last executing test programs: 3.385549503s ago: executing program 0 (id=4875): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004010) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80001, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x81, 0x200000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e24, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x290) close_range(r4, 0xffffffffffffffff, 0x0) 3.263006523s ago: executing program 0 (id=4878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000000001c0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 3.231552626s ago: executing program 0 (id=4881): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x3) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x3920e, r4, 0x2, 0x20000000, 0x2}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000200)=[r2], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x0, 0x100}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {0x0, 0x0, 0x5}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001c00)={0x3, 0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/79, 0x4f}, {&(0x7f00000007c0)=""/64, 0x40}, {&(0x7f0000000900)=""/101, 0x65}], &(0x7f00000009c0)=[0x9, 0x0, 0x9, 0x7, 0x4, 0x10, 0xfffffffffffffffc]}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000004c0)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0xffffff1f, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) socket(0x1e, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee1"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') memfd_create(0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) open(&(0x7f0000000140)='./file2\x00', 0x400000, 0x168) 3.163466381s ago: executing program 0 (id=4882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) 3.126558094s ago: executing program 0 (id=4883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x400, 0x800, 0x0, 0x10}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r5, 0x0, r8, 0x0, 0x80, 0x6) write(r8, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000001900)={0x8, @remote, 0x4e22, 0x4, 'ovf\x00', 0x2, 0x3, 0x5b}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16b0, 0x0, 0x1480, 0x1268, 0x1128, 0x1480, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast2, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'bond_slave_0\x00', 'sit0\x00', {}, {}, 0x5e, 0x3, 0x2, 0x4}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup/syz1\x00', 0x9, {0x9}}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x26, 0x23, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'pimreg0\x00', 'ip6gretap0\x00', {}, {}, 0x2c, 0x8, 0x0, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x31, 0x2b}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xc0cf6fcc0015453f, 0xff], [0xff000000], 'dummy0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x0, [0x7, 0x3, 0xc, 0x9c, 0x1, 0x7ff, 0xffff, 0x8b8, 0x4, 0x1000, 0x2, 0x2, 0x8000, 0x1e, 0x2fbd], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0, 0x3, 0x5, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1710) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 1.26147235s ago: executing program 1 (id=4911): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r4}, 0x18) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) write(0xffffffffffffffff, 0x0, 0x0) 1.239268282s ago: executing program 1 (id=4913): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getgroups(0x4, &(0x7f00000042c0)=[0x0, 0xee01, 0x0, 0x0]) 1.238963632s ago: executing program 1 (id=4914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000000001c0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 1.224615144s ago: executing program 1 (id=4915): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x40}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r5, &(0x7f0000000040)='\x00', 0x2, 0x1200) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58a, &(0x7f0000001b40)="$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") socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kcmp(0xffffffffffffffff, 0x0, 0x3, r2, r9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 1.029507468s ago: executing program 1 (id=4918): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) r0 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000010c0)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 968.622943ms ago: executing program 4 (id=4919): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 696.640485ms ago: executing program 2 (id=4920): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x40}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r4}, 0x18) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r5, &(0x7f0000000040)='\x00', 0x2, 0x1200) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58a, &(0x7f0000001b40)="$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") socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kcmp(0xffffffffffffffff, 0x0, 0x3, r2, r9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 496.363991ms ago: executing program 4 (id=4921): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffffff000000001c", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 414.499207ms ago: executing program 4 (id=4922): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x203184}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40f32be576a8a84e}, 0x8083) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x21) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xe9, 0x7654}]}, 0x10) 414.037677ms ago: executing program 4 (id=4923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') 399.967258ms ago: executing program 4 (id=4924): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004010) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80001, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x81, 0x200000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r4, 0xffffffffffffffff, 0x0) 396.342598ms ago: executing program 2 (id=4925): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) getgroups(0x4, &(0x7f00000042c0)=[0x0, 0xee01, 0x0, 0x0]) 363.132121ms ago: executing program 2 (id=4926): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r4}, 0x18) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) write(0xffffffffffffffff, 0x0, 0x0) 332.369674ms ago: executing program 2 (id=4927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') 330.906683ms ago: executing program 3 (id=4928): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004010) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80001, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x81, 0x200000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e24, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[], 0x290) close_range(r4, 0xffffffffffffffff, 0x0) 329.057684ms ago: executing program 2 (id=4929): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='GPL\x00', 0x7, 0xaf, &(0x7f0000000700)=""/175, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xb, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000b40), 0x10, 0x10000}, 0x94) r2 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r2, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000100)={0x8000, 0xfffffffffffffbb0, 0x2, 0x8}) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r5 = memfd_create(&(0x7f0000000080)='{\x00', 0x1) copy_file_range(r4, &(0x7f0000000040)=0x6, r5, 0x0, 0x2d7, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="370000000020df"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="8b332abd70000000000015"], 0x34}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) read$hiddev(r3, &(0x7f00000002c0)=""/205, 0xcd) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010029bd500000000000000000002f8d886a5f020b00000000000000fc4c11f797a0e0bf2a6740aee7b85fca557eb7721f36600ae1", @ANYRES32=0x0, @ANYBLOB="6cb2060000200400140035007465616d5f736c6176655f3100000000040016800500110009000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) 290.715157ms ago: executing program 2 (id=4930): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="20930000"], 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x30000084) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x26000400) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0xfffffffffffffef8) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, &(0x7f0000000480), &(0x7f0000000540)='GPL\x00', 0x7, 0x91, &(0x7f0000000700)=""/145, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1758, r1, 0x9, &(0x7f0000000800)=[r1, r1, 0xffffffffffffffff, r0], &(0x7f0000000840)=[{0x4, 0x4, 0x7, 0x5}, {0x1, 0x4, 0xe, 0x8}, {0x3, 0x1, 0xc, 0xb}, {0x2, 0x2, 0xc, 0x2}, {0x4, 0x4, 0x8, 0x1}, {0x6, 0x1, 0xd, 0x2}, {0x1, 0x2, 0x4, 0x4}, {0x3, 0x3, 0x3, 0xb}, {0x0, 0x3, 0x7, 0x1}], 0x10, 0xfffff800}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={0xffffffffffffffff, r3, 0x4, r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {0x0}], 0x2, 0x0) 233.765121ms ago: executing program 4 (id=4931): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 162.878647ms ago: executing program 3 (id=4932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000000001c", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 136.726599ms ago: executing program 3 (id=4933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') 85.767473ms ago: executing program 1 (id=4934): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x203184}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40f32be576a8a84e}, 0x8083) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x21) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xe9, 0x7654}]}, 0x10) 85.288603ms ago: executing program 3 (id=4935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') 27.716368ms ago: executing program 3 (id=4936): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) getgroups(0x4, &(0x7f00000042c0)=[0x0, 0xee01, 0x0, 0x0]) 16.884398ms ago: executing program 0 (id=4937): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, 0x0, 0x30000084) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000280)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x26000400) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0xfffffffffffffef8) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0xfffffffffffffd8e) close(r6) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, &(0x7f0000000480), &(0x7f0000000540)='GPL\x00', 0x7, 0x91, &(0x7f0000000700)=""/145, 0x40f00, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1758, r4, 0x9, &(0x7f0000000800)=[r4, r4, r6, r2], &(0x7f0000000840)=[{0x4, 0x4, 0x7, 0x5}, {0x1, 0x4, 0xe, 0x8}, {0x3, 0x1, 0xc, 0xb}, {0x2, 0x2, 0xc, 0x2}, {0x4, 0x4, 0x8, 0x1}, {0x6, 0x1, 0xd, 0x2}, {0x1, 0x2, 0x4, 0x4}, {0x3, 0x3, 0x3, 0xb}, {0x0, 0x3, 0x7, 0x1}], 0x10, 0xfffff800}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x4, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r9, r7, 0x4, r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa0000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {0x0}], 0x2, 0x0) 0s ago: executing program 3 (id=4938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x203184}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40f32be576a8a84e}, 0x8083) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x2004000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x21) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, 0x0, 0x0) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x2, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1000, 0xd}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x286}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfffffffe}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x528}]}}]}, 0x80}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x2ac, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe6, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}, @qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "04b36d4727632233c4ed920edebc1f62bf48d3fd22f39722560b09507508bc962242cec98f8812baa79c74e63bdbaad51ee5790be20e1a1e490f617be73cbadd6e83f9847e2915565ccbef3cfcef9e386ffa6bf3157d0724dd5d311cc1261cb269c5ab0f4309dc283e16318f0f7acdba8f34783f3be6482d9fe69a1830d08c730138cc54d9aba26dbf6847ab47201f4ccfb555e153d368c7fc4e31603ea5e85075ff0e90c05503b82f345e7cfd0c4bb2764351437689c78af8ca66afefc895a359e2948369316f3eb64fd24384a7f6c8abad034c85a342ec2a0dd736c56915fa16eb877996a2aad7371773d4e6a4b1d2f4fcf0c875df9e19331e119af2aa443e"}, @TCA_GRED_DPS={0x10, 