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3193: error while reading EA inode 1 err=-117 [ 947.818183][T11303] EXT4-fs (loop2): 1 orphan inode deleted [ 947.858571][T11303] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 948.548777][T11326] loop1: detected capacity change from 0 to 512 [ 949.146255][T11330] overlayfs: missing 'lowerdir' [ 949.152511][T11326] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 949.160260][T11326] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 949.176038][T11326] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 949.213845][T11326] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 949.222978][T11326] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 949.232463][T11326] System zones: 0-2, 18-18, 34-34 [ 949.238404][T11326] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 949.253440][T11326] EXT4-fs (loop1): 1 truncate cleaned up [ 949.259975][T11326] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 950.637735][T11345] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.3199: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 951.104299][T11354] loop2: detected capacity change from 0 to 512 [ 951.112141][T11339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3203'. [ 951.145463][T11349] overlayfs: missing 'lowerdir' [ 951.182374][T11354] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3205: inode #1: comm syz.2.3205: iget: illegal inode # [ 951.196352][T11354] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3205: error while reading EA inode 1 err=-117 [ 951.245319][T11354] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3205: inode #1: comm syz.2.3205: iget: illegal inode # [ 951.259164][T11354] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3205: error while reading EA inode 1 err=-117 [ 951.272146][T11361] xt_hashlimit: size too large, truncated to 1048576 [ 951.285557][T11354] EXT4-fs (loop2): 1 orphan inode deleted [ 951.452855][T11364] loop1: detected capacity change from 0 to 512 [ 951.493429][T11364] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 951.568548][T11354] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 952.088559][T11372] loop1: detected capacity change from 0 to 512 [ 952.213469][T11372] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 952.220826][T11372] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 952.230331][T11372] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 953.997620][T11378] loop2: detected capacity change from 0 to 512 [ 954.217721][T11372] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 954.228582][T11372] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 954.238271][T11378] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 954.251213][T11372] System zones: 0-2, 18-18, 34-34 [ 954.257492][T11387] overlayfs: missing 'lowerdir' [ 954.264758][T11372] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 954.353714][T11372] EXT4-fs (loop1): 1 truncate cleaned up [ 954.359608][T11372] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 956.466328][T11396] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.3210: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 956.794177][T11408] loop1: detected capacity change from 0 to 256 [ 957.497843][T11409] loop2: detected capacity change from 0 to 512 [ 957.611992][T11386] overlayfs: missing 'lowerdir' [ 957.635278][T11409] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 959.013402][T11420] loop2: detected capacity change from 0 to 256 [ 959.049767][T11422] overlayfs: missing 'lowerdir' [ 959.434869][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3224'. [ 960.281978][T11433] loop1: detected capacity change from 0 to 512 [ 962.480234][T11433] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 962.491142][T11433] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 962.510588][T11433] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 962.558953][T11433] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 962.568298][T11433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 962.577232][T11433] System zones: 0-2, 18-18, 34-34 [ 962.585284][T11449] overlayfs: failed to clone upperpath [ 962.593219][T11433] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 962.608555][T11433] EXT4-fs (loop1): 1 truncate cleaned up [ 962.614489][T11433] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 964.252720][T11456] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.3228: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 964.753315][T11466] xt_hashlimit: size too large, truncated to 1048576 [ 966.110545][T11471] loop2: detected capacity change from 0 to 512 [ 966.140813][T11471] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 966.774182][T11486] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3238'. [ 967.470518][T11496] overlayfs: missing 'lowerdir' [ 967.685579][T11501] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3243'. [ 967.717362][T11506] overlayfs: missing 'lowerdir' [ 969.485042][T11524] xt_hashlimit: size too large, truncated to 1048576 [ 969.500725][T11525] xt_hashlimit: size too large, truncated to 1048576 [ 969.585495][T11533] loop2: detected capacity change from 0 to 512 [ 969.995795][T11533] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 970.033737][T11533] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 970.134203][T11533] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 970.230134][T11533] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 970.243392][T11533] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 970.261277][T11533] System zones: 0-2, 18-18, 34-34 [ 970.277138][T11533] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 970.305675][T11533] EXT4-fs (loop2): 1 truncate cleaned up [ 970.424409][T11533] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 970.810276][T11547] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3251: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 971.209489][T11553] loop2: detected capacity change from 0 to 256 [ 971.784746][T11562] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3258'. [ 972.891196][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3263'. [ 973.143288][T11582] loop1: detected capacity change from 0 to 512 [ 973.387819][T11579] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3266'. [ 973.407023][T11582] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 973.414292][T11582] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 973.423712][T11582] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 973.433249][T11582] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 973.442953][T11582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 973.451293][T11582] System zones: 0-2, 18-18, 34-34 [ 974.323420][T11582] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 974.373395][T11582] EXT4-fs (loop1): 1 truncate cleaned up [ 974.379318][T11582] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 976.772046][T11604] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.3267: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 978.141334][T11615] overlayfs: missing 'lowerdir' [ 978.226165][T11617] loop2: detected capacity change from 0 to 256 [ 979.626044][T11633] loop1: detected capacity change from 0 to 512 [ 979.670313][T11633] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 979.739256][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3278'. [ 981.804647][T11663] loop1: detected capacity change from 0 to 512 [ 981.842730][T11665] overlayfs: missing 'lowerdir' [ 981.991211][T11663] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 981.999006][T11663] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 982.008815][T11663] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 982.018215][T11663] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 982.061402][T11663] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 982.069786][T11663] System zones: 0-2, 18-18, 34-34 [ 982.076302][T11663] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 982.091512][T11663] EXT4-fs (loop1): 1 truncate cleaned up [ 982.097179][T11663] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 982.123482][T11677] loop2: detected capacity change from 0 to 512 [ 982.270274][T11677] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 982.358606][T11673] overlayfs: failed to clone upperpath [ 982.523455][T11680] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.3285: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 984.325573][T11706] overlayfs: missing 'lowerdir' [ 985.765746][T11713] loop2: detected capacity change from 0 to 256 [ 985.954521][T11714] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3299'. [ 991.339621][T11761] overlayfs: missing 'lowerdir' [ 991.568247][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3314'. [ 991.706534][T11773] loop1: detected capacity change from 0 to 256 [ 991.818269][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'. [ 994.487076][T11793] overlayfs: missing 'lowerdir' [ 994.813902][T11795] loop2: detected capacity change from 0 to 512 [ 995.103595][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3321'. [ 995.919698][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 996.230775][T11795] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 996.294415][T11795] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 996.446512][T11795] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 996.732163][T11795] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 996.742900][T11795] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 996.754224][T11795] System zones: 0-2, 18-18, 34-34 [ 996.768569][T11795] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 996.788321][T11795] EXT4-fs (loop2): 1 truncate cleaned up [ 996.796284][T11795] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 997.269254][T11823] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3322: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 998.735956][T11836] xt_hashlimit: size too large, truncated to 1048576 [ 1000.659951][T11856] loop1: detected capacity change from 0 to 256 [ 1001.683859][T11865] overlayfs: missing 'lowerdir' [ 1002.081463][T11856] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1003.693471][T11892] loop1: detected capacity change from 0 to 256 [ 1004.161974][T11897] xt_hashlimit: size too large, truncated to 1048576 [ 1006.058515][T11924] loop1: detected capacity change from 0 to 512 [ 1006.631315][T11924] EXT4-fs (loop1): 1 orphan inode deleted [ 1006.637262][T11924] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1006.649566][T11924] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.174751][T11941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3354'. [ 1009.542164][T11964] loop2: detected capacity change from 0 to 256 [ 1011.657044][T11971] xt_hashlimit: size too large, truncated to 1048576 [ 1013.742445][T12004] loop1: detected capacity change from 0 to 256 [ 1013.972070][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1015.265774][T12019] loop2: detected capacity change from 0 to 512 [ 1015.380644][T12019] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1017.473125][T12027] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3380'. [ 1017.483506][T12022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1017.749367][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3382'. [ 1020.359652][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1023.824977][T12074] loop1: detected capacity change from 0 to 512 [ 1023.835480][T12070] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3393'. [ 1023.842183][T12078] loop2: detected capacity change from 0 to 256 [ 1023.870114][T12074] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1023.877432][T12074] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1023.886579][T12074] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1023.895798][T12074] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 1023.904316][T12079] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3394'. [ 1023.914019][T12074] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1023.929516][T12074] System zones: 0-2, 18-18, 34-34 [ 1023.936901][T12074] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1023.953310][T12074] EXT4-fs (loop1): 1 truncate cleaned up [ 1023.959344][T12074] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1024.343223][T12088] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.3395: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1026.145047][T12107] loop1: detected capacity change from 0 to 256 [ 1026.258418][T12111] overlayfs: missing 'lowerdir' [ 1027.024506][T12108] loop2: detected capacity change from 0 to 512 [ 1027.107997][T12108] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3403: inode #1: comm syz.2.3403: iget: illegal inode # [ 1027.790481][T12108] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3403: error while reading EA inode 1 err=-117 [ 1027.819747][T12108] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3403: inode #1: comm syz.2.3403: iget: illegal inode # [ 1027.864819][T12108] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3403: error while reading EA inode 1 err=-117 [ 1028.159614][T12108] EXT4-fs (loop2): 1 orphan inode deleted [ 1028.167349][T12108] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1028.637533][T12134] loop1: detected capacity change from 0 to 512 [ 1028.897237][T12134] EXT4-fs (loop1): 1 orphan inode deleted [ 1028.903196][T12134] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1028.914356][T12134] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.743317][T12141] loop2: detected capacity change from 0 to 256 [ 1030.055074][T12148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1032.450095][T12174] loop1: detected capacity change from 0 to 512 [ 1032.568337][T12179] xt_hashlimit: size too large, truncated to 1048576 [ 1032.583857][T12174] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3419: inode #1: comm syz.1.3419: iget: illegal inode # [ 1032.614474][T12174] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3419: error while reading EA inode 1 err=-117 [ 1032.934826][T12177] loop2: detected capacity change from 0 to 512 [ 1033.113682][T12174] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3419: inode #1: comm syz.1.3419: iget: illegal inode # [ 1033.132913][T12177] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1033.711796][T12174] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3419: error while reading EA inode 1 err=-117 [ 1033.762087][T12174] EXT4-fs (loop1): 1 orphan inode deleted [ 1033.788217][T12174] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1035.338124][T12198] loop1: detected capacity change from 0 to 512 [ 1035.449795][T12198] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1036.017440][T12211] loop2: detected capacity change from 0 to 256 [ 1039.697474][T12225] loop1: detected capacity change from 0 to 512 [ 1039.947044][T12225] EXT4-fs (loop1): 1 orphan inode deleted [ 1039.952912][T12225] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1039.964623][T12225] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.185106][T12242] loop2: detected capacity change from 0 to 512 [ 1041.232055][T12242] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1041.245253][T12242] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1041.254873][T12242] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1041.276417][T12242] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1041.300287][T12242] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1041.333583][T12242] System zones: 0-2, 18-18, 34-34 [ 1041.364201][T12242] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1041.381635][T12242] EXT4-fs (loop2): 1 truncate cleaned up [ 1041.387545][T12242] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1042.104870][T12254] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3436: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1046.352592][T12275] loop2: detected capacity change from 0 to 512 [ 1046.676693][T12275] EXT4-fs (loop2): 1 orphan inode deleted [ 1046.682618][T12275] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1046.693730][T12275] ext4 filesystem being mounted at /649/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.694942][T12289] loop1: detected capacity change from 0 to 512 [ 1047.830533][T12289] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1055.266280][T12331] xt_hashlimit: size too large, truncated to 1048576 [ 1055.301072][T12333] loop1: detected capacity change from 0 to 512 [ 1055.323056][T12325] loop2: detected capacity change from 0 to 512 [ 1055.370159][T12333] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1055.370159][T12325] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1055.818767][T12342] overlayfs: failed to clone upperpath [ 1056.065846][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 1056.143772][T12350] loop1: detected capacity change from 0 to 512 [ 1056.180110][T12350] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1057.372233][T12362] overlayfs: failed to clone upperpath [ 1057.579608][T12368] loop1: detected capacity change from 0 to 256 [ 1059.248588][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3468'. [ 1060.771089][T12393] xt_hashlimit: size too large, truncated to 1048576 [ 1062.351602][T12403] overlayfs: failed to clone upperpath [ 1062.634762][T12412] loop1: detected capacity change from 0 to 256 [ 1070.738104][T12458] xt_hashlimit: size too large, truncated to 1048576 [ 1071.625743][T12468] loop2: detected capacity change from 0 to 512 [ 1072.073636][T12468] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1072.380075][T12480] loop2: detected capacity change from 0 to 256 [ 1073.555094][T12486] loop1: detected capacity change from 0 to 512 [ 1075.409953][T12486] EXT4-fs: error -4 creating inode table initialization thread [ 1075.417832][T12486] EXT4-fs (loop1): mount failed [ 1075.765711][T12503] loop2: detected capacity change from 0 to 512 [ 1075.820371][T12503] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1075.871807][T12503] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1075.888151][T12503] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1075.897407][T12515] xt_hashlimit: size too large, truncated to 1048576 [ 1075.919806][T12503] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1075.937837][T12503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1076.465725][T12503] System zones: 0-2, 18-18, 34-34 [ 1076.777929][T12503] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1076.813006][T12503] EXT4-fs (loop2): 1 truncate cleaned up [ 1076.818704][T12503] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1077.830139][T12533] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3500: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1078.032724][T12537] loop1: detected capacity change from 0 to 256 [ 1080.229466][T12548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1080.387072][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1080.722454][T12558] loop2: detected capacity change from 0 to 512 [ 1081.280088][T12558] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1082.700519][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 1083.154274][T12574] loop2: detected capacity change from 0 to 512 [ 1083.538960][T12574] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1083.553186][T12574] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1083.585879][T12574] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1083.598028][T12574] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1083.607819][T12574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1083.616310][T12574] System zones: 0-2, 18-18, 34-34 [ 1083.622854][T12574] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1083.672209][T12574] EXT4-fs (loop2): 1 truncate cleaned up [ 1083.677968][T12574] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1083.851098][T12587] loop1: detected capacity change from 0 to 512 [ 1085.781300][T12589] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3519: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1085.810080][T12587] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1086.026250][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3524'. [ 1087.357485][T12607] loop2: detected capacity change from 0 to 512 [ 1087.374798][T12606] loop1: detected capacity change from 0 to 512 [ 1087.989772][T12607] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1088.001696][T12606] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1088.950023][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1088.951520][T12628] loop1: detected capacity change from 0 to 512 [ 1091.258589][T12628] EXT4-fs (loop1): 1 orphan inode deleted [ 1091.264692][T12628] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1091.275820][T12628] ext4 filesystem being mounted at /608/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.700465][T12648] loop2: detected capacity change from 0 to 512 [ 1093.321187][T12648] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1096.941031][T12671] loop2: detected capacity change from 0 to 512 [ 1096.983495][T12671] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3544: inode #1: comm syz.2.3544: iget: illegal inode # [ 1096.996971][T12671] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3544: error while reading EA inode 1 err=-117 [ 1097.012616][T12671] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3544: inode #1: comm syz.2.3544: iget: illegal inode # [ 1097.032953][T12671] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3544: error while reading EA inode 1 err=-117 [ 1097.046715][T12671] EXT4-fs (loop2): 1 orphan inode deleted [ 1097.064863][T12671] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1097.092886][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3545'. [ 1098.789822][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3551'. [ 1102.154658][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 1104.601061][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1105.725159][T12767] loop2: detected capacity change from 0 to 512 [ 1105.773551][T12767] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1106.175620][T12777] loop1: detected capacity change from 0 to 512 [ 1106.252779][T12777] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3569: inode #1: comm syz.1.3569: iget: illegal inode # [ 1107.031810][T12777] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3569: error while reading EA inode 1 err=-117 [ 1107.049095][T12777] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3569: inode #1: comm syz.1.3569: iget: illegal inode # [ 1107.063809][T12777] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3569: error while reading EA inode 1 err=-117 [ 1107.380848][T12777] EXT4-fs (loop1): 1 orphan inode deleted [ 1107.472660][T12777] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1108.652210][T12808] loop2: detected capacity change from 0 to 512 [ 1109.305754][T12808] EXT4-fs (loop2): 1 orphan inode deleted [ 1109.311663][T12808] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1109.322899][T12808] ext4 filesystem being mounted at /675/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.153227][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 1110.761507][T12823] xt_hashlimit: size too large, truncated to 1048576 [ 1110.955010][T12826] loop1: detected capacity change from 0 to 512 [ 1111.061536][T12826] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3580: inode #1: comm syz.1.3580: iget: illegal inode # [ 1111.083355][T12826] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3580: error while reading EA inode 1 err=-117 [ 1111.109284][T12826] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3580: inode #1: comm syz.1.3580: iget: illegal inode # [ 1111.138223][T12826] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3580: error while reading EA inode 1 err=-117 [ 1111.158607][T12826] EXT4-fs (loop1): 1 orphan inode deleted [ 1111.164993][T12826] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1112.222133][T12843] loop1: detected capacity change from 0 to 512 [ 1112.842777][T12843] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1113.406648][T12847] loop2: detected capacity change from 0 to 512 [ 1113.541391][T12847] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1113.550719][T12847] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1113.588650][T12847] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1113.787687][T12847] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1113.833905][T12847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1113.880005][T12847] System zones: 0-2, 18-18, 34-34 [ 1113.890604][T12847] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1113.918156][T12847] EXT4-fs (loop2): 1 truncate cleaned up [ 1113.933511][T12847] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1115.082647][T12856] loop1: detected capacity change from 0 to 512 [ 1115.104307][T12862] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3587: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1115.366661][T12856] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1115.403518][T12858] overlayfs: failed to clone upperpath [ 1116.335139][T12881] loop2: detected capacity change from 0 to 512 [ 1117.487434][T12881] EXT4-fs (loop2): 1 orphan inode deleted [ 1117.493416][T12881] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1117.504529][T12881] ext4 filesystem being mounted at /677/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.521830][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3600'. [ 1119.883693][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 1120.249736][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3604'. [ 1120.429703][T12925] xt_hashlimit: size too large, truncated to 1048576 [ 1121.361788][T12942] loop1: detected capacity change from 0 to 512 [ 1121.540869][T12942] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1123.493461][T12955] loop2: detected capacity change from 0 to 512 [ 1123.543835][T12955] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1123.723893][T12960] loop1: detected capacity change from 0 to 512 [ 1123.790196][T12960] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1123.798629][T12960] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1123.815526][T12967] xt_hashlimit: size too large, truncated to 1048576 [ 1123.943667][T12960] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1124.770054][T12960] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 1124.781196][T12960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1124.789275][T12960] System zones: 0-2, 18-18, 34-34 [ 1124.796426][T12960] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1125.011305][T12960] EXT4-fs (loop1): 1 truncate cleaned up [ 1125.024374][T12960] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1126.623353][T12990] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.3617: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1126.684420][T12992] overlayfs: failed to clone upperpath [ 1126.920763][T12997] loop1: detected capacity change from 0 to 512 [ 1126.995710][T12997] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3626: inode #1: comm syz.1.3626: iget: illegal inode # [ 1127.009968][T12997] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3626: error while reading EA inode 1 err=-117 [ 1127.041762][T12997] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3626: inode #1: comm syz.1.3626: iget: illegal inode # [ 1127.066568][T12997] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3626: error while reading EA inode 1 err=-117 [ 1127.080140][T12997] EXT4-fs (loop1): 1 orphan inode deleted [ 1127.086066][T12997] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1127.360292][T13010] xt_hashlimit: size too large, truncated to 1048576 [ 1128.913900][T13019] loop1: detected capacity change from 0 to 512 [ 1133.850073][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'. [ 1134.707002][T13037] xt_hashlimit: size too large, truncated to 1048576 [ 1135.930586][T13045] overlayfs: failed to clone upperpath [ 1136.128232][T13050] overlayfs: failed to clone upperpath [ 1138.112095][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3644'. [ 1139.558800][T13067] loop1: detected capacity change from 0 to 512 [ 1139.642218][T13067] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1141.295379][T13108] loop1: detected capacity change from 0 to 512 [ 1141.967819][T13108] EXT4-fs (loop1): 1 orphan inode deleted [ 1141.973796][T13108] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1141.985535][T13108] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.354786][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3659'. [ 1145.940389][T13153] loop1: detected capacity change from 0 to 512 [ 1146.010271][T13153] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1146.932817][T13164] loop2: detected capacity change from 0 to 512 [ 1147.021704][T13164] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1148.371669][T13180] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3673'. [ 1148.554050][T13182] loop1: detected capacity change from 0 to 512 [ 1149.344261][T13182] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1149.584467][T13190] loop2: detected capacity change from 0 to 512 [ 1149.635073][T13190] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1150.764310][T13190] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1150.784129][T13190] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1151.671453][T13190] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1151.680945][T13190] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1151.689038][T13190] System zones: 0-2, 18-18, 34-34 [ 1151.710954][T13190] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1151.850831][T13190] EXT4-fs (loop2): 1 truncate cleaned up [ 1151.860219][T13216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3684'. [ 1151.879534][T13190] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1152.016717][T13217] loop1: detected capacity change from 0 to 512 [ 1152.255917][T13217] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1152.722843][T13220] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3680: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1153.160430][T13232] xt_hashlimit: size too large, truncated to 1048576 [ 1153.592715][T13242] loop1: detected capacity change from 0 to 256 [ 1154.824220][T13250] xt_hashlimit: size too large, truncated to 1048576 [ 1158.900035][T13279] loop1: detected capacity change from 0 to 512 [ 1159.050394][T13279] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3702: inode #1: comm syz.1.3702: iget: illegal inode # [ 1159.085211][T13279] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3702: error while reading EA inode 1 err=-117 [ 1159.188158][T13279] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3702: inode #1: comm syz.1.3702: iget: illegal inode # [ 1159.201853][T13279] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3702: error while reading EA inode 1 err=-117 [ 1159.216342][T13279] EXT4-fs (loop1): 1 orphan inode deleted [ 1159.222766][T13279] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1161.230786][T13298] loop2: detected capacity change from 0 to 512 [ 1161.308463][T13298] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1161.636886][T13307] loop1: detected capacity change from 0 to 256 [ 1162.347997][T13319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3710'. [ 1163.523212][T13330] loop2: detected capacity change from 0 to 512 [ 1164.040212][T13330] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1164.917786][T13339] loop1: detected capacity change from 0 to 512 [ 1165.822227][T13339] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1165.832315][T13347] loop2: detected capacity change from 0 to 512 [ 1165.862415][T13347] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3721: inode #1: comm syz.2.3721: iget: illegal inode # [ 1166.851548][T13347] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3721: error while reading EA inode 1 err=-117 [ 1167.118781][T13347] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3721: inode #1: comm syz.2.3721: iget: illegal inode # [ 1167.934738][T13358] loop1: detected capacity change from 0 to 512 [ 1168.111503][T13347] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3721: error while reading EA inode 1 err=-117 [ 1168.710743][T13347] EXT4-fs (loop2): 1 orphan inode deleted [ 1168.742131][T13358] EXT4-fs (loop1): 1 orphan inode deleted [ 1168.747970][T13358] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1168.759732][T13358] ext4 filesystem being mounted at /639/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1168.818252][T13347] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1170.233517][T13380] overlayfs: failed to clone upperpath [ 1170.413732][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3729'. [ 1173.199462][T13410] loop2: detected capacity change from 0 to 256 [ 1177.491212][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3748'. [ 1177.503764][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 1178.006871][T13460] loop2: detected capacity change from 0 to 512 [ 1178.940644][T13460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3752: inode #1: comm syz.2.3752: iget: illegal inode # [ 1179.019750][T13460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3752: error while reading EA inode 1 err=-117 [ 1179.049672][T13460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3752: inode #1: comm syz.2.3752: iget: illegal inode # [ 1179.675193][T13460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3752: error while reading EA inode 1 err=-117 [ 1179.705789][T13460] EXT4-fs (loop2): 1 orphan inode deleted [ 1179.741578][T13460] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1180.997388][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3757'. [ 1183.637315][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3764'. [ 1184.898344][T13530] loop1: detected capacity change from 0 to 512 [ 1184.912358][T13531] loop2: detected capacity change from 0 to 512 [ 1184.963007][T13531] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3768: inode #1: comm syz.2.3768: iget: illegal inode # [ 1184.976526][T13531] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3768: error while reading EA inode 1 err=-117 [ 1184.989951][T13531] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3768: inode #1: comm syz.2.3768: iget: illegal inode # [ 1185.003590][T13531] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3768: error while reading EA inode 1 err=-117 [ 1185.056652][T13531] EXT4-fs (loop2): 1 orphan inode deleted [ 1185.062684][T13531] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1185.091456][T13530] EXT4-fs (loop1): 1 orphan inode deleted [ 1185.097243][T13530] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1185.108691][T13530] ext4 filesystem being mounted at /647/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.377259][T13563] loop2: detected capacity change from 0 to 512 [ 1188.465458][T13563] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1192.806414][T13603] loop1: detected capacity change from 0 to 512 [ 1193.055722][T13603] EXT4-fs (loop1): 1 orphan inode deleted [ 1193.061571][T13603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1193.072729][T13603] ext4 filesystem being mounted at /650/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1193.754771][T13618] loop2: detected capacity change from 0 to 512 [ 1194.586713][T13618] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1195.134687][T13630] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3793'. [ 1196.312810][T13643] loop1: detected capacity change from 0 to 512 [ 1197.202928][T13643] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1201.326715][T13667] loop2: detected capacity change from 0 to 512 [ 1201.337124][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3804'. [ 1201.972975][T13667] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1204.742611][T13698] loop1: detected capacity change from 0 to 512 [ 1204.779549][T13698] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1204.865986][T13696] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3813'. [ 1205.985327][T13724] loop1: detected capacity change from 0 to 512 [ 1206.113406][T13724] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1206.120696][T13724] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1206.179533][T13724] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1206.582620][T13724] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 1206.649658][T13724] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1206.676940][T13724] System zones: 0-2, 18-18, 34-34 [ 1206.724360][T13724] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1206.774421][T13724] EXT4-fs (loop1): 1 truncate cleaned up [ 1206.817907][T13724] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1208.194020][T13753] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.3822: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1210.957573][T13777] loop1: detected capacity change from 0 to 256 [ 1211.437497][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3834'. [ 1216.099578][T13839] loop2: detected capacity change from 0 to 512 [ 1216.990943][T13839] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1217.011858][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3854'. [ 1217.225136][T13854] xt_hashlimit: size too large, truncated to 1048576 [ 1217.976103][T13868] loop2: detected capacity change from 0 to 512 [ 1218.567869][T13868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3859: inode #1: comm syz.2.3859: iget: illegal inode # [ 1218.659796][T13868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3859: error while reading EA inode 1 err=-117 [ 1218.685472][T13868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3859: inode #1: comm syz.2.3859: iget: illegal inode # [ 1218.720005][T13868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3859: error while reading EA inode 1 err=-117 [ 1218.782745][T13868] EXT4-fs (loop2): 1 orphan inode deleted [ 1218.793828][T13868] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1220.585736][T13898] loop1: detected capacity change from 0 to 512 [ 1220.781066][T13898] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3869: inode #1: comm syz.1.3869: iget: illegal inode # [ 1220.796118][T13898] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3869: error while reading EA inode 1 err=-117 [ 1220.890912][T13898] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3869: inode #1: comm syz.1.3869: iget: illegal inode # [ 1220.904371][T13898] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3869: error while reading EA inode 1 err=-117 [ 1220.935009][T13898] EXT4-fs (loop1): 1 orphan inode deleted [ 1220.946856][T13898] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1220.983721][T13907] xt_hashlimit: size too large, truncated to 1048576 [ 1222.307884][T13927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1222.317108][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1223.234535][T13942] loop1: detected capacity change from 0 to 256 [ 1223.963217][T13951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1224.029139][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 1224.159070][T13961] loop2: detected capacity change from 0 to 512 [ 1224.196875][T13961] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3886: inode #1: comm syz.2.3886: iget: illegal inode # [ 1224.239937][T13961] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3886: error while reading EA inode 1 err=-117 [ 1224.347141][T13961] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3886: inode #1: comm syz.2.3886: iget: illegal inode # [ 1224.376117][T13961] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3886: error while reading EA inode 1 err=-117 [ 1224.407789][T13961] EXT4-fs (loop2): 1 orphan inode deleted [ 1224.439878][T13961] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1224.534743][T13967] loop1: detected capacity change from 0 to 512 [ 1224.673111][T13967] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1225.276436][T13981] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1229.473869][T14034] loop1: detected capacity change from 0 to 512 [ 1229.846705][T14034] EXT4-fs (loop1): 1 orphan inode deleted [ 1229.904567][T14034] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1229.954055][T14034] ext4 filesystem being mounted at /672/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.612207][T14064] loop2: detected capacity change from 0 to 512 [ 1232.680182][T14064] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1235.656195][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1241.503624][T14171] loop2: detected capacity change from 0 to 512 [ 1241.563152][T14171] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1241.571899][T14171] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1241.680324][T14171] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1241.699955][T14171] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1241.717472][T14171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1241.762182][T14171] System zones: 0-2, 18-18, 34-34 [ 1241.782182][T14171] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1241.797896][T14171] EXT4-fs (loop2): 1 truncate cleaned up [ 1241.804388][T14171] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1243.555896][T14166] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3943: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1244.411685][T14210] loop2: detected capacity change from 0 to 512 [ 1244.462238][T14210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1245.330125][T14210] EXT4-fs (loop2): 1 truncate cleaned up [ 1245.335905][T14210] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 1249.515088][T14259] loop2: detected capacity change from 0 to 512 [ 1252.675130][T14268] loop1: detected capacity change from 0 to 256 [ 1253.922103][T14276] overlayfs: failed to clone upperpath [ 1255.421600][T14312] loop1: detected capacity change from 0 to 512 [ 1255.824950][T14312] EXT4-fs (loop1): 1 orphan inode deleted [ 1255.834394][T14312] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1255.879637][T14312] ext4 filesystem being mounted at /686/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1256.365889][T14320] loop2: detected capacity change from 0 to 512 [ 1256.501725][T14320] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1257.895864][T14337] overlayfs: failed to clone upperpath [ 1258.161372][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'. [ 1258.270905][T14346] loop2: detected capacity change from 0 to 512 [ 1258.310160][T14346] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1259.011357][T14355] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3990'. [ 1260.433602][T14377] loop2: detected capacity change from 0 to 256 [ 1262.764349][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4002'. [ 1264.514855][T14425] xt_hashlimit: size too large, truncated to 1048576 [ 1264.621579][T14432] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3758424113 (7516848226 ns) > initial count (6141915506 ns). Using initial count to start timer. [ 1264.867646][T14440] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4014'. [ 1265.030317][T14446] loop1: detected capacity change from 0 to 512 [ 1265.064554][T14446] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1265.148731][T14446] EXT4-fs error (device loop1): __ext4_iget:4924: inode #11: block 1: comm syz.1.4015: invalid block [ 1265.175234][T14446] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.4015: couldn't read orphan inode 11 (err -117) [ 1265.204635][T14446] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 1266.870466][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4021'. [ 1267.585307][T14486] loop2: detected capacity change from 0 to 512 [ 1268.202230][T14486] EXT4-fs (loop2): 1 orphan inode deleted [ 1268.208235][T14486] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1268.220143][T14486] ext4 filesystem being mounted at /762/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.604288][T14505] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4030'. [ 1269.310146][T14516] loop1: detected capacity change from 0 to 512 [ 1269.831434][T14516] EXT4-fs (loop1): 1 orphan inode deleted [ 1269.858370][T14516] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1269.994920][T14516] ext4 filesystem being mounted at /694/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.862811][T14532] loop2: detected capacity change from 0 to 256 [ 1272.228843][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 1275.253492][T14573] loop2: detected capacity change from 0 to 512 [ 1275.310168][T14573] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1276.804444][T14589] loop1: detected capacity change from 0 to 512 [ 1276.891967][T14589] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4053: inode #1: comm syz.1.4053: iget: illegal inode # [ 1276.999751][T14589] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4053: error while reading EA inode 1 err=-117 [ 1277.041187][T14589] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4053: inode #1: comm syz.1.4053: iget: illegal inode # [ 1277.734417][T14596] loop2: detected capacity change from 0 to 512 [ 1277.741017][T14589] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4053: error while reading EA inode 1 err=-117 [ 1277.753935][T14589] EXT4-fs (loop1): 1 orphan inode deleted [ 1277.831537][T14596] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1277.890400][T14589] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1280.643984][T14628] loop2: detected capacity change from 0 to 512 [ 1280.701514][T14628] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1281.495526][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4067'. [ 1283.424871][T14675] loop2: detected capacity change from 0 to 256 [ 1283.719418][T14683] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4080'. [ 1284.081344][T14689] loop1: detected capacity change from 0 to 512 [ 1284.150425][T14689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4083: inode #1: comm syz.1.4083: iget: illegal inode # [ 1284.178354][T14689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4083: error while reading EA inode 1 err=-117 [ 1284.187832][T14695] xt_hashlimit: size too large, truncated to 1048576 [ 1284.214680][T14689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4083: inode #1: comm syz.1.4083: iget: illegal inode # [ 1284.262499][T14689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4083: error while reading EA inode 1 err=-117 [ 1284.311794][T14689] EXT4-fs (loop1): 1 orphan inode deleted [ 1284.335058][T14689] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1284.887423][T14713] loop1: detected capacity change from 0 to 256 [ 1284.940392][T14713] exfat: Deprecated parameter 'namecase' [ 1284.946470][T14713] exfat: Deprecated parameter 'utf8' [ 1284.952152][T14713] exfat: Deprecated parameter 'namecase' [ 1284.957913][T14713] exfat: Deprecated parameter 'utf8' [ 1284.967006][T14713] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 1285.777877][T14728] loop2: detected capacity change from 0 to 512 [ 1285.866595][T14732] xt_hashlimit: size too large, truncated to 1048576 [ 1285.884499][T14728] EXT4-fs (loop2): 1 orphan inode deleted [ 1285.895837][T14728] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1285.962430][T14736] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3758424113 (7516848226 ns) > initial count (6141915506 ns). Using initial count to start timer. [ 1285.996635][T14728] ext4 filesystem being mounted at /774/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1286.801527][T14750] loop1: detected capacity change from 0 to 512 [ 1286.852699][T14750] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1287.695284][T14763] loop1: detected capacity change from 0 to 256 [ 1289.339031][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4106'. [ 1289.463135][T14780] xt_hashlimit: size too large, truncated to 1048576 [ 1290.743625][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4110'. [ 1291.428389][T14812] loop2: detected capacity change from 0 to 512 [ 1291.462258][T14812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1291.556095][T14812] EXT4-fs (loop2): 1 truncate cleaned up [ 1291.561888][T14812] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 1291.665758][T14806] loop1: detected capacity change from 0 to 512 [ 1291.762923][T14806] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1291.969868][T14806] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1292.013129][T14806] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1292.154487][T14806] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 1292.269752][T14806] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1292.288191][T14806] System zones: 0-2, 18-18, 34-34 [ 1292.308895][T14806] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1292.328910][T14828] xt_hashlimit: size too large, truncated to 1048576 [ 1292.353559][T14806] EXT4-fs (loop1): 1 truncate cleaned up [ 1292.371749][T14806] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1293.390978][T14837] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.4116: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1296.167793][T14877] loop1: detected capacity change from 0 to 512 [ 1296.316020][T14877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4136: inode #1: comm syz.1.4136: iget: illegal inode # [ 1296.345141][T14877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4136: error while reading EA inode 1 err=-117 [ 1296.370241][T14877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4136: inode #1: comm syz.1.4136: iget: illegal inode # [ 1296.424345][T14877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4136: error while reading EA inode 1 err=-117 [ 1296.457844][T14884] xt_hashlimit: size too large, truncated to 1048576 [ 1296.478398][T14877] EXT4-fs (loop1): 1 orphan inode deleted [ 1296.499903][T14877] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1297.077344][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'. [ 1298.878331][T14913] loop2: detected capacity change from 0 to 512 [ 1299.000843][T14913] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1301.312820][T14938] loop1: detected capacity change from 0 to 512 [ 1301.418985][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'. [ 1301.441627][T14938] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1301.519355][T14938] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1301.612331][T14938] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1301.680309][T14938] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 1301.703341][T14938] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1301.726833][T14945] loop2: detected capacity change from 0 to 512 [ 1301.733373][T14938] System zones: 0-2, 18-18, 34-34 [ 1301.804564][T14945] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1301.811939][T14945] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1301.821426][T14945] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1301.841427][T14945] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1301.850752][T14945] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1301.850794][T14938] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1301.859015][T14945] System zones: 0-2, 18-18, 34-34 [ 1301.879625][T14938] EXT4-fs (loop1): 1 truncate cleaned up [ 1301.885302][T14938] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1302.247501][T14945] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1302.265335][T14945] EXT4-fs (loop2): 1 truncate cleaned up [ 1302.272462][T14945] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1302.491974][T14961] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.4152: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1302.650488][T14962] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.4155: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1305.086902][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4166'. [ 1305.226387][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4167'. [ 1307.691608][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'. [ 1307.953212][T15030] overlayfs: failed to clone upperpath [ 1308.418189][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1308.601767][T15038] overlayfs: failed to clone upperpath [ 1309.236332][T15048] loop1: detected capacity change from 0 to 128 [ 1309.305600][T15048] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1309.347679][T15048] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1309.358570][T15048] ext2 filesystem being mounted at /723/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.676776][T15059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1314.045922][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4197'. [ 1315.130535][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4203'. [ 1315.690198][T15118] loop2: detected capacity change from 0 to 128 [ 1315.887898][T15118] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1317.055235][T15118] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1317.066321][T15118] ext2 filesystem being mounted at /795/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1318.995689][T15147] loop2: detected capacity change from 0 to 512 [ 1319.312192][T15147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.4209: inode #1: comm syz.2.4209: iget: illegal inode # [ 1319.328563][T15147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.4209: error while reading EA inode 1 err=-117 [ 1319.382529][T15147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.4209: inode #1: comm syz.2.4209: iget: illegal inode # [ 1319.490425][T15147] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.4209: error while reading EA inode 1 err=-117 [ 1319.557420][T15147] EXT4-fs (loop2): 1 orphan inode deleted [ 1319.654819][T15147] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1321.031890][T15177] xt_hashlimit: size too large, truncated to 1048576 [ 1322.130956][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'. [ 1326.327172][T15239] xt_hashlimit: size too large, truncated to 1048576 [ 1327.097145][T15264] loop1: detected capacity change from 0 to 512 [ 1327.127321][T15265] overlayfs: failed to clone upperpath [ 1327.142987][T15264] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4244: inode #1: comm syz.1.4244: iget: illegal inode # [ 1327.156366][T15264] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4244: error while reading EA inode 1 err=-117 [ 1327.169281][T15264] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4244: inode #1: comm syz.1.4244: iget: illegal inode # [ 1327.182680][T15264] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4244: error while reading EA inode 1 err=-117 [ 1327.195391][T15264] EXT4-fs (loop1): 1 orphan inode deleted [ 1327.202769][T15264] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1330.347870][T15314] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4259'. [ 1330.397476][T15321] loop1: detected capacity change from 0 to 512 [ 1330.416810][T15323] overlayfs: failed to clone upperpath [ 1330.455425][T15321] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4262: inode #1: comm syz.1.4262: iget: illegal inode # [ 1330.479573][T15321] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4262: error while reading EA inode 1 err=-117 [ 1330.492373][T15321] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4262: inode #1: comm syz.1.4262: iget: illegal inode # [ 1330.505789][T15321] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4262: error while reading EA inode 1 err=-117 [ 1330.518824][T15321] EXT4-fs (loop1): 1 orphan inode deleted [ 1330.524706][T15321] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1331.706426][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 1336.151153][T15374] loop1: detected capacity change from 0 to 128 [ 1336.832082][T15374] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1336.890719][T15374] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1336.901594][T15374] ext2 filesystem being mounted at /736/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.013122][T15386] overlayfs: failed to clone upperpath [ 1337.407731][T15393] loop1: detected capacity change from 0 to 256 [ 1337.748340][T15401] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4280'. [ 1338.292515][T15411] loop2: detected capacity change from 0 to 512 [ 1338.633381][T15411] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1339.888538][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4290'. [ 1343.268639][T15446] loop1: detected capacity change from 0 to 512 [ 1343.302542][T15446] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4296: inode #1: comm syz.1.4296: iget: illegal inode # [ 1343.316758][T15446] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4296: error while reading EA inode 1 err=-117 [ 1343.343603][T15446] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4296: inode #1: comm syz.1.4296: iget: illegal inode # [ 1343.466036][T15446] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4296: error while reading EA inode 1 err=-117 [ 1343.483418][T15446] EXT4-fs (loop1): 1 orphan inode deleted [ 1343.500850][T15446] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1343.622459][T15461] overlayfs: failed to clone upperpath [ 1343.923823][T15469] loop1: detected capacity change from 0 to 128 [ 1343.997645][T15469] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1344.028785][T15469] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1344.040086][T15469] ext2 filesystem being mounted at /741/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1346.970289][T15489] loop2: detected capacity change from 0 to 512 [ 1348.912066][T15489] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1348.948137][T15495] loop1: detected capacity change from 0 to 256 [ 1350.067706][T15511] overlayfs: failed to clone upperpath [ 1352.725695][T15551] loop2: detected capacity change from 0 to 128 [ 1352.898693][T15551] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1353.005134][T15553] loop1: detected capacity change from 0 to 512 [ 1353.060239][T15553] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value [ 1353.085343][T15551] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1353.096465][T15551] ext2 filesystem being mounted at /822/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.097891][T15607] loop2: detected capacity change from 0 to 128 [ 1361.128558][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 1361.732090][T15607] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1361.847853][T15607] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1361.859109][T15607] ext2 filesystem being mounted at /825/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.158270][T15664] loop1: detected capacity change from 0 to 512 [ 1372.241353][T15664] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 1372.533810][T15677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1373.386540][T15678] loop2: detected capacity change from 0 to 128 [ 1373.820534][T15678] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1373.937959][T15678] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1373.949069][T15678] ext2 filesystem being mounted at /828/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.699703][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1380.727990][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4371'. [ 1382.370237][T15744] loop1: detected capacity change from 0 to 128 [ 1382.392132][T15744] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1382.460317][T15744] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1382.471021][T15744] ext2 filesystem being mounted at /756/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.253069][T15763] loop2: detected capacity change from 0 to 512 [ 1386.380316][T15763] EXT4-fs (loop2): 1 orphan inode deleted [ 1386.386112][T15763] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1386.397227][T15763] ext4 filesystem being mounted at /832/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1386.831336][T15786] loop1: detected capacity change from 0 to 512 [ 1386.870001][T15786] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1386.994427][T15786] EXT4-fs error (device loop1): __ext4_iget:4924: inode #11: block 1: comm syz.1.4385: invalid block [ 1387.006288][T15786] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.4385: couldn't read orphan inode 11 (err -117) [ 1387.020476][T15786] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 1393.101368][T15768] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1393.393582][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4390'. [ 1396.449487][T15825] loop2: detected capacity change from 0 to 128 [ 1396.532268][T15825] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1396.671588][T15825] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1396.682636][T15825] ext2 filesystem being mounted at /834/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.535032][T15852] loop2: detected capacity change from 0 to 256 [ 1399.720576][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4406'. [ 1399.812296][T15862] loop1: detected capacity change from 0 to 128 [ 1399.882330][T15862] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1402.691563][T15862] EXT4-fs: failed to create workqueue [ 1402.697459][T15862] EXT4-fs (loop1): mount failed [ 1405.070462][T15899] loop1: detected capacity change from 0 to 128 [ 1405.141999][T15899] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1406.172317][T15899] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1406.183810][T15899] ext2 filesystem being mounted at /763/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.621461][T15925] loop1: detected capacity change from 0 to 512 [ 1409.410611][T15925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1409.519263][T15925] EXT4-fs (loop1): 1 truncate cleaned up [ 1409.525079][T15925] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 1410.585757][T15945] loop2: detected capacity change from 0 to 128 [ 1410.630133][T15945] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1410.853427][T15945] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1410.864134][T15945] ext2 filesystem being mounted at /841/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1419.810404][T15958] loop1: detected capacity change from 0 to 128 [ 1420.164372][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1420.164390][ T30] audit: type=1400 audit(2000000905.290:2909): avc: denied { mounton } for pid=15966 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1424.719346][ C0] ------------[ cut here ]------------ [ 1424.724883][ C0] refcount_t: addition on 0; use-after-free. [ 1424.731026][ C0] WARNING: CPU: 0 PID: 15939 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 1424.740564][ C0] Modules linked in: [ 1424.744485][ C0] CPU: 0 PID: 15939 Comm: syz.2.4429 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 1424.754497][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1424.764598][ C0] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 1424.770800][ C0] Code: 04 01 48 c7 c7 60 ef 62 85 e8 08 9d 50 02 0f 0b eb df e8 5f d6 1c ff c6 05 ba f8 99 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 <0f> 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 [ 1424.790453][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010246 [ 1424.796551][ C0] RAX: 4d0348f186ef4900 RBX: 0000000000000002 RCX: ffff888115cdcf00 [ 1424.804560][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 1424.812583][ C0] RBP: ffffc90000007830 R08: dffffc0000000000 R09: fffff52000000e51 [ 1424.820583][ C0] R10: fffff52000000e51 R11: 1ffff92000000e50 R12: ffff88811adfb408 [ 1424.828568][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc900000079b8 [ 1424.836579][ C0] FS: 00007f32eec4a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1424.845552][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1424.852190][ C0] CR2: 0000200000a8d030 CR3: 0000000118c4d000 CR4: 00000000003506b0 [ 1424.860215][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1424.868214][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1424.876234][ C0] Call Trace: [ 1424.879549][ C0] [ 1424.882409][ C0] tipc_crypto_xmit+0x1938/0x2400 [ 1424.887470][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 1424.892709][ C0] ? skb_clone+0x202/0x360 [ 1424.897147][ C0] tipc_crypto_clone_msg+0x9b/0x150 [ 1424.902382][ C0] tipc_crypto_xmit+0x1ab9/0x2400 [ 1424.907423][ C0] ? get_nohz_timer_target+0x74/0x550 [ 1424.912836][ C0] ? put_prev_entity+0x470/0x470 [ 1424.917856][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 1424.923107][ C0] ? memcpy+0x56/0x70 [ 1424.927120][ C0] ? __copy_skb_header+0x437/0x600 [ 1424.932283][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 1424.937504][ C0] ? __skb_clone+0x47a/0x790 [ 1424.942133][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 1424.947088][ C0] ? skb_clone+0x202/0x360 [ 1424.951545][ C0] tipc_disc_timeout+0x6a2/0x830 [ 1424.956505][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1424.961739][ C0] ? _find_next_bit+0x106/0x200 [ 1424.966621][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1424.971990][ C0] call_timer_fn+0x38/0x290 [ 1424.976535][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1424.981778][ C0] __run_timers+0x639/0x9a0 [ 1424.986308][ C0] ? calc_index+0x200/0x200 [ 1424.990857][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 1424.995733][ C0] run_timer_softirq+0x6a/0xf0 [ 1425.000537][ C0] handle_softirqs+0x250/0x560 [ 1425.005332][ C0] __irq_exit_rcu+0x52/0xf0 [ 1425.009870][ C0] irq_exit_rcu+0x9/0x10 [ 1425.014129][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1425.019798][ C0] [ 1425.022749][ C0] [ 1425.025688][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1425.031720][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 1425.038195][ C0] Code: 39 6d 86 e8 1c 74 01 fd 4c 89 f7 48 83 3d 69 95 c7 01 00 74 31 e8 3e 77 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 35 5f a1 fc 65 8b 05 16 c9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1425.057879][ C0] RSP: 0018:ffffc90000987600 EFLAGS: 00000206 [ 1425.064010][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1425.072040][ C0] RDX: ffffc90002b51000 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1425.080061][ C0] RBP: ffffc90000987610 R08: dffffc0000000000 R09: ffffed1023603bd6 [ 1425.088079][ C0] R10: ffffed1023603bd6 R11: 1ffff11023603bd5 R12: ffff88811b01ddc0 [ 1425.096110][ C0] R13: ffff88811c0f8b64 R14: ffffc900009877e0 R15: dffffc0000000000 [ 1425.104169][ C0] __skb_try_recv_datagram+0x17b/0x4d0 [ 1425.109694][ C0] ? sock_load_diag_module+0x140/0x140 [ 1425.115194][ C0] __unix_dgram_recvmsg+0x2d1/0xd50 [ 1425.120448][ C0] ? unix_unhash+0x10/0x10 [ 1425.124897][ C0] ? exc_page_fault+0x5e/0xb0 [ 1425.129623][ C0] unix_dgram_recvmsg+0xc2/0xe0 [ 1425.134513][ C0] ? unix_dgram_sendmsg+0x1880/0x1880 [ 1425.139944][ C0] ____sys_recvmsg+0x291/0x580 [ 1425.144745][ C0] ? perf_pmu_sched_task+0x180/0x180 [ 1425.150098][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1425.155149][ C0] ? memset+0x35/0x40 [ 1425.159167][ C0] ? import_iovec+0x7c/0xb0 [ 1425.163733][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 1425.168442][ C0] ? __sys_recvmsg+0x250/0x250 [ 1425.173278][ C0] ? queue_stack_map_push_elem+0x336/0x530 [ 1425.179115][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1425.185350][ C0] do_recvmmsg+0x344/0x780 [ 1425.189813][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1425.194695][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 1425.199706][ C0] ? finish_task_switch+0x16b/0x780 [ 1425.204958][ C0] ? __se_sys_futex+0x139/0x310 [ 1425.209865][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 1425.214919][ C0] ? do_recvmmsg+0x780/0x780 [ 1425.219582][ C0] ? switch_fpu_return+0x15d/0x2c0 [ 1425.224737][ C0] x64_sys_call+0x297/0x9a0 [ 1425.229423][ C0] do_syscall_64+0x4c/0xa0 [ 1425.233859][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1425.238535][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1425.243255][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1425.249178][ C0] RIP: 0033:0x7f32f05e1929 [ 1425.253620][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.273265][ C0] RSP: 002b:00007f32eec4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1425.281720][ C0] RAX: ffffffffffffffda RBX: 00007f32f0808fa0 RCX: 00007f32f05e1929 [ 1425.289749][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1425.297737][ C0] RBP: 00007f32f0663b39 R08: 0000000000000000 R09: 0000000000000000 [ 1425.305733][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1425.313745][ C0] R13: 0000000000000000 R14: 00007f32f0808fa0 R15: 00007ffe0af74708 [ 1425.321767][ C0] [ 1425.324803][ C0] ---[ end trace 99ba231f72131b81 ]--- [ 1425.330296][ C0] ------------[ cut here ]------------ [ 1425.335755][ C0] refcount_t: underflow; use-after-free. [ 1425.341511][ C0] WARNING: CPU: 0 PID: 15939 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 1425.351043][ C0] Modules linked in: [ 1425.354948][ C0] CPU: 0 PID: 15939 Comm: syz.2.4429 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 1425.366335][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1425.376437][ C0] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 1425.382638][ C0] Code: 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 0f 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 <0f> 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 [ 1425.402294][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010246 [ 1425.408374][ C0] RAX: 4d0348f186ef4900 RBX: 0000000000000003 RCX: ffff888115cdcf00 [ 1425.416369][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 1425.424384][ C0] RBP: ffffc90000007830 R08: dffffc0000000000 R09: fffff52000000e51 [ 1425.432395][ C0] R10: fffff52000000e51 R11: 1ffff92000000e50 R12: ffff88811adfb408 [ 1425.440413][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 1425.448395][ C0] FS: 00007f32eec4a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1425.457355][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1425.463990][ C0] CR2: 0000200000a8d030 CR3: 0000000118c4d000 CR4: 00000000003506b0 [ 1425.472006][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1425.480027][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1425.488013][ C0] Call Trace: [ 1425.491311][ C0] [ 1425.494164][ C0] tipc_crypto_xmit+0x1a82/0x2400 [ 1425.499201][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 1425.504425][ C0] ? skb_clone+0x202/0x360 [ 1425.508873][ C0] tipc_crypto_clone_msg+0x9b/0x150 [ 1425.514112][ C0] tipc_crypto_xmit+0x1ab9/0x2400 [ 1425.519154][ C0] ? get_nohz_timer_target+0x74/0x550 [ 1425.524559][ C0] ? put_prev_entity+0x470/0x470 [ 1425.529540][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 1425.534752][ C0] ? memcpy+0x56/0x70 [ 1425.538732][ C0] ? __copy_skb_header+0x437/0x600 [ 1425.543898][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 1425.549118][ C0] ? __skb_clone+0x47a/0x790 [ 1425.553737][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 1425.558701][ C0] ? skb_clone+0x202/0x360 [ 1425.563156][ C0] tipc_disc_timeout+0x6a2/0x830 [ 1425.568114][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1425.573354][ C0] ? _find_next_bit+0x106/0x200 [ 1425.578225][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1425.583454][ C0] call_timer_fn+0x38/0x290 [ 1425.588011][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1425.593251][ C0] __run_timers+0x639/0x9a0 [ 1425.597777][ C0] ? calc_index+0x200/0x200 [ 1425.602313][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 1425.607181][ C0] run_timer_softirq+0x6a/0xf0 [ 1425.611978][ C0] handle_softirqs+0x250/0x560 [ 1425.616769][ C0] __irq_exit_rcu+0x52/0xf0 [ 1425.621301][ C0] irq_exit_rcu+0x9/0x10 [ 1425.625574][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1425.631237][ C0] [ 1425.634181][ C0] [ 1425.637119][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1425.643131][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 1425.649601][ C0] Code: 39 6d 86 e8 1c 74 01 fd 4c 89 f7 48 83 3d 69 95 c7 01 00 74 31 e8 3e 77 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 35 5f a1 fc 65 8b 05 16 c9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1425.669246][ C0] RSP: 0018:ffffc90000987600 EFLAGS: 00000206 [ 1425.675382][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1425.683396][ C0] RDX: ffffc90002b51000 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1425.691410][ C0] RBP: ffffc90000987610 R08: dffffc0000000000 R09: ffffed1023603bd6 [ 1425.699428][ C0] R10: ffffed1023603bd6 R11: 1ffff11023603bd5 R12: ffff88811b01ddc0 [ 1425.707426][ C0] R13: ffff88811c0f8b64 R14: ffffc900009877e0 R15: dffffc0000000000 [ 1425.715448][ C0] __skb_try_recv_datagram+0x17b/0x4d0 [ 1425.720971][ C0] ? sock_load_diag_module+0x140/0x140 [ 1425.726446][ C0] __unix_dgram_recvmsg+0x2d1/0xd50 [ 1425.731676][ C0] ? unix_unhash+0x10/0x10 [ 1425.736115][ C0] ? exc_page_fault+0x5e/0xb0 [ 1425.740830][ C0] unix_dgram_recvmsg+0xc2/0xe0 [ 1425.745762][ C0] ? unix_dgram_sendmsg+0x1880/0x1880 [ 1425.751183][ C0] ____sys_recvmsg+0x291/0x580 [ 1425.755962][ C0] ? perf_pmu_sched_task+0x180/0x180 [ 1425.761296][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1425.766340][ C0] ? memset+0x35/0x40 [ 1425.770355][ C0] ? import_iovec+0x7c/0xb0 [ 1425.774889][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 1425.779600][ C0] ? __sys_recvmsg+0x250/0x250 [ 1425.784387][ C0] ? queue_stack_map_push_elem+0x336/0x530 [ 1425.790367][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1425.796549][ C0] do_recvmmsg+0x344/0x780 [ 1425.801022][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1425.805891][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 1425.810898][ C0] ? finish_task_switch+0x16b/0x780 [ 1425.816118][ C0] ? __se_sys_futex+0x139/0x310 [ 1425.821015][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 1425.826067][ C0] ? do_recvmmsg+0x780/0x780 [ 1425.830702][ C0] ? switch_fpu_return+0x15d/0x2c0 [ 1425.835842][ C0] x64_sys_call+0x297/0x9a0 [ 1425.840382][ C0] do_syscall_64+0x4c/0xa0 [ 1425.844822][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1425.849534][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1425.854229][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1425.860159][ C0] RIP: 0033:0x7f32f05e1929 [ 1425.864591][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.884353][ C0] RSP: 002b:00007f32eec4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1425.892820][ C0] RAX: ffffffffffffffda RBX: 00007f32f0808fa0 RCX: 00007f32f05e1929 [ 1425.900837][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1425.908829][ C0] RBP: 00007f32f0663b39 R08: 0000000000000000 R09: 0000000000000000 [ 1425.916833][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1425.924852][ C0] R13: 0000000000000000 R14: 00007f32f0808fa0 R15: 00007ffe0af74708 [ 1425.932878][ C0] [ 1425.935922][ C0] ---[ end trace 99ba231f72131b82 ]--- [ 1425.941597][ C0] ------------[ cut here ]------------ [ 1425.947065][ C0] refcount_t: saturated; leaking memory. [ 1425.952826][ C0] WARNING: CPU: 0 PID: 15939 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 1425.962346][ C0] Modules linked in: [ 1425.966252][ C0] CPU: 0 PID: 15939 Comm: syz.2.4429 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 1425.977643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1425.987741][ C0] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 1425.993944][ C0] Code: 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 0f 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 98 9c 50 02 <0f> 0b e9 6c ff ff ff e8 ec d5 1c ff c6 05 4a f8 99 04 01 48 c7 c7 [ 1426.013617][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 1426.019733][ C0] RAX: 4d0348f186ef4900 RBX: 0000000000000001 RCX: ffff888115cdcf00 [ 1426.027721][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 1426.035719][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: fffff52000000e89 [ 1426.043741][ C0] R10: fffff52000000e89 R11: 1ffff92000000e88 R12: ffff88811adfa808 [ 1426.051775][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000007ba0 [ 1426.059811][ C0] FS: 00007f32eec4a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1426.068931][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1426.075694][ C0] CR2: 0000200000a8d030 CR3: 0000000118c4d000 CR4: 00000000003506b0 [ 1426.083816][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1426.091862][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1426.099890][ C0] Call Trace: [ 1426.103196][ C0] [ 1426.106053][ C0] tipc_crypto_xmit+0x1938/0x2400 [ 1426.111146][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 1426.116377][ C0] ? __copy_skb_header+0x437/0x600 [ 1426.121557][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 1426.126783][ C0] ? __skb_clone+0x47a/0x790 [ 1426.131410][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 1426.136366][ C0] ? skb_clone+0x202/0x360 [ 1426.140819][ C0] tipc_disc_timeout+0x6a2/0x830 [ 1426.145814][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1426.151041][ C0] ? _find_next_bit+0x106/0x200 [ 1426.155929][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1426.161161][ C0] call_timer_fn+0x38/0x290 [ 