0x3, {0xd, 0xe, 0x0, 0x5}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4b}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0xf7, 0x61, 0x0, 0x3ff, 0xd, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0x2, 0x81, 0x4, 0x9, 0x0, 0x9, 0x4, 0x8}}, {0x14, 0x2, [0x699, 0x5, 0x0, 0x716, 0x6b, 0x100, 0x81b, 0x6]}}, {{0x1c, 0x1, {0x90, 0x3, 0xb70, 0x5, 0x1, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0x1, 0xff, 0x2, 0xa]}}, {{0x1c, 0x1, {0x8, 0xfd, 0x101, 0x9, 0x0, 0x0, 0x13abf629, 0x7}}, {0x12, 0x2, [0xfffa, 0x7, 0x9, 0xed, 0x6, 0xd, 0xa]}}, {{0x1c, 0x1, {0x4, 0xa3, 0x4, 0x2, 0x2, 0xef, 0x8, 0xa}}, {0x18, 0x2, [0x81, 0x7, 0xffff, 0xb, 0x2, 0x3, 0x0, 0x9, 0x8, 0xff]}}, {{0x1c, 0x1, {0x1, 0x0, 0x5, 0x9, 0x0, 0x800, 0x4, 0x2}}, {0x8, 0x2, [0x4, 0x81]}}, {{0x1c, 0x1, {0x1, 0x7, 0x27, 0x8000, 0x1, 0x0, 0x6, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x7f}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r4, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x10}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xe9, 0x7654}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) kernel console output (not intermixed with test programs): 198': attribute type 1 has an invalid length. [ 284.002580][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.103377][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.140581][T15023] loop1: detected capacity change from 0 to 512 [ 284.162452][T15023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.175119][T15023] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.186377][T15023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.214913][T15023] loop1: detected capacity change from 0 to 1024 [ 284.310766][T15023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.342370][T15023] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.364769][T15023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.385426][T15046] loop4: detected capacity change from 0 to 4096 [ 284.390679][T15050] loop2: detected capacity change from 0 to 512 [ 284.393666][T15023] usb usb1: check_ctrlrecip: process 15023 (+}[@) requesting ep 01 but needs 81 [ 284.407528][T15023] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 284.410386][T15046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.416732][T15050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.470210][T15055] loop1: detected capacity change from 0 to 1024 [ 284.477969][T15055] EXT4-fs: Ignoring removed orlov option [ 284.486032][T15055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.552149][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.726801][T15066] netlink: 'syz.0.4218': attribute type 39 has an invalid length. [ 284.969513][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.993716][T15081] loop1: detected capacity change from 0 to 512 [ 285.000318][T15081] EXT4-fs: Ignoring removed orlov option [ 285.006543][T15081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.015862][T15081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 285.031949][T15081] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4224: bg 0: block 248: padding at end of block bitmap is not set [ 285.056156][T15081] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4224: Failed to acquire dquot type 1 [ 285.072833][T15081] EXT4-fs (loop1): 1 truncate cleaned up [ 285.088626][T15085] netlink: 'syz.4.4225': attribute type 1 has an invalid length. [ 285.166097][T15081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.185481][T15081] EXT4-fs: Ignoring removed orlov option [ 285.191240][T15081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.191676][T15087] loop4: detected capacity change from 0 to 4096 [ 285.222215][T15081] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 285.233859][T15087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.247011][T15081] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4224: Abort forced by user [ 285.258289][T15081] EXT4-fs (loop1): Remounting filesystem read-only [ 285.264864][T15081] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 285.326627][T10954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.366579][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.371479][T15081] ext4 filesystem being remounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.407006][T15092] hsr_slave_0: left promiscuous mode [ 285.439246][T15092] hsr_slave_1: left promiscuous mode [ 285.451609][T15097] loop4: detected capacity change from 0 to 512 [ 285.461557][T15081] siw: device registration error -23 [ 285.461780][T15097] EXT4-fs: Ignoring removed orlov option [ 285.500177][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.518557][T15097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.533257][T15097] EXT4-fs (loop4): orphan cleanup on readonly fs [ 285.540202][T15097] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4229: bg 0: block 248: padding at end of block bitmap is not set [ 285.559396][T15097] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4229: Failed to acquire dquot type 1 [ 285.612790][T15097] EXT4-fs (loop4): 1 truncate cleaned up [ 285.619603][T15097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.643651][T15097] EXT4-fs: Ignoring removed orlov option [ 285.649672][T15097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.658777][T15097] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 285.672714][T15107] loop1: detected capacity change from 0 to 512 [ 285.682118][T15097] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4229: Abort forced by user [ 285.692889][T15097] EXT4-fs (loop4): Remounting filesystem read-only [ 285.699464][T15097] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 285.708510][T15097] ext4 filesystem being remounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.724563][T15107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.764773][T15107] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.794946][T15107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.813796][T15107] loop1: detected capacity change from 0 to 1024 [ 285.832755][T15107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.839637][T15097] siw: device registration error -23 [ 285.852068][T15107] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.876351][T15119] netlink: 'syz.2.4236': attribute type 1 has an invalid length. [ 285.880314][T15107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.902636][T15121] bridge0: port 3(hsr_slave_1) entered blocking state [ 285.908899][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.909662][T15121] bridge0: port 3(hsr_slave_1) entered disabled state [ 285.942453][T15125] loop3: detected capacity change from 0 to 512 [ 285.949130][T15125] EXT4-fs: Ignoring removed orlov option [ 285.949885][T15123] loop2: detected capacity change from 0 to 4096 [ 285.961516][T15121] hsr_slave_1: entered allmulticast mode [ 285.967459][T15125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.976363][T15121] hsr_slave_1: entered promiscuous mode [ 285.987715][T15125] EXT4-fs (loop3): orphan cleanup on readonly fs [ 285.987905][T15121] bridge0: port 3(hsr_slave_1) entered blocking state [ 285.998275][T15125] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4240: bg 0: block 248: padding at end of block bitmap is not set [ 286.000921][T15121] bridge0: port 3(hsr_slave_1) entered forwarding state [ 286.017409][T15123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.041062][T15107] usb usb1: check_ctrlrecip: process 15107 (+}[@) requesting ep 01 but needs 81 [ 286.050288][T15125] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4240: Failed to acquire dquot type 1 [ 286.062469][T15107] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 286.090648][T15130] loop4: detected capacity change from 0 to 512 [ 286.107730][T15132] loop1: detected capacity change from 0 to 1024 [ 286.116046][T15132] EXT4-fs: Ignoring removed orlov option [ 286.124206][T15125] EXT4-fs (loop3): 1 truncate cleaned up [ 286.130710][T15130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.131997][T15132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.156426][T15125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.194633][T10954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.203944][T15125] EXT4-fs: Ignoring removed orlov option [ 286.209652][T15125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.252481][T15125] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 286.312609][T15125] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.4240: Abort forced by user [ 286.323319][T15125] EXT4-fs (loop3): Remounting filesystem read-only [ 286.329924][T15125] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 286.338729][T15125] ext4 filesystem being remounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.380283][T15125] siw: device registration error -23 [ 286.413484][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.755551][T15152] loop3: detected capacity change from 0 to 1024 [ 286.773678][T15152] EXT4-fs: Ignoring removed orlov option [ 286.789836][T15152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.809583][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.895995][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.043308][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.091438][T15196] loop4: detected capacity change from 0 to 512 [ 287.115014][T15196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.680700][T15237] __nla_validate_parse: 50 callbacks suppressed [ 287.680715][T15237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4280'. [ 287.948283][T15256] usb usb1: check_ctrlrecip: process 15256 (+}[@) requesting ep 01 but needs 81 [ 287.957544][T15256] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 288.004539][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.031241][T15260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4292'. [ 288.080746][T15265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4294'. [ 288.090671][T15265] netlink: 'syz.2.4294': attribute type 1 has an invalid length. [ 288.098453][T15265] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4294'. [ 288.107541][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 288.107554][ T29] audit: type=1326 audit(4104047844.229:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.137500][ T29] audit: type=1326 audit(4104047844.229:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.161066][ T29] audit: type=1326 audit(4104047844.229:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.184679][ T29] audit: type=1326 audit(4104047844.229:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.208315][ T29] audit: type=1326 audit(4104047844.229:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.231890][ T29] audit: type=1326 audit(4104047844.229:12791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.255598][ T29] audit: type=1326 audit(4104047844.239:12792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.279255][ T29] audit: type=1326 audit(4104047844.239:12793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.303033][ T29] audit: type=1326 audit(4104047844.239:12794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.326977][ T29] audit: type=1326 audit(4104047844.239:12795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15261 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 288.373504][T15268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4294'. [ 288.424693][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4297'. [ 288.465096][T15274] loop1: detected capacity change from 0 to 1024 [ 288.471848][T15274] EXT4-fs: Ignoring removed orlov option [ 288.498685][T15278] loop2: detected capacity change from 0 to 1024 [ 288.515056][T15278] EXT4-fs: Ignoring removed orlov option [ 288.523632][T15276] loop3: detected capacity change from 0 to 4096 [ 288.534560][T15274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.553292][T15278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.570133][T15276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.620911][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 288.656751][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 288.677862][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 288.709899][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.720491][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 288.977060][T15289] loop4: detected capacity change from 0 to 512 [ 288.994492][T15289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.034601][T10954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.136562][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.668325][T15305] netlink: 'syz.1.4307': attribute type 1 has an invalid length. [ 289.687551][T15303] loop3: detected capacity change from 0 to 512 [ 289.729037][T15303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.769698][T15316] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 289.782574][T15303] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.793843][T15303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.832402][T15303] loop3: detected capacity change from 0 to 1024 [ 289.898240][T15322] loop2: detected capacity change from 0 to 1024 [ 289.905341][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.924312][T15322] EXT4-fs: Ignoring removed orlov option [ 289.935955][T15322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.124538][T15303] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.145950][T15303] usb usb1: check_ctrlrecip: process 15303 (+}[@) requesting ep 01 but needs 81 [ 290.156533][T15303] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 290.298326][T15346] netlink: 'syz.3.4323': attribute type 1 has an invalid length. [ 290.369089][T15351] loop3: detected capacity change from 0 to 512 [ 291.030153][T15369] loop1: detected capacity change from 0 to 1024 [ 291.041250][T15371] loop2: detected capacity change from 0 to 512 [ 291.041653][T15369] EXT4-fs: Ignoring removed orlov option [ 291.103275][T15363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.151860][T15371] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.178357][T15363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.220566][T15371] loop2: detected capacity change from 0 to 1024 [ 291.264683][T15371] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.368689][T15371] usb usb1: check_ctrlrecip: process 15371 (+}[@) requesting ep 01 but needs 81 [ 291.401515][T15371] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 291.491884][T15386] loop3: detected capacity change from 0 to 512 [ 291.501170][T15385] loop2: detected capacity change from 0 to 4096 [ 291.542699][T15386] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.633977][T15386] loop3: detected capacity change from 0 to 1024 [ 291.645237][T15391] loop2: detected capacity change from 0 to 1024 [ 291.652868][T15391] EXT4-fs: Ignoring removed orlov option [ 291.682587][T15386] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.852794][T15386] usb usb1: check_ctrlrecip: process 15386 (+}[@) requesting ep 01 but needs 81 [ 291.862091][T15386] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 291.903769][T15402] loop1: detected capacity change from 0 to 1024 [ 291.920653][T15402] EXT4-fs: Ignoring removed orlov option [ 291.959671][T15406] loop3: detected capacity change from 0 to 1024 [ 291.966855][T15406] EXT4-fs: Ignoring removed orlov option [ 292.175505][T15413] loop2: detected capacity change from 0 to 4096 [ 292.238246][T15420] netlink: 'syz.1.4347': attribute type 1 has an invalid length. [ 292.268150][T15422] bridge0: port 3(hsr_slave_1) entered blocking state [ 292.275009][T15422] bridge0: port 3(hsr_slave_1) entered disabled state [ 292.283431][T15422] hsr_slave_1: entered allmulticast mode [ 292.298561][T15422] hsr_slave_1: entered promiscuous mode [ 292.305005][T15422] bridge0: port 3(hsr_slave_1) entered blocking state [ 292.311888][T15422] bridge0: port 3(hsr_slave_1) entered forwarding state [ 292.322174][T15422] loop2: detected capacity change from 0 to 128 [ 292.335011][T15422] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.380861][T15433] loop3: detected capacity change from 0 to 512 [ 292.395501][T15433] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.434128][T15433] loop3: detected capacity change from 0 to 1024 [ 292.452789][T15433] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.471985][T15433] usb usb1: check_ctrlrecip: process 15433 (+}[@) requesting ep 01 but needs 81 [ 292.481163][T15433] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 292.503609][T15439] loop2: detected capacity change from 0 to 128 [ 292.517107][T15439] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.640461][T15450] loop2: detected capacity change from 0 to 4096 [ 292.699589][T15454] loop3: detected capacity change from 0 to 1024 [ 292.710584][T15454] EXT4-fs: Ignoring removed orlov option [ 292.733864][T15462] __nla_validate_parse: 31 callbacks suppressed [ 292.733903][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4362'. [ 292.783278][T15466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4364'. [ 292.794166][T15466] netlink: 'syz.2.4364': attribute type 1 has an invalid length. [ 292.802044][T15466] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4364'. [ 292.812593][T15466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4364'. [ 292.894020][T15481] loop4: detected capacity change from 0 to 1024 [ 292.900686][T15481] EXT4-fs: Ignoring removed orlov option [ 292.901543][T15479] loop2: detected capacity change from 0 to 4096 [ 292.963309][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 292.991921][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 293.002210][T15486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.002234][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 293.020068][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 293.135579][T15486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.153865][T15490] loop2: detected capacity change from 0 to 512 [ 293.160646][T15490] EXT4-fs: Ignoring removed orlov option [ 293.167116][T15490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.217973][T15494] loop1: detected capacity change from 0 to 1024 [ 293.224793][T15494] EXT4-fs: Ignoring removed orlov option [ 293.304039][T15490] EXT4-fs (loop2): orphan cleanup on readonly fs [ 293.311095][T15490] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4373: bg 0: block 248: padding at end of block bitmap is not set [ 293.361553][T15500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4378'. [ 293.371218][T15500] netlink: 'syz.4.4378': attribute type 1 has an invalid length. [ 293.379083][T15500] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4378'. [ 293.391705][T15490] __quota_error: 372 callbacks suppressed [ 293.391771][T15490] Quota error (device loop2): write_blk: dquota write failed [ 293.404979][T15490] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 293.415022][T15490] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4373: Failed to acquire dquot type 1 [ 293.428599][T15490] EXT4-fs (loop2): 1 truncate cleaned up [ 293.465622][T15504] loop1: detected capacity change from 0 to 512 [ 293.480481][T15504] EXT4-fs: Ignoring removed orlov option [ 293.486588][T15490] EXT4-fs: Ignoring removed orlov option [ 293.494865][T15490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.503852][T15504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.512531][T15490] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 293.512619][T15506] loop4: detected capacity change from 0 to 1024 [ 293.512845][T15506] EXT4-fs: Ignoring removed orlov option [ 293.523886][T15504] EXT4-fs (loop1): orphan cleanup on readonly fs [ 293.541088][T15504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4377: bg 0: block 248: padding at end of block bitmap is not set [ 293.555767][T15490] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4373: Abort forced by user [ 293.556410][T15504] Quota error (device loop1): write_blk: dquota write failed [ 293.567207][T15490] EXT4-fs (loop2): Remounting filesystem read-only [ 293.573226][T15504] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 293.579726][T15490] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 293.589716][T15504] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4377: Failed to acquire dquot type 1 [ 293.592140][T15504] EXT4-fs (loop1): 1 truncate cleaned up [ 293.598935][T15490] ext4 filesystem being remounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.634741][T15504] EXT4-fs: Ignoring removed orlov option [ 293.640716][T15504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.650424][T15504] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 293.672409][T15504] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4377: Abort forced by user [ 293.683734][T15504] EXT4-fs (loop1): Remounting filesystem read-only [ 293.690261][T15504] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 293.699208][T15504] ext4 filesystem being remounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.728700][T15515] loop2: detected capacity change from 0 to 4096 [ 293.744672][T15504] siw: device registration error -23 [ 293.747653][ T29] audit: type=1326 audit(4104047849.919:13168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.2.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 293.783286][ T29] audit: type=1326 audit(4104047849.919:13169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.2.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 293.807173][ T29] audit: type=1326 audit(4104047849.919:13170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.2.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 293.830951][ T29] audit: type=1326 audit(4104047849.919:13171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.2.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 293.854882][ T29] audit: type=1326 audit(4104047849.919:13172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.2.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 293.878941][ T29] audit: type=1326 audit(4104047849.929:13173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.2.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 293.960543][T15524] loop4: detected capacity change from 0 to 1024 [ 293.967475][T15524] EXT4-fs: Ignoring removed orlov option [ 294.002291][T15529] loop2: detected capacity change from 0 to 1024 [ 294.010652][T15529] EXT4-fs: Ignoring removed orlov option [ 294.209594][T15542] loop4: detected capacity change from 0 to 1024 [ 294.216315][T15542] EXT4-fs: Ignoring removed orlov option [ 294.551188][T15554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.637561][T15554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.735987][T15556] hsr_slave_0: left promiscuous mode [ 294.741907][T15556] hsr_slave_1: left promiscuous mode [ 294.829947][T15564] netlink: 'syz.1.4399': attribute type 1 has an invalid length. [ 294.906245][T15568] netlink: 'syz.4.4401': attribute type 1 has an invalid length. [ 294.913898][T15570] loop1: detected capacity change from 0 to 1024 [ 294.921002][T15570] EXT4-fs: Ignoring removed orlov option [ 295.070799][T15577] loop4: detected capacity change from 0 to 1024 [ 295.091095][T15577] EXT4-fs: Ignoring removed orlov option [ 295.529187][T15590] netlink: 'syz.4.4410': attribute type 1 has an invalid length. [ 295.574770][T15595] loop4: detected capacity change from 0 to 512 [ 295.605690][T15595] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.625903][T15595] loop4: detected capacity change from 0 to 1024 [ 295.644193][T15595] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.659735][T15595] usb usb1: check_ctrlrecip: process 15595 (+}[@) requesting ep 01 but needs 81 [ 295.669317][T15595] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 295.900193][T15609] loop3: detected capacity change from 0 to 1024 [ 295.913801][T15609] EXT4-fs: Ignoring removed orlov option [ 296.237303][T15619] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 296.710353][T15627] loop4: detected capacity change from 0 to 512 [ 296.718053][T15627] EXT4-fs: Ignoring removed orlov option [ 296.726411][T15627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.736604][T15627] EXT4-fs (loop4): orphan cleanup on readonly fs [ 296.744147][T15627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4423: bg 0: block 248: padding at end of block bitmap is not set [ 296.759733][T15627] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4423: Failed to acquire dquot type 1 [ 296.772862][T15627] EXT4-fs (loop4): 1 truncate cleaned up [ 296.780238][T15627] EXT4-fs: Ignoring removed orlov option [ 296.786504][T15627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.825683][T15627] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 296.842535][T15627] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4423: Abort forced by user [ 296.853083][T15627] EXT4-fs (loop4): Remounting filesystem read-only [ 296.859614][T15627] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 296.869176][T15627] ext4 filesystem being remounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.888663][T15627] siw: device registration error -23 [ 296.920914][T15632] loop4: detected capacity change from 0 to 512 [ 296.949452][T15636] loop3: detected capacity change from 0 to 128 [ 296.958552][T15636] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.973624][T15632] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.070581][T15632] loop4: detected capacity change from 0 to 1024 [ 297.094663][T15632] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.111041][T15632] usb usb1: check_ctrlrecip: process 15632 (+}[@) requesting ep 01 but needs 81 [ 297.120365][T15632] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 297.158785][T15654] loop4: detected capacity change from 0 to 512 [ 297.165622][T15654] EXT4-fs: Ignoring removed orlov option [ 297.172596][T15654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.182037][T15654] EXT4-fs (loop4): orphan cleanup on readonly fs [ 297.188928][T15654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4432: bg 0: block 248: padding at end of block bitmap is not set [ 297.203676][T15654] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4432: Failed to acquire dquot type 1 [ 297.215613][T15654] EXT4-fs (loop4): 1 truncate cleaned up [ 297.223041][T15654] EXT4-fs: Ignoring removed orlov option [ 297.228831][T15654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.249833][T15654] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 297.277251][T15654] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4432: Abort forced by user [ 297.289521][T15654] EXT4-fs (loop4): Remounting filesystem read-only [ 297.296127][T15654] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 297.306377][T15654] ext4 filesystem being remounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.339614][T15664] loop2: detected capacity change from 0 to 4096 [ 297.446479][T15678] loop2: detected capacity change from 0 to 512 [ 297.463656][T15678] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.485938][T15678] loop2: detected capacity change from 0 to 1024 [ 297.504289][T15678] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.518583][T15678] usb usb1: check_ctrlrecip: process 15678 (+}[@) requesting ep 01 but needs 81 [ 297.527895][T15678] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 297.607386][T15694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.617442][T15694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.917520][T15703] __nla_validate_parse: 35 callbacks suppressed [ 297.917536][T15703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4450'. [ 297.934202][T15703] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4450'. [ 297.976155][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4453'. [ 298.007370][T15714] loop2: detected capacity change from 0 to 512 [ 298.035946][T15714] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.068885][T15722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4458'. [ 298.135715][T15714] loop2: detected capacity change from 0 to 1024 [ 298.153008][T15714] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.171703][T15714] usb usb1: check_ctrlrecip: process 15714 (+}[@) requesting ep 01 but needs 81 [ 298.180899][T15714] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 298.483224][T15741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4465'. [ 298.516593][T15741] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4465'. [ 298.562868][T15748] tipc: Enabling of bearer rejected, failed to enable media [ 298.572076][T15748] syzkaller0: entered promiscuous mode [ 298.576585][T15746] loop3: detected capacity change from 0 to 4096 [ 298.577536][T15748] syzkaller0: entered allmulticast mode [ 298.595802][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 298.595817][ T29] audit: type=1326 audit(4104047854.769:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.625628][ T29] audit: type=1326 audit(4104047854.769:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.649232][ T29] audit: type=1326 audit(4104047854.769:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.672884][ T29] audit: type=1326 audit(4104047854.769:13251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.696497][ T29] audit: type=1326 audit(4104047854.779:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.720161][ T29] audit: type=1326 audit(4104047854.779:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.743788][ T29] audit: type=1326 audit(4104047854.779:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.767552][ T29] audit: type=1326 audit(4104047854.779:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.791317][ T29] audit: type=1326 audit(4104047854.779:13256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.815160][ T29] audit: type=1326 audit(4104047854.799:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15745 comm="syz.3.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 298.854556][T15751] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4469'. [ 298.867719][T15753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4470'. [ 298.958363][T15765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4476'. [ 298.968182][T15765] netlink: 'syz.2.4476': attribute type 1 has an invalid length. [ 298.975947][T15765] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4476'. [ 299.004368][T15768] loop2: detected capacity change from 0 to 1024 [ 299.011065][T15768] EXT4-fs: Ignoring removed orlov option [ 299.109907][T15776] loop1: detected capacity change from 0 to 512 [ 299.121807][T15776] EXT4-fs: Ignoring removed orlov option [ 299.212816][T15776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.232446][T15776] EXT4-fs (loop1): orphan cleanup on readonly fs [ 299.261821][T15776] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4480: bg 0: block 248: padding at end of block bitmap is not set [ 299.291711][T15776] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4480: Failed to acquire dquot type 1 [ 299.307377][T15776] EXT4-fs (loop1): 1 truncate cleaned up [ 299.318273][T15776] EXT4-fs: Ignoring removed orlov option [ 299.324287][T15776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.344029][T15776] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 299.369778][T15776] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4480: Abort forced by user [ 299.379531][T15780] loop2: detected capacity change from 0 to 4096 [ 299.388341][T15776] EXT4-fs (loop1): Remounting filesystem read-only [ 299.394903][T15776] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 299.406613][T15776] ext4 filesystem being remounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.438315][T15776] siw: device registration error -23 [ 299.496760][T15788] loop2: detected capacity change from 0 to 512 [ 299.568856][T15791] netlink: 'syz.1.4485': attribute type 1 has an invalid length. [ 300.147578][T15808] siw: device registration error -23 [ 300.267456][T15812] siw: device registration error -23 [ 300.317150][T15819] netlink: 'syz.0.4497': attribute type 1 has an invalid length. [ 300.419377][T15827] loop2: detected capacity change from 0 to 1024 [ 300.426140][T15827] EXT4-fs: Ignoring removed orlov option [ 300.526974][T15837] loop1: detected capacity change from 0 to 512 [ 300.684883][T15847] netlink: 'syz.4.4508': attribute type 1 has an invalid length. [ 300.749952][T15850] loop4: detected capacity change from 0 to 512 [ 301.944088][T15868] loop3: detected capacity change from 0 to 512 [ 301.950764][T15868] EXT4-fs: Ignoring removed orlov option [ 301.985056][T15868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.003363][T15868] EXT4-fs (loop3): orphan cleanup on readonly fs [ 302.008941][T15875] loop2: detected capacity change from 0 to 512 [ 302.012232][T15868] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4516: bg 0: block 248: padding at end of block bitmap is not set [ 302.030887][T15875] EXT4-fs: Ignoring removed orlov option [ 302.036687][T15868] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4516: Failed to acquire dquot type 1 [ 302.048414][T15875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.082303][T15868] EXT4-fs (loop3): 1 truncate cleaned up [ 302.103333][T15875] EXT4-fs (loop2): orphan cleanup on readonly fs [ 302.110358][T15875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4519: bg 0: block 248: padding at end of block bitmap is not set [ 302.126166][T15875] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4519: Failed to acquire dquot type 1 [ 302.138410][T15875] EXT4-fs (loop2): 1 truncate cleaned up [ 302.148424][T15886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.148693][T15868] EXT4-fs: Ignoring removed orlov option [ 302.163778][T15868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.184810][T15875] EXT4-fs: Ignoring removed orlov option [ 302.194153][T15875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.210341][T15868] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 302.219990][T15875] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 302.230933][T15886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.239249][T15868] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.4516: Abort forced by user [ 302.250607][T15868] EXT4-fs (loop3): Remounting filesystem read-only [ 302.257357][T15868] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 302.268498][T15868] ext4 filesystem being remounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.295974][T15868] siw: device registration error -23 [ 302.373867][T15899] loop4: detected capacity change from 0 to 512 [ 302.471306][T15902] loop1: detected capacity change from 0 to 1024 [ 302.477929][T15875] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4519: Abort forced by user [ 302.488435][T15902] EXT4-fs: Ignoring removed orlov option [ 302.494471][T15875] EXT4-fs (loop2): Remounting filesystem read-only [ 302.501114][T15875] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 302.510011][T15875] ext4 filesystem being remounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.335017][T15926] loop4: detected capacity change from 0 to 512 [ 303.342091][T15926] EXT4-fs: Ignoring removed orlov option [ 303.348462][T15926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.425581][T15926] EXT4-fs (loop4): orphan cleanup on readonly fs [ 303.434042][T15926] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4537: bg 0: block 248: padding at end of block bitmap is not set [ 303.450078][T15926] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4537: Failed to acquire dquot type 1 [ 303.465655][T15926] EXT4-fs (loop4): 1 truncate cleaned up [ 303.477605][T15926] EXT4-fs: Ignoring removed orlov option [ 303.485470][T15926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.511646][T15926] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 303.523470][T15931] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 303.542937][T15926] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4537: Abort forced by user [ 303.554978][T15926] EXT4-fs (loop4): Remounting filesystem read-only [ 303.561569][T15926] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 303.572499][T15926] ext4 filesystem being remounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.096024][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 304.096039][ T29] audit: type=1326 audit(4104047859.529:13712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0931e65b27 code=0x7ffc0000 [ 304.125840][ T29] audit: type=1326 audit(4104047859.529:13713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0931e0ad69 code=0x7ffc0000 [ 304.149333][ T29] audit: type=1326 audit(4104047859.529:13714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0931e6eb69 code=0x7ffc0000 [ 304.173002][ T29] audit: type=1326 audit(4104047859.539:13715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0931e65b27 code=0x7ffc0000 [ 304.196581][ T29] audit: type=1326 audit(4104047859.539:13716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0931e0ad69 code=0x7ffc0000 [ 304.220174][ T29] audit: type=1326 audit(4104047859.539:13717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0931e6eb69 code=0x7ffc0000 [ 304.243757][ T29] audit: type=1326 audit(4104047859.549:13718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0931e65b27 code=0x7ffc0000 [ 304.267390][ T29] audit: type=1326 audit(4104047859.549:13719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0931e0ad69 code=0x7ffc0000 [ 304.290984][ T29] audit: type=1326 audit(4104047859.549:13720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0931e6eb69 code=0x7ffc0000 [ 304.314710][ T29] audit: type=1326 audit(4104047859.559:13721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.1.