1426.165688][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 1426.170922][ C0] __run_timers+0x639/0x9a0 [ 1426.175446][ C0] ? calc_index+0x200/0x200 [ 1426.179982][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 1426.184848][ C0] run_timer_softirq+0x6a/0xf0 [ 1426.189649][ C0] handle_softirqs+0x250/0x560 [ 1426.194439][ C0] __irq_exit_rcu+0x52/0xf0 [ 1426.198943][ C0] irq_exit_rcu+0x9/0x10 [ 1426.203213][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1426.208862][ C0] [ 1426.211836][ C0] [ 1426.214784][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1426.220816][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 1426.227266][ C0] Code: 39 6d 86 e8 1c 74 01 fd 4c 89 f7 48 83 3d 69 95 c7 01 00 74 31 e8 3e 77 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 35 5f a1 fc 65 8b 05 16 c9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1426.246917][ C0] RSP: 0018:ffffc90000987600 EFLAGS: 00000206 [ 1426.253040][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1426.261058][ C0] RDX: ffffc90002b51000 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1426.269047][ C0] RBP: ffffc90000987610 R08: dffffc0000000000 R09: ffffed1023603bd6 [ 1426.277078][ C0] R10: ffffed1023603bd6 R11: 1ffff11023603bd5 R12: ffff88811b01ddc0 [ 1426.285114][ C0] R13: ffff88811c0f8b64 R14: ffffc900009877e0 R15: dffffc0000000000 [ 1426.293138][ C0] __skb_try_recv_datagram+0x17b/0x4d0 [ 1426.298634][ C0] ? sock_load_diag_module+0x140/0x140 [ 1426.304134][ C0] __unix_dgram_recvmsg+0x2d1/0xd50 [ 1426.309393][ C0] ? unix_unhash+0x10/0x10 [ 1426.313827][ C0] ? exc_page_fault+0x5e/0xb0 [ 1426.318520][ C0] unix_dgram_recvmsg+0xc2/0xe0 [ 1426.323402][ C0] ? unix_dgram_sendmsg+0x1880/0x1880 [ 1426.328797][ C0] ____sys_recvmsg+0x291/0x580 [ 1426.333592][ C0] ? perf_pmu_sched_task+0x180/0x180 [ 1426.338900][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1426.343961][ C0] ? memset+0x35/0x40 [ 1426.347967][ C0] ? import_iovec+0x7c/0xb0 [ 1426.352503][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 1426.357203][ C0] ? __sys_recvmsg+0x250/0x250 [ 1426.361997][ C0] ? queue_stack_map_push_elem+0x336/0x530 [ 1426.367829][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1426.374014][ C0] do_recvmmsg+0x344/0x780 [ 1426.378450][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1426.383346][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 1426.388225][ C0] ? finish_task_switch+0x16b/0x780 [ 1426.393729][ C0] ? __se_sys_futex+0x139/0x310 [ 1426.398641][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 1426.403708][ C0] ? do_recvmmsg+0x780/0x780 [ 1426.408324][ C0] ? switch_fpu_return+0x15d/0x2c0 [ 1426.413472][ C0] x64_sys_call+0x297/0x9a0 [ 1426.418000][ C0] do_syscall_64+0x4c/0xa0 [ 1426.422445][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1426.427144][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1426.431855][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1426.437783][ C0] RIP: 0033:0x7f32f05e1929 [ 1426.442222][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1426.461888][ C0] RSP: 002b:00007f32eec4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1426.470375][ C0] RAX: ffffffffffffffda RBX: 00007f32f0808fa0 RCX: 00007f32f05e1929 [ 1426.478366][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1426.486369][ C0] RBP: 00007f32f0663b39 R08: 0000000000000000 R09: 0000000000000000 [ 1426.494393][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1426.502407][ C0] R13: 0000000000000000 R14: 00007f32f0808fa0 R15: 00007ffe0af74708 [ 1426.510434][ C0] [ 1426.513464][ C0] ---[ end trace 99ba231f72131b83 ]--- [ 1426.525283][ T308] tipc: Disabling bearer [ 1426.530745][ T308] tipc: Disabling bearer [ 1426.549525][ T308] tipc: Disabling bearer [ 1426.562689][ T308] tipc: Left network mode [ 1427.063601][ T308] ------------[ cut here ]------------ [ 1427.069428][ T308] refcount_t: saturated; leaking memory. [ 1427.078085][ T308] WARNING: CPU: 1 PID: 308 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 1427.089663][ T308] Modules linked in: [ 1427.204628][ T308] CPU: 1 PID: 308 Comm: kworker/u4:3 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 1427.589498][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1427.689260][ T308] Workqueue: netns cleanup_net [ 1427.734823][ T308] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 1427.788776][ T308] Code: 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 0f 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 <0f> 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 [ 1427.957631][ T308] RSP: 0018:ffffc900079877c0 EFLAGS: 00010246 [ 1427.996208][ T308] RAX: 925e6a244a7f7a00 RBX: 0000000000000000 RCX: ffff88810d034f00 [ 1428.004340][ T308] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1428.012380][ T308] RBP: ffffc900079877d0 R08: dffffc0000000000 R09: ffffed103ee24e93 [ 1428.020789][ T308] R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: 1ffff92000f30f04 [ 1428.028883][ T308] R13: ffff88811d3f208c R14: 0000000000000000 R15: 0000000000000cc0 [ 1428.037207][ T308] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1428.053692][ T308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1428.066949][ T308] CR2: 0000200001000000 CR3: 0000000107dd4000 CR4: 00000000003506b0 [ 1428.083762][ T308] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1428.100516][ T308] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1428.110091][ T308] Call Trace: [ 1428.113453][ T308] [ 1428.116880][ T308] nf_nat_masq_schedule+0x439/0x4c0 [ 1428.122422][ T308] ? __kasan_check_write+0x14/0x20 [ 1428.127611][ T308] ? nf_nat_masq_schedule+0x4c0/0x4c0 [ 1428.133095][ T308] ? masq_device_event+0xd0/0xd0 [ 1428.138139][ T308] ? nfqnl_rcv_dev_event+0x441/0x470 [ 1428.143546][ T308] ? __kasan_check_read+0x11/0x20 [ 1428.148629][ T308] masq_device_event+0x9b/0xd0 [ 1428.153478][ T308] raw_notifier_call_chain+0x90/0x100 [ 1428.158895][ T308] dev_close_many+0x32d/0x4d0 [ 1428.167544][ T308] ? __dev_open+0x4c0/0x4c0 [ 1428.172129][ T308] ? finish_task_switch+0x16b/0x780 [ 1428.177431][ T308] ? __switch_to_asm+0x3a/0x60 [ 1428.182283][ T308] ? __kasan_check_read+0x11/0x20 [ 1428.187363][ T308] unregister_netdevice_many+0x44c/0x1990 [ 1428.193167][ T308] ? __cond_resched+0xb0/0xb0 [ 1428.197859][ T308] ? alloc_netdev_mqs+0xc90/0xc90 [ 1428.202948][ T308] ? irqentry_exit+0x37/0x40 [ 1428.207571][ T308] ? sysvec_reschedule_ipi+0x78/0x80 [ 1428.212928][ T308] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1428.218580][ T308] ? ip6gre_exit_batch_net+0x4c1/0x5f0 [ 1428.224164][ T308] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 1428.229484][ T308] ? sysvec_reschedule_ipi+0x78/0x80 [ 1428.234774][ T308] ? ip6gre_init_net+0x340/0x340 [ 1428.239798][ T308] ? cleanup_net+0x5fb/0xad0 [ 1428.244419][ T308] ? ip6gre_init_net+0x340/0x340 [ 1428.249405][ T308] cleanup_net+0x602/0xad0 [ 1428.253840][ T308] ? ops_init+0x4a0/0x4a0 [ 1428.258174][ T308] process_one_work+0x6be/0xba0 [ 1428.263070][ T308] worker_thread+0xa59/0x1200 [ 1428.267772][ T308] kthread+0x411/0x500 [ 1428.271886][ T308] ? worker_clr_flags+0x190/0x190 [ 1428.277109][ T308] ? kthread_blkcg+0xd0/0xd0 [ 1428.281735][ T308] ret_from_fork+0x1f/0x30 [ 1428.286180][ T308] [ 1428.289194][ T308] ---[ end trace 99ba231f72131b84 ]--- [ 1428.302313][T15966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.309404][T15966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.316832][T15966] device bridge_slave_0 entered promiscuous mode [ 1428.455669][T15966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.462822][T15966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.470406][T15966] device bridge_slave_1 entered promiscuous mode [ 1428.795498][T16006] loop1: detected capacity change from 0 to 128 [ 1428.911888][T16006] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1428.945468][T16006] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1428.956601][T16006] ext2 filesystem being mounted at /770/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1429.200188][T15983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.210609][T15983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.222592][T15983] device bridge_slave_0 entered promiscuous mode [ 1429.289207][T15983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.296613][T15983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.308178][T15983] device bridge_slave_1 entered promiscuous mode [ 1429.920146][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1429.932067][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1429.951774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1429.965746][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1429.982800][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.989931][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.891336][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1431.315880][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1431.324965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1431.333258][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.340319][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.350241][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1433.170483][T16038] loop1: detected capacity change from 0 to 128 [ 1434.469985][T16038] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1434.498569][T16038] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1434.509389][T16038] ext2 filesystem being mounted at /772/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.647867][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1434.656247][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1434.718441][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1434.729094][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1434.752796][ T308] device veth1_macvtap left promiscuous mode [ 1434.955249][T16051] loop1: detected capacity change from 0 to 512 [ 1435.672154][T16051] EXT4-fs (loop1): 1 orphan inode deleted [ 1435.677942][T16051] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1435.689250][T16051] ext4 filesystem being mounted at /773/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1435.840386][T15966] device veth0_vlan entered promiscuous mode [ 1435.853965][T15966] device veth1_macvtap entered promiscuous mode [ 1435.899352][ T30] audit: type=1400 audit(2000000921.000:2910): avc: denied { mounton } for pid=15966 comm="syz-executor" path="/root/syzkaller.iamC5P/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1435.931638][T16057] loop6: detected capacity change from 0 to 512 [ 1435.938124][ T30] audit: type=1400 audit(2000000921.010:2911): avc: denied { mounton } for pid=15966 comm="syz-executor" path="/root/syzkaller.iamC5P/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1435.967560][ T30] audit: type=1400 audit(2000000921.010:2912): avc: denied { mounton } for pid=15966 comm="syz-executor" path="/root/syzkaller.iamC5P/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=57878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1435.996054][ T30] audit: type=1400 audit(2000000921.020:2913): avc: denied { mounton } for pid=15966 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1436.019623][ T30] audit: type=1400 audit(2000000921.020:2914): avc: denied { mounton } for pid=15966 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1436.047045][T16057] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.4434: inode #1: comm syz.6.4434: iget: illegal inode # [ 1436.060762][T16057] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.4434: error while reading EA inode 1 err=-117 [ 1436.084384][T16057] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.4434: inode #1: comm syz.6.4434: iget: illegal inode # [ 1436.108004][T16057] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.4434: error while reading EA inode 1 err=-117 [ 1436.139991][T16057] EXT4-fs (loop6): 1 orphan inode deleted [ 1436.145903][T16057] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1436.173885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1436.184905][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1436.193476][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1436.201595][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1436.210062][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1436.218783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1436.228035][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1436.236030][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1436.244526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1436.253650][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1436.262464][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1436.271408][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1436.279251][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1436.344919][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1436.355739][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1436.364910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1436.376247][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1436.385706][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.392799][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.401556][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1436.411164][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1436.419971][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.427055][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.464990][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4460'. [ 