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0931e65b27 code=0x7ffc0000 [ 304.394985][T15938] loop4: detected capacity change from 0 to 1024 [ 304.402692][T15938] EXT4-fs: Ignoring removed orlov option [ 304.420679][T15942] __nla_validate_parse: 23 callbacks suppressed [ 304.420697][T15942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4539'. [ 304.473764][T15944] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4539'. [ 304.615045][T15947] loop4: detected capacity change from 0 to 512 [ 304.634253][T15947] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.682362][T15951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4542'. [ 304.693363][T15951] netlink: 'syz.3.4542': attribute type 1 has an invalid length. [ 304.701281][T15951] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4542'. [ 304.701487][T15947] loop4: detected capacity change from 0 to 1024 [ 304.711273][T15951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4542'. [ 304.739074][T15947] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.755395][T15957] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4544'. [ 304.760457][T15947] usb usb1: check_ctrlrecip: process 15947 (+}[@) requesting ep 01 but needs 81 [ 304.777338][T15947] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 304.811981][T15965] loop4: detected capacity change from 0 to 512 [ 304.825288][T15967] loop3: detected capacity change from 0 to 1024 [ 304.825597][T15965] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.832237][T15967] EXT4-fs: Ignoring removed orlov option [ 304.867151][T15965] loop4: detected capacity change from 0 to 1024 [ 304.892038][T15973] loop1: detected capacity change from 0 to 1024 [ 304.898754][T15973] EXT4-fs: Ignoring removed orlov option [ 304.906311][T15965] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.926822][T15965] usb usb1: check_ctrlrecip: process 15965 (+}[@) requesting ep 01 but needs 81 [ 304.936791][T15965] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 304.981035][T15982] loop4: detected capacity change from 0 to 1024 [ 304.988111][T15982] EXT4-fs: Ignoring removed orlov option [ 305.070274][T15987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4554'. [ 305.082694][T15987] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4554'. [ 305.094888][T15987] hsr_slave_0: left promiscuous mode [ 305.101762][T15987] hsr_slave_1: left promiscuous mode [ 306.123426][T15995] loop3: detected capacity change from 0 to 512 [ 306.133976][T15995] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.347660][T16004] loop2: detected capacity change from 0 to 512 [ 306.479071][T15995] loop3: detected capacity change from 0 to 1024 [ 306.494348][T15995] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.541223][T16016] loop1: detected capacity change from 0 to 512 [ 306.656783][T16016] EXT4-fs: Ignoring removed orlov option [ 306.670780][T16016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.681215][T16016] EXT4-fs (loop1): orphan cleanup on readonly fs [ 306.699903][T16013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.708556][T16013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.725450][T16016] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4556: bg 0: block 248: padding at end of block bitmap is not set [ 306.744445][T16016] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4556: Failed to acquire dquot type 1 [ 306.758105][T16016] EXT4-fs (loop1): 1 truncate cleaned up [ 306.830749][T15995] usb usb1: check_ctrlrecip: process 15995 (+}[@) requesting ep 01 but needs 81 [ 306.840014][T16016] EXT4-fs: Ignoring removed orlov option [ 306.840932][T15995] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 306.845964][T16016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.862063][T16016] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 306.882581][T16016] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4556: Abort forced by user [ 306.885634][T16024] loop4: detected capacity change from 0 to 128 [ 306.898150][T16025] loop3: detected capacity change from 0 to 512 [ 306.899873][T16016] EXT4-fs (loop1): Remounting filesystem read-only [ 306.911793][T16016] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 306.913166][T16024] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.920304][T16016] ext4 filesystem being remounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.945832][T16025] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.974943][T16025] loop3: detected capacity change from 0 to 1024 [ 306.975352][T16016] siw: device registration error -23 [ 307.000994][T16025] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.024181][T16025] usb usb1: check_ctrlrecip: process 16025 (+}[@) requesting ep 01 but needs 81 [ 307.034660][T16025] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 307.048769][T16032] loop1: detected capacity change from 0 to 1024 [ 307.055560][T16032] EXT4-fs: Ignoring removed orlov option [ 307.078678][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4569'. [ 307.096796][T16039] loop4: detected capacity change from 0 to 512 [ 307.103717][T16039] EXT4-fs: Ignoring removed orlov option [ 307.110624][T16039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.125119][T16039] EXT4-fs (loop4): orphan cleanup on readonly fs [ 307.216571][T16039] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4567: bg 0: block 248: padding at end of block bitmap is not set [ 307.231229][T16039] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4567: Failed to acquire dquot type 1 [ 307.244220][T16039] EXT4-fs (loop4): 1 truncate cleaned up [ 307.283953][T16039] EXT4-fs: Ignoring removed orlov option [ 307.289842][T16039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.301752][T16039] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 307.388801][T16049] lo speed is unknown, defaulting to 1000 [ 307.394591][T16049] lo speed is unknown, defaulting to 1000 [ 307.400722][T16049] lo speed is unknown, defaulting to 1000 [ 307.407919][T16049] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 307.419299][T16049] lo speed is unknown, defaulting to 1000 [ 307.425946][T16049] lo speed is unknown, defaulting to 1000 [ 307.432372][T16049] lo speed is unknown, defaulting to 1000 [ 307.438854][T16049] lo speed is unknown, defaulting to 1000 [ 307.447084][T16049] lo speed is unknown, defaulting to 1000 [ 307.453919][T16049] lo speed is unknown, defaulting to 1000 [ 307.460330][T16049] lo speed is unknown, defaulting to 1000 [ 307.500200][T16051] loop1: detected capacity change from 0 to 1024 [ 307.526313][T16039] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4567: Abort forced by user [ 307.559369][T16051] EXT4-fs: Ignoring removed orlov option [ 307.605073][T16039] EXT4-fs (loop4): Remounting filesystem read-only [ 307.611671][T16039] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 307.620103][T16039] ext4 filesystem being remounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.661063][T16060] loop2: detected capacity change from 0 to 1024 [ 307.667776][T16060] EXT4-fs: Ignoring removed orlov option [ 307.743442][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16051 comm=syz.1.4571 [ 307.876653][T16068] loop2: detected capacity change from 0 to 128 [ 307.887853][T16068] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.087079][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4580'. [ 308.129753][T16078] syzkaller0: entered promiscuous mode [ 308.135388][T16078] syzkaller0: entered allmulticast mode [ 308.145007][T16080] loop3: detected capacity change from 0 to 512 [ 308.284988][T16087] netlink: 'syz.1.4585': attribute type 12 has an invalid length. [ 308.770681][T16096] loop1: detected capacity change from 0 to 128 [ 308.794106][T16096] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.817574][T16099] loop4: detected capacity change from 0 to 1024 [ 308.836780][T16099] EXT4-fs: Ignoring removed orlov option [ 308.907738][T16101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16101 comm=syz.4.4590 [ 309.021287][T16104] loop1: detected capacity change from 0 to 1024 [ 309.039111][T16104] EXT4-fs: Ignoring removed orlov option [ 309.104389][T16107] loop3: detected capacity change from 0 to 1024 [ 309.110961][T16107] EXT4-fs: Ignoring removed orlov option [ 309.130126][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 309.130142][ T29] audit: type=1326 audit(4104047865.299:14094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.180489][ T29] audit: type=1326 audit(4104047865.299:14095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.204149][ T29] audit: type=1326 audit(4104047865.299:14096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.227862][ T29] audit: type=1326 audit(4104047865.299:14097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.251852][ T29] audit: type=1326 audit(4104047865.299:14098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.275989][ T29] audit: type=1326 audit(4104047865.299:14099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.299667][ T29] audit: type=1326 audit(4104047865.299:14100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.323246][ T29] audit: type=1326 audit(4104047865.299:14101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.346862][ T29] audit: type=1326 audit(4104047865.299:14102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.371065][ T29] audit: type=1326 audit(4104047865.299:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.2.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d9c1eb69 code=0x7ffc0000 [ 309.431891][T16118] loop3: detected capacity change from 0 to 512 [ 309.448313][T16118] EXT4-fs: Ignoring removed orlov option [ 309.456662][T16120] __nla_validate_parse: 1 callbacks suppressed [ 309.456674][T16120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4596'. [ 309.472645][T16118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.499773][T16118] EXT4-fs (loop3): orphan cleanup on readonly fs [ 309.507547][T16120] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4596'. [ 309.528798][T16118] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4597: bg 0: block 248: padding at end of block bitmap is not set [ 309.576973][T16118] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4597: Failed to acquire dquot type 1 [ 309.608070][T16118] EXT4-fs (loop3): 1 truncate cleaned up [ 309.646246][T16118] EXT4-fs: Ignoring removed orlov option [ 309.663277][T16118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.679712][T16118] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 309.712057][T16132] loop4: detected capacity change from 0 to 512 [ 309.712295][T16118] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.4597: Abort forced by user [ 309.825699][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 309.837733][T16118] EXT4-fs (loop3): Remounting filesystem read-only [ 309.844345][T16118] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 309.854939][T16118] ext4 filesystem being remounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.330263][T16146] siw: device registration error -23 [ 310.375397][T16148] loop3: detected capacity change from 0 to 1024 [ 310.378151][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4607'. [ 310.382062][T16148] EXT4-fs: Ignoring removed orlov option [ 310.400339][T16152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4608'. [ 310.415639][T16152] netlink: 'syz.0.4608': attribute type 1 has an invalid length. [ 310.423455][T16152] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4608'. [ 310.434044][T16152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4608'. [ 310.467794][T16157] loop2: detected capacity change from 0 to 1024 [ 310.481643][T16157] EXT4-fs: Ignoring removed orlov option [ 310.612398][T16168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16168 comm=syz.2.4610 [ 310.661511][T16174] syzkaller0: entered promiscuous mode [ 310.667097][T16174] syzkaller0: entered allmulticast mode [ 310.830685][T16179] loop3: detected capacity change from 0 to 1024 [ 310.848588][T16179] EXT4-fs: Ignoring removed orlov option [ 311.024546][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4621'. [ 311.051709][T16191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4622'. [ 311.062028][T16191] netlink: 'syz.2.4622': attribute type 1 has an invalid length. [ 311.069769][T16191] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4622'. [ 311.101763][T16192] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 311.178659][T16199] netlink: 'syz.3.4625': attribute type 1 has an invalid length. [ 311.237057][T16203] loop3: detected capacity change from 0 to 512 [ 311.548832][T16209] loop4: detected capacity change from 0 to 1024 [ 311.574743][T16209] EXT4-fs: Ignoring removed orlov option [ 311.932072][T16221] netlink: 'syz.0.4634': attribute type 1 has an invalid length. [ 311.945641][T16225] loop4: detected capacity change from 0 to 512 [ 311.952825][T16225] EXT4-fs: Ignoring removed orlov option [ 311.958964][T16225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 311.974768][T16225] EXT4-fs (loop4): orphan cleanup on readonly fs [ 311.982778][T16225] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4635: bg 0: block 248: padding at end of block bitmap is not set [ 311.999197][T16225] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4635: Failed to acquire dquot type 1 [ 312.033902][T16230] netlink: 'syz.2.4637': attribute type 1 has an invalid length. [ 312.046669][T16225] EXT4-fs (loop4): 1 truncate cleaned up [ 312.078706][T16225] EXT4-fs mount: 176 callbacks suppressed [ 312.078734][T16225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.098437][T16225] EXT4-fs: Ignoring removed orlov option [ 312.104824][T16225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.114159][T16225] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 312.154807][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.165299][T16225] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4635: Abort forced by user [ 312.177583][T16225] EXT4-fs (loop4): Remounting filesystem read-only [ 312.184206][T16225] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 312.201612][T16225] ext4 filesystem being remounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.240853][T16225] siw: device registration error -23 [ 312.268170][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.921012][T16253] loop2: detected capacity change from 0 to 1024 [ 312.931632][T16253] EXT4-fs: Ignoring removed orlov option [ 312.943019][T16253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.220997][T10954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.251726][T16259] netlink: 'syz.2.4646': attribute type 1 has an invalid length. [ 313.339357][T16263] netlink: 'syz.4.4648': attribute type 1 has an invalid length. [ 313.403812][T16273] tipc: Enabled bearer , priority 0 [ 313.412068][T16273] tipc: Resetting bearer [ 313.419177][T16272] tipc: Disabling bearer [ 313.479743][T16280] loop2: detected capacity change from 0 to 512 [ 313.493794][T16276] loop3: detected capacity change from 0 to 1024 [ 313.500603][T16276] EXT4-fs: Ignoring removed orlov option [ 313.510825][T16276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.547022][T16280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.566403][T16288] loop4: detected capacity change from 0 to 1024 [ 313.607538][T16288] EXT4-fs: Ignoring removed orlov option [ 313.625913][T16280] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.674062][T16288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.697914][T16291] netlink: 'syz.2.4660': attribute type 1 has an invalid length. [ 313.720129][T16288] FAULT_INJECTION: forcing a failure. [ 313.720129][T16288] name failslab, interval 1, probability 0, space 0, times 0 [ 313.732844][T16288] CPU: 1 UID: 0 PID: 16288 Comm: syz.4.4659 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 313.732871][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.732882][T16288] Call Trace: [ 313.732888][T16288] [ 313.732914][T16288] __dump_stack+0x1d/0x30 [ 313.732935][T16288] dump_stack_lvl+0xe8/0x140 [ 313.732955][T16288] dump_stack+0x15/0x1b [ 313.733030][T16288] should_fail_ex+0x265/0x280 [ 313.733107][T16288] ? alloc_pipe_info+0xae/0x350 [ 313.733212][T16288] should_failslab+0x8c/0xb0 [ 313.733238][T16288] __kmalloc_cache_noprof+0x4c/0x320 [ 313.733283][T16288] alloc_pipe_info+0xae/0x350 [ 313.733340][T16288] splice_direct_to_actor+0x592/0x680 [ 313.733361][T16288] ? kstrtouint_from_user+0x9f/0xf0 [ 313.733402][T16288] ? __pfx_direct_splice_actor+0x10/0x10 [ 313.733421][T16288] ? __rcu_read_unlock+0x4f/0x70 [ 313.733486][T16288] ? get_pid_task+0x96/0xd0 [ 313.733504][T16288] ? avc_policy_seqno+0x15/0x30 [ 313.733523][T16288] ? selinux_file_permission+0x1e4/0x320 [ 313.733558][T16288] do_splice_direct+0xda/0x150 [ 313.733598][T16288] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 313.733634][T16288] do_sendfile+0x380/0x650 [ 313.733711][T16288] __x64_sys_sendfile64+0x105/0x150 [ 313.733741][T16288] x64_sys_call+0x2bb0/0x2ff0 [ 313.733768][T16288] do_syscall_64+0xd2/0x200 [ 313.733794][T16288] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.733848][T16288] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 313.733869][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.733889][T16288] RIP: 0033:0x7f33ec63eb69 [ 313.733903][T16288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.733921][T16288] RSP: 002b:00007f33eaca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 313.733951][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.733960][T16288] RAX: ffffffffffffffda RBX: 00007f33ec865fa0 RCX: 00007f33ec63eb69 [ 313.733974][T16288] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 313.733986][T16288] RBP: 00007f33eaca7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.733997][T16288] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 313.734064][T16288] R13: 0000000000000000 R14: 00007f33ec865fa0 R15: 00007fff53052128 [ 313.734084][T16288] [ 314.008701][T16308] tipc: Enabled bearer , priority 0 [ 314.022798][T16302] siw: device registration error -23 [ 314.028936][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.037367][T16308] syzkaller0: entered promiscuous mode [ 314.043561][T16308] syzkaller0: entered allmulticast mode [ 314.052890][T16306] tipc: Resetting bearer [ 314.060261][T16306] tipc: Disabling bearer [ 314.117408][T16319] loop1: detected capacity change from 0 to 512 [ 314.126620][T16321] netlink: 'syz.4.4674': attribute type 1 has an invalid length. [ 314.143479][T16319] EXT4-fs: Ignoring removed orlov option [ 314.151540][T16319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.160747][T16319] EXT4-fs (loop1): orphan cleanup on readonly fs [ 314.178649][T16319] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4673: bg 0: block 248: padding at end of block bitmap is not set [ 314.217504][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 314.217520][ T29] audit: type=1326 audit(4104047870.389:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ec63eb69 code=0x7ffc0000 [ 314.247448][ T29] audit: type=1326 audit(4104047870.389:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ec63eb69 code=0x7ffc0000 [ 314.271043][ T29] audit: type=1326 audit(4104047870.389:14874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33ec63eb69 code=0x7ffc0000 [ 314.294818][ T29] audit: type=1326 audit(4104047870.389:14875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ec63eb69 code=0x7ffc0000 [ 314.318761][ T29] audit: type=1326 audit(4104047870.389:14876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33ec63eb69 code=0x7ffc0000 [ 314.342582][ T29] audit: type=1326 audit(4104047870.389:14877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ec63eb69 code=0x7ffc0000 [ 314.366270][ T29] audit: type=1326 audit(4104047870.389:14878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f33ec63eb69 code=0x7ffc0000 [ 314.390177][ T29] audit: type=1326 audit(4104047870.389:14879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ec63eb69 code=0x7ffc0000 [ 314.395771][T16334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.426576][T16319] Quota error (device loop1): write_blk: dquota write failed [ 314.434052][T16319] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 314.444023][T16319] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4673: Failed to acquire dquot type 1 [ 314.463203][T16336] __nla_validate_parse: 29 callbacks suppressed [ 314.463275][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4680'. [ 314.520379][T16319] EXT4-fs (loop1): 1 truncate cleaned up [ 314.529785][T16319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.553888][T16334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.581568][T16319] EXT4-fs: Ignoring removed orlov option [ 314.588538][T16319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.627262][T16319] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 314.636779][T16351] loop4: detected capacity change from 0 to 1024 [ 314.643549][T16351] EXT4-fs: Ignoring removed orlov option [ 314.652461][T16351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.665535][T16319] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4673: Abort forced by user [ 314.688076][T16319] EXT4-fs (loop1): Remounting filesystem read-only [ 314.694681][T16319] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 314.722845][T16319] ext4 filesystem being remounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.773684][T16319] siw: device registration error -23 [ 314.787893][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.942090][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.100844][T16369] lo speed is unknown, defaulting to 1000 [ 315.106665][T16369] lo speed is unknown, defaulting to 1000 [ 315.112690][T16369] lo speed is unknown, defaulting to 1000 [ 315.120314][T16369] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 315.142283][T16369] lo speed is unknown, defaulting to 1000 [ 315.148607][T16369] lo speed is unknown, defaulting to 1000 [ 315.154923][T16369] lo speed is unknown, defaulting to 1000 [ 315.161220][T16369] lo speed is unknown, defaulting to 1000 [ 315.167744][T16369] lo speed is unknown, defaulting to 1000 [ 315.174513][T16369] lo speed is unknown, defaulting to 1000 [ 315.180993][T16369] lo speed is unknown, defaulting to 1000 [ 315.330278][T16378] loop4: detected capacity change from 0 to 1024 [ 315.349663][T16378] EXT4-fs: Ignoring removed orlov option [ 315.375149][T16378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.497191][T16386] loop2: detected capacity change from 0 to 1024 [ 315.508104][T16386] EXT4-fs: Ignoring removed orlov option [ 315.518181][T16386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.564339][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.706407][T16390] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4700'. [ 315.727127][T16389] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4700'. [ 