1436.493950][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4459'. [ 1436.503561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1436.598120][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1436.649916][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1436.668308][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1436.699981][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1436.776895][T15983] device veth0_vlan entered promiscuous mode [ 1436.800653][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1436.817865][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1436.857250][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1436.881687][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1436.905237][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1436.921445][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1436.947091][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1436.963175][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1437.127748][T15983] device veth1_macvtap entered promiscuous mode [ 1437.180704][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1437.218105][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1437.336872][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1437.522390][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1437.540048][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1437.601807][ T308] tipc: Disabling bearer [ 1437.610267][ T308] tipc: Left network mode [ 1438.252050][T16098] loop7: detected capacity change from 0 to 128 [ 1438.293144][T16098] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1438.400161][T16098] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1438.411150][T16098] ext2 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.470651][ T308] device bridge_slave_1 left promiscuous mode [ 1438.477983][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.494756][ T308] device bridge_slave_0 left promiscuous mode [ 1438.507249][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.525332][ T308] device veth1_macvtap left promiscuous mode [ 1438.538686][ T308] device veth0_vlan left promiscuous mode [ 1439.998003][T16124] loop7: detected capacity change from 0 to 512 [ 1440.105851][T16124] EXT4-fs (loop7): 1 orphan inode deleted [ 1440.111734][T16124] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1440.123397][T16124] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1441.449211][T16146] loop6: detected capacity change from 0 to 512 [ 1441.614521][T16146] EXT4-fs (loop6): 1 orphan inode deleted [ 1441.620398][T16146] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1441.632069][T16146] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1442.036250][ T308] ================================================================== [ 1442.044372][ T308] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 1442.052115][ T308] Read of size 4 at addr ffff88811d3f208c by task kworker/u4:3/308 [ 1442.060043][ T308] [ 1442.062392][ T308] CPU: 1 PID: 308 Comm: kworker/u4:3 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 1442.073772][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1442.083858][ T308] Workqueue: netns cleanup_net [ 1442.088657][ T308] Call Trace: [ 1442.091947][ T308] [ 1442.094891][ T308] __dump_stack+0x21/0x30 [ 1442.099238][ T308] dump_stack_lvl+0xee/0x150 [ 1442.103844][ T308] ? show_regs_print_info+0x20/0x20 [ 1442.109065][ T308] ? load_image+0x3a0/0x3a0 [ 1442.113589][ T308] print_address_description+0x7f/0x2c0 [ 1442.119165][ T308] ? tcp_metrics_flush_all+0xd3/0x210 [ 1442.124552][ T308] kasan_report+0xf1/0x140 [ 1442.129006][ T308] ? _raw_spin_lock_bh+0x8e/0xe0 [ 1442.133967][ T308] ? tcp_metrics_flush_all+0xd3/0x210 [ 1442.139362][ T308] kasan_check_range+0x280/0x290 [ 1442.144315][ T308] __kasan_check_read+0x11/0x20 [ 1442.149180][ T308] tcp_metrics_flush_all+0xd3/0x210 [ 1442.154394][ T308] ? tcp_net_metrics_init+0x150/0x150 [ 1442.159796][ T308] tcp_net_metrics_exit_batch+0x10/0x20 [ 1442.165360][ T308] cleanup_net+0x602/0xad0 [ 1442.169799][ T308] ? ops_init+0x4a0/0x4a0 [ 1442.174144][ T308] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 1442.179537][ T308] process_one_work+0x6be/0xba0 [ 1442.184412][ T308] worker_thread+0xa59/0x1200 [ 1442.189111][ T308] kthread+0x411/0x500 [ 1442.193220][ T308] ? worker_clr_flags+0x190/0x190 [ 1442.198273][ T308] ? kthread_blkcg+0xd0/0xd0 [ 1442.202888][ T308] ret_from_fork+0x1f/0x30 [ 1442.207321][ T308] [ 1442.210350][ T308] [ 1442.212683][ T308] Allocated by task 282: [ 1442.216931][ T308] __kasan_slab_alloc+0xbd/0xf0 [ 1442.221796][ T308] slab_post_alloc_hook+0x4f/0x2b0 [ 1442.226921][ T308] kmem_cache_alloc+0xf7/0x260 [ 1442.231700][ T308] copy_net_ns+0x145/0x5c0 [ 1442.236126][ T308] create_new_namespaces+0x3a2/0x660 [ 1442.241422][ T308] unshare_nsproxy_namespaces+0x120/0x170 [ 1442.247159][ T308] ksys_unshare+0x4ac/0x7b0 [ 1442.251679][ T308] __x64_sys_unshare+0x38/0x40 [ 1442.256459][ T308] x64_sys_call+0x442/0x9a0 [ 1442.260975][ T308] do_syscall_64+0x4c/0xa0 [ 1442.265410][ T308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1442.271324][ T308] [ 1442.273655][ T308] Freed by task 308: [ 1442.277550][ T308] kasan_set_track+0x4a/0x70 [ 1442.282155][ T308] kasan_set_free_info+0x23/0x40 [ 1442.287110][ T308] ____kasan_slab_free+0x125/0x160 [ 1442.292236][ T308] __kasan_slab_free+0x11/0x20 [ 1442.297021][ T308] slab_free_freelist_hook+0xc2/0x190 [ 1442.302421][ T308] kmem_cache_free+0x100/0x320 [ 1442.307200][ T308] cleanup_net+0xa2d/0xad0 [ 1442.311637][ T308] process_one_work+0x6be/0xba0 [ 1442.316498][ T308] worker_thread+0xa59/0x1200 [ 1442.321181][ T308] kthread+0x411/0x500 [ 1442.325255][ T308] ret_from_fork+0x1f/0x30 [ 1442.329674][ T308] [ 1442.331999][ T308] Last potentially related work creation: [ 1442.337715][ T308] kasan_save_stack+0x3a/0x60 [ 1442.342395][ T308] __kasan_record_aux_stack+0xd2/0x100 [ 1442.347855][ T308] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1442.353662][ T308] insert_work+0x51/0x310 [ 1442.357996][ T308] __queue_work+0x8e5/0xc60 [ 1442.362505][ T308] queue_work_on+0xd2/0x140 [ 1442.367007][ T308] xfrm_hash_grow_check+0xd7/0x140 [ 1442.372128][ T308] xfrm_state_find+0x26a0/0x2a70 [ 1442.377068][ T308] xfrm_resolve_and_create_bundle+0x626/0x28d0 [ 1442.383246][ T308] xfrm_lookup_with_ifid+0xa3e/0x2120 [ 1442.388627][ T308] xfrm_lookup_route+0x3c/0x170 [ 1442.393476][ T308] ip_route_output_flow+0x1d2/0x2d0 [ 1442.398672][ T308] udp_sendmsg+0x1241/0x20b0 [ 1442.403261][ T308] inet_sendmsg+0xa5/0xc0 [ 1442.407591][ T308] ____sys_sendmsg+0x5a2/0x8c0 [ 1442.412356][ T308] ___sys_sendmsg+0x1f0/0x260 [ 1442.417038][ T308] __sys_sendmmsg+0x278/0x480 [ 1442.421715][ T308] __x64_sys_sendmmsg+0xa0/0xb0 [ 1442.426566][ T308] x64_sys_call+0x6c6/0x9a0 [ 1442.431070][ T308] do_syscall_64+0x4c/0xa0 [ 1442.435482][ T308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1442.441374][ T308] [ 1442.443695][ T308] Second to last potentially related work creation: [ 1442.450269][ T308] kasan_save_stack+0x3a/0x60 [ 1442.454947][ T308] __kasan_record_aux_stack+0xd2/0x100 [ 1442.460411][ T308] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1442.466221][ T308] insert_work+0x51/0x310 [ 1442.470554][ T308] __queue_work+0x8e5/0xc60 [ 1442.475058][ T308] queue_work_on+0xd2/0x140 [ 1442.479562][ T308] xfrm_hash_grow_check+0xd7/0x140 [ 1442.484672][ T308] xfrm_state_find+0x26a0/0x2a70 [ 1442.489611][ T308] xfrm_resolve_and_create_bundle+0x626/0x28d0 [ 1442.495773][ T308] xfrm_lookup_with_ifid+0xa3e/0x2120 [ 1442.501146][ T308] xfrm_lookup_route+0x3c/0x170 [ 1442.506000][ T308] ip_route_output_flow+0x1d2/0x2d0 [ 1442.511206][ T308] udp_sendmsg+0x1241/0x20b0 [ 1442.515799][ T308] inet_sendmsg+0xa5/0xc0 [ 1442.520128][ T308] ____sys_sendmsg+0x5a2/0x8c0 [ 1442.524896][ T308] ___sys_sendmsg+0x1f0/0x260 [ 1442.529570][ T308] __sys_sendmmsg+0x278/0x480 [ 1442.534250][ T308] __x64_sys_sendmmsg+0xa0/0xb0 [ 1442.539106][ T308] x64_sys_call+0x6c6/0x9a0 [ 1442.543610][ T308] do_syscall_64+0x4c/0xa0 [ 1442.548027][ T308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1442.553929][ T308] [ 1442.556256][ T308] The buggy address belongs to the object at ffff88811d3f2000 [ 1442.556256][ T308] which belongs to the cache net_namespace of size 3968 [ 1442.570573][ T308] The buggy address is located 140 bytes inside of [ 1442.570573][ T308] 3968-byte region [ffff88811d3f2000, ffff88811d3f2f80) [ 1442.583941][ T308] The buggy address belongs to the page: [ 1442.589571][ T308] page:ffffea000474fc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811d3f1000 pfn:0x11d3f0 [ 1442.601113][ T308] head:ffffea000474fc00 order:3 compound_mapcount:0 compound_pincount:0 [ 1442.609437][ T308] flags: 0x4000000000010200(slab|head|zone=1) [ 1442.615552][ T308] raw: 4000000000010200 ffffea0004991200 0000000200000002 ffff8881001c4180 [ 1442.624139][ T308] raw: ffff88811d3f1000 0000000080080004 00000001ffffffff 0000000000000000 [ 1442.632716][ T308] page dumped because: kasan: bad access detected [ 1442.639122][ T308] page_owner tracks the page as allocated [ 1442.644837][ T308] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 281, ts 25168338567, free_ts 25100401180 [ 1442.663867][ T308] post_alloc_hook+0x192/0x1b0 [ 1442.668657][ T308] prep_new_page+0x1c/0x110 [ 1442.673162][ T308] get_page_from_freelist+0x2cc5/0x2d50 [ 1442.678719][ T308] __alloc_pages+0x18f/0x440 [ 1442.683316][ T308] new_slab+0xa1/0x4d0 [ 1442.687390][ T308] ___slab_alloc+0x381/0x810 [ 1442.691990][ T308] __slab_alloc+0x49/0x90 [ 1442.696321][ T308] kmem_cache_alloc+0x138/0x260 [ 1442.701174][ T308] copy_net_ns+0x145/0x5c0 [ 1442.705599][ T308] create_new_namespaces+0x3a2/0x660 [ 1442.710885][ T308] unshare_nsproxy_namespaces+0x120/0x170 [ 1442.716605][ T308] ksys_unshare+0x4ac/0x7b0 [ 1442.721144][ T308] __x64_sys_unshare+0x38/0x40 [ 1442.725952][ T308] x64_sys_call+0x442/0x9a0 [ 1442.730460][ T308] do_syscall_64+0x4c/0xa0 [ 1442.734873][ T308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1442.740777][ T308] page last free stack trace: [ 1442.745442][ T308] free_unref_page_prepare+0x542/0x550 [ 1442.750904][ T308] free_unref_page+0xa2/0x550 [ 1442.755586][ T308] free_compound_page+0x78/0xa0 [ 1442.760464][ T308] __put_compound_page+0x77/0xb0 [ 1442.765420][ T308] __put_page+0xbc/0xe0 [ 1442.769590][ T308] skb_release_data+0x3d3/0xa10 [ 1442.774443][ T308] __kfree_skb+0x50/0x70 [ 1442.778706][ T308] tcp_recvmsg_locked+0x14ac/0x2640 [ 1442.783905][ T308] tcp_recvmsg+0x21b/0x720 [ 1442.788324][ T308] inet_recvmsg+0x134/0x470 [ 1442.792856][ T308] sock_read_iter+0x2a2/0x340 [ 1442.797542][ T308] vfs_read+0x68b/0xbe0 [ 1442.801707][ T308] ksys_read+0x140/0x240 [ 1442.805966][ T308] __x64_sys_read+0x7b/0x90 [ 1442.810483][ T308] x64_sys_call+0x96d/0x9a0 [ 1442.814991][ T308] do_syscall_64+0x4c/0xa0 [ 1442.819422][ T308] [ 1442.821743][ T308] Memory state around the buggy address: [ 1442.827371][ T308] ffff88811d3f1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1442.835441][ T308] ffff88811d3f2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1442.843507][ T308] >ffff88811d3f2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1442.851565][ T308] ^ [ 1442.855890][ T308] ffff88811d3f2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1442.863956][ T308] ffff88811d3f2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1442.872015][ T308] ================================================================== [ 1442.880095][ T308] Disabling lock debugging due to kernel taint [ 1442.923696][ T30] audit: type=1400 audit(2000000928.050:2915): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1442.960028][ T30] audit: type=1400 audit(2000000928.080:2916): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1442.981605][ T30] audit: type=1400 audit(2000000928.080:2917): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1443.003216][ T30] audit: type=1400 audit(2000000928.080:2918): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1443.023987][ T30] audit: type=1400 audit(2000000928.080:2919): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1443.044788][ T30] audit: type=1400 audit(2000000928.080:2920): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1443.067932][ T30] audit: type=1400 audit(2000000928.080:2921): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1