315.743006][T10954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.756908][T16392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4701'. [ 315.766944][T16392] netlink: 'syz.1.4701': attribute type 1 has an invalid length. [ 315.774792][T16392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4701'. [ 315.785791][T16392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4701'. [ 315.834073][T16397] loop1: detected capacity change from 0 to 1024 [ 315.857210][T16397] EXT4-fs: Ignoring removed orlov option [ 315.873264][T16397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.891946][T16404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4706'. [ 315.901736][T16404] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 315.909458][T16404] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4706'. [ 315.925513][T16404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4706'. [ 315.956995][T16408] loop2: detected capacity change from 0 to 512 [ 315.963735][T16408] EXT4-fs: Ignoring removed orlov option [ 315.973707][T16408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 315.983140][T16408] EXT4-fs (loop2): orphan cleanup on readonly fs [ 315.989923][T16408] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4708: bg 0: block 248: padding at end of block bitmap is not set [ 316.005784][T16408] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4708: Failed to acquire dquot type 1 [ 316.017623][T16408] EXT4-fs (loop2): 1 truncate cleaned up [ 316.024085][T16408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.037812][T16408] EXT4-fs: Ignoring removed orlov option [ 316.043708][T16408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.052893][T16408] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 316.071717][T16408] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4708: Abort forced by user [ 316.081874][T16408] EXT4-fs (loop2): Remounting filesystem read-only [ 316.083443][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.088458][T16408] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 316.088508][T16408] ext4 filesystem being remounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.130709][T10954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.143406][T16419] loop1: detected capacity change from 0 to 128 [ 316.152764][T16419] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 316.165665][T16419] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.165929][T16422] loop2: detected capacity change from 0 to 1024 [ 316.183079][T16422] EXT4-fs: Ignoring removed orlov option [ 316.190711][T16422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.259740][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4712'. [ 316.269395][T11847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.336344][T16426] netlink: 'syz.1.4714': attribute type 1 has an invalid length. [ 316.373988][T16428] netlink: 'syz.1.4715': attribute type 1 has an invalid length. [ 316.399247][T10954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.413599][T16430] loop1: detected capacity change from 0 to 512 [ 316.420311][T16430] EXT4-fs: Ignoring removed orlov option [ 316.426984][T16430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.436039][T16430] EXT4-fs (loop1): orphan cleanup on readonly fs [ 316.443408][T16430] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4717: bg 0: block 248: padding at end of block bitmap is not set [ 316.458137][T16430] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4717: Failed to acquire dquot type 1 [ 316.469525][T16435] loop2: detected capacity change from 0 to 1024 [ 316.471777][T16430] EXT4-fs (loop1): 1 truncate cleaned up [ 316.476418][T16435] EXT4-fs: Ignoring removed orlov option [ 316.488006][T16430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.489062][T16435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.503851][T16430] EXT4-fs: Ignoring removed orlov option [ 316.518691][T16430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.527436][T16430] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 316.541807][T16430] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4717: Abort forced by user [ 316.551954][T16430] EXT4-fs (loop1): Remounting filesystem read-only [ 316.558466][T16430] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 316.566901][T16430] ext4 filesystem being remounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.589541][T16430] siw: device registration error -23 [ 316.605452][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.626780][T16440] netlink: 'syz.1.4719': attribute type 1 has an invalid length. [ 316.681188][T10954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.695485][T16446] loop1: detected capacity change from 0 to 512 [ 316.702423][T16446] EXT4-fs: Ignoring removed orlov option [ 316.709751][T16446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.721146][T16446] EXT4-fs (loop1): orphan cleanup on readonly fs [ 316.729274][T16446] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4723: bg 0: block 248: padding at end of block bitmap is not set [ 316.745913][T16446] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4723: Failed to acquire dquot type 1 [ 316.757974][T16446] EXT4-fs (loop1): 1 truncate cleaned up [ 316.764852][T16446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.778615][T16446] EXT4-fs: Ignoring removed orlov option [ 316.785524][T16446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.800267][T16446] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 316.815282][T16446] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4723: Abort forced by user [ 316.817196][T16455] lo speed is unknown, defaulting to 1000 [ 316.831927][T16455] lo speed is unknown, defaulting to 1000 [ 316.837875][T16455] lo speed is unknown, defaulting to 1000 [ 316.838585][T16446] EXT4-fs (loop1): Remounting filesystem read-only [ 316.844881][T16455] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 316.850221][T16446] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 316.866006][T16446] ext4 filesystem being remounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.877152][T16455] lo speed is unknown, defaulting to 1000 [ 316.883077][T16454] netlink: 'syz.4.4725': attribute type 1 has an invalid length. [ 316.883817][T16455] lo speed is unknown, defaulting to 1000 [ 316.897494][T16455] lo speed is unknown, defaulting to 1000 [ 316.904101][T16455] lo speed is unknown, defaulting to 1000 [ 316.910588][T16455] lo speed is unknown, defaulting to 1000 [ 316.916710][T16455] lo speed is unknown, defaulting to 1000 [ 316.944019][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.968407][T16461] loop2: detected capacity change from 0 to 512 [ 316.994032][T16468] netlink: 'syz.4.4731': attribute type 1 has an invalid length. [ 317.005167][T16461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.018253][T16464] loop1: detected capacity change from 0 to 1024 [ 317.028159][T16461] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.029717][T16464] EXT4-fs: Ignoring removed orlov option [ 317.060775][T16464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.061942][T16461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.223625][T16461] loop2: detected capacity change from 0 to 1024 [ 317.244319][T16461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.254055][T16489] loop3: detected capacity change from 0 to 512 [ 317.265049][T16489] EXT4-fs: Ignoring removed orlov option [ 317.271248][T16489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.352552][T16489] EXT4-fs (loop3): orphan cleanup on readonly fs [ 317.367299][T16489] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4740: bg 0: block 248: padding at end of block bitmap is not set [ 317.371464][T16461] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.392362][T16489] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4740: Failed to acquire dquot type 1 [ 317.393320][T11847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.415892][T16489] EXT4-fs (loop3): 1 truncate cleaned up [ 317.422325][T16461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.432772][T16489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.455723][T16489] EXT4-fs: Ignoring removed orlov option [ 317.462633][T16489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.474596][T16489] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 317.492523][T16489] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.4740: Abort forced by user [ 317.503489][T16489] EXT4-fs (loop3): Remounting filesystem read-only [ 317.510070][T16489] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 317.525773][T16489] ext4 filesystem being remounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.557372][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.641158][T16461] usb usb1: check_ctrlrecip: process 16461 (+}[@) requesting ep 01 but needs 81 [ 317.666158][T16503] tipc: Enabled bearer , priority 0 [ 317.676674][T16503] syzkaller0: entered promiscuous mode [ 317.682186][T16503] syzkaller0: entered allmulticast mode [ 317.700650][T16502] tipc: Resetting bearer [ 317.707361][T16461] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 317.716209][T16502] tipc: Disabling bearer [ 317.804181][T16510] lo speed is unknown, defaulting to 1000 [ 317.833136][T16516] loop3: detected capacity change from 0 to 1024 [ 317.848494][T16516] EXT4-fs: Ignoring removed orlov option [ 317.875733][T16516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.942841][T16524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.951254][T16524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.212862][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.282940][T16545] tipc: Enabled bearer , priority 0 [ 318.301505][T16545] syzkaller0: entered promiscuous mode [ 318.306984][T16545] syzkaller0: entered allmulticast mode [ 318.314751][T16544] tipc: Resetting bearer [ 318.322554][T16544] tipc: Disabling bearer [ 318.398431][T16547] loop3: detected capacity change from 0 to 512 [ 318.405735][T16547] EXT4-fs: Ignoring removed orlov option [ 318.413956][T16547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.423210][T16547] EXT4-fs (loop3): orphan cleanup on readonly fs [ 318.430438][T16547] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4761: bg 0: block 248: padding at end of block bitmap is not set [ 318.445057][T16547] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4761: Failed to acquire dquot type 1 [ 318.457490][T16547] EXT4-fs (loop3): 1 truncate cleaned up [ 318.463626][T16547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.476922][T16547] EXT4-fs: Ignoring removed orlov option [ 318.482760][T16547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.491314][T16547] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 318.501698][T16547] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.4761: Abort forced by user [ 318.511916][T16547] EXT4-fs (loop3): Remounting filesystem read-only [ 318.518416][T16547] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 318.526864][T16547] ext4 filesystem being remounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.543716][T16547] siw: device registration error -23 [ 318.556940][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.575851][T16551] loop3: detected capacity change from 0 to 1024 [ 318.582612][T16551] EXT4-fs: Ignoring removed orlov option [ 318.590451][T16551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.687722][T16555] loop1: detected capacity change from 0 to 128 [ 318.695624][T16555] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 318.709412][T16555] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.758614][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.832606][T11847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.004244][T16567] lo speed is unknown, defaulting to 1000 [ 319.168877][T16575] loop4: detected capacity change from 0 to 512 [ 319.177136][T16575] EXT4-fs: Ignoring removed orlov option [ 319.184801][T16575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.196856][T16575] EXT4-fs (loop4): orphan cleanup on readonly fs [ 319.209347][T16577] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 319.220105][T16575] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4770: bg 0: block 248: padding at end of block bitmap is not set [ 319.235722][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 319.235790][ T29] audit: type=1326 audit(4104047875.409:15368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5285ae5b27 code=0x7ffc0000 [ 319.269775][T16575] Quota error (device loop4): write_blk: dquota write failed [ 319.277286][T16575] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 319.287394][T16575] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4770: Failed to acquire dquot type 1 [ 319.299269][ T29] audit: type=1326 audit(4104047875.439:15369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5285a8ad69 code=0x7ffc0000 [ 319.301190][T16575] EXT4-fs (loop4): 1 truncate cleaned up [ 319.322883][ T29] audit: type=1326 audit(4104047875.439:15370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5285ae5b27 code=0x7ffc0000 [ 319.351935][ T29] audit: type=1326 audit(4104047875.439:15371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5285a8ad69 code=0x7ffc0000 [ 319.375534][ T29] audit: type=1326 audit(4104047875.439:15372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5285aeeb69 code=0x7ffc0000 [ 319.399363][ T29] audit: type=1326 audit(4104047875.469:15373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5285ae5b27 code=0x7ffc0000 [ 319.422913][ T29] audit: type=1326 audit(4104047875.469:15374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5285a8ad69 code=0x7ffc0000 [ 319.446643][ T29] audit: type=1326 audit(4104047875.469:15375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5285aeeb69 code=0x7ffc0000 [ 319.470997][T16575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.489555][T16575] EXT4-fs: Ignoring removed orlov option [ 319.495396][T16575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.504138][T16575] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 319.522231][T16575] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4770: Abort forced by user [ 319.532774][T16575] EXT4-fs (loop4): Remounting filesystem read-only [ 319.539424][T16575] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 319.547824][T16575] ext4 filesystem being remounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.567467][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.589748][T16581] lo speed is unknown, defaulting to 1000 [ 319.628795][T16583] loop4: detected capacity change from 0 to 512 [ 319.635892][T16583] EXT4-fs: Ignoring removed orlov option [ 319.643818][T16583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.666709][T16583] EXT4-fs (loop4): orphan cleanup on readonly fs [ 319.673917][T16583] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4772: bg 0: block 248: padding at end of block bitmap is not set [ 319.690209][T16583] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4772: Failed to acquire dquot type 1 [ 319.702582][T16583] EXT4-fs (loop4): 1 truncate cleaned up [ 319.705891][T16586] __nla_validate_parse: 32 callbacks suppressed [ 319.705906][T16586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4773'. [ 319.708876][T16583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.739937][T16583] EXT4-fs: Ignoring removed orlov option [ 319.747255][T16583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.756590][T16583] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 319.776348][T16583] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4772: Abort forced by user [ 319.787098][T16583] EXT4-fs (loop4): Remounting filesystem read-only [ 319.793735][T16583] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 319.803789][T16583] ext4 filesystem being remounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.822375][T16583] siw: device registration error -23 [ 319.836665][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.946849][T16604] loop4: detected capacity change from 0 to 128 [ 319.957998][T16604] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 319.971982][T16604] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.072558][T12184] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.165790][T16616] loop4: detected capacity change from 0 to 1024 [ 320.172468][T16616] EXT4-fs: Ignoring removed orlov option [ 320.180116][T16616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.249506][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 320.260849][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 320.270569][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 320.281130][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 320.466520][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.497858][T16620] loop4: detected capacity change from 0 to 512 [ 320.504939][T16620] EXT4-fs: Ignoring removed orlov option [ 320.511029][T16620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.524002][T16620] EXT4-fs (loop4): orphan cleanup on readonly fs [ 320.531163][T16620] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4787: bg 0: block 248: padding at end of block bitmap is not set [ 320.547124][T16620] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4787: Failed to acquire dquot type 1 [ 320.559755][T16620] EXT4-fs (loop4): 1 truncate cleaned up [ 320.566268][T16620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.583289][T16620] EXT4-fs: Ignoring removed orlov option [ 320.589152][T16620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.598392][T16620] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 320.617624][T16620] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4787: Abort forced by user [ 320.714385][T16620] EXT4-fs (loop4): Remounting filesystem read-only [ 320.720928][T16620] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 320.749638][T16620] ext4 filesystem being remounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.766799][T16624] loop3: detected capacity change from 0 to 512 [ 320.774100][T16624] EXT4-fs: Ignoring removed orlov option [ 320.784162][T16624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.814389][T16620] siw: device registration error -23 [ 320.835310][T16624] EXT4-fs (loop3): orphan cleanup on readonly fs [ 320.842641][T16624] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4788: bg 0: block 248: padding at end of block bitmap is not set [ 320.858428][T16624] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4788: Failed to acquire dquot type 1 [ 320.870386][T16624] EXT4-fs (loop3): 1 truncate cleaned up [ 320.878361][T16624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.891465][T16628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4789'. [ 320.901532][T16624] EXT4-fs: Ignoring removed orlov option [ 320.903020][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.907340][T16624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.926825][T16624] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 320.941497][T16630] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4789'. [ 320.964242][T16624] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.4788: Abort forced by user [ 320.974902][T16624] EXT4-fs (loop3): Remounting filesystem read-only [ 320.981509][T16624] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 320.991324][T16624] ext4 filesystem being remounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.008061][T16633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4790'. [ 321.017967][T16633] validate_nla: 3 callbacks suppressed [ 321.017981][T16633] netlink: 'syz.4.4790': attribute type 1 has an invalid length. [ 321.023645][T16635] siw: device registration error -23 [ 321.031198][T16633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4790'. [ 321.040913][T16633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4790'. [ 321.063139][T16624] siw: device registration error -23 [ 321.093247][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.109888][T16648] siw: device registration error -23 [ 321.130655][T16647] siw: device registration error -23 [ 321.175822][T16658] netlink: 'syz.4.4803': attribute type 1 has an invalid length. [ 321.207384][T16662] lo speed is unknown, defaulting to 1000 [ 321.283018][T16668] loop4: detected capacity change from 0 to 512 [ 321.289788][T16668] EXT4-fs: Ignoring removed orlov option [ 321.300408][T16668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.309510][T16668] EXT4-fs (loop4): orphan cleanup on readonly fs [ 321.333483][T16668] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4806: bg 0: block 248: padding at end of block bitmap is not set [ 321.354629][T16668] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4806: Failed to acquire dquot type 1 [ 321.366488][T16668] EXT4-fs (loop4): 1 truncate cleaned up [ 321.374717][T16668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.397979][T16668] EXT4-fs: Ignoring removed orlov option [ 321.404860][T16668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.418572][T16668] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 321.442180][T16668] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4806: Abort forced by user [ 321.456198][T16668] EXT4-fs (loop4): Remounting filesystem read-only [ 321.462758][T16668] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 321.471395][T16668] ext4 filesystem being remounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.497252][T16668] siw: device registration error -23 [ 321.661489][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.759739][T16675] loop4: detected capacity change from 0 to 512 [ 321.776375][T16675] EXT4-fs: Ignoring removed orlov option [ 321.782796][T16675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.792825][T16675] EXT4-fs (loop4): orphan cleanup on readonly fs [ 321.799847][T16675] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4808: bg 0: block 248: padding at end of block bitmap is not set [ 321.814768][T16675] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4808: Failed to acquire dquot type 1 [ 321.826915][T16675] EXT4-fs (loop4): 1 truncate cleaned up [ 321.842181][T16675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.862257][T16675] EXT4-fs: Ignoring removed orlov option [ 321.878213][T16675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.892058][T16675] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 321.921625][T16675] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.4808: Abort forced by user [ 321.932403][T16675] EXT4-fs (loop4): Remounting filesystem read-only [ 321.938995][T16675] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 321.948006][T16675] ext4 filesystem being remounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.978900][T16675] siw: device registration error -23 [ 322.229304][T16689] lo speed is unknown, defaulting to 1000 [ 322.255213][T16689] siw: device registration error -23 [ 322.938929][T16692] lo speed is unknown, defaulting to 1000 [ 323.015522][T16700] netlink: 'syz.1.4817': attribute type 1 has an invalid length. [ 323.025519][T16697] netlink: 'syz.3.4816': attribute type 1 has an invalid length. [ 323.052457][T16705] netlink: 'syz.0.4819': attribute type 1 has an invalid length. [ 323.088863][T16713] loop1: detected capacity change from 0 to 512 [ 323.095345][T16711] loop3: detected capacity change from 0 to 512 [ 323.102879][T16713] EXT4-fs: Ignoring removed orlov option [ 323.123221][T16713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.135404][T16713] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.146762][T16713] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4821: bg 0: block 248: padding at end of block bitmap is not set [ 323.189745][T16713] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4821: Failed to acquire dquot type 1 [ 323.203446][T16713] EXT4-fs (loop1): 1 truncate cleaned up [ 323.213485][T16711] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.251078][T16713] EXT4-fs: Ignoring removed orlov option [ 323.256850][T16713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.265635][T16711] loop3: detected capacity change from 0 to 1024 [ 323.266246][T16713] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 323.283651][T16711] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.294536][T16713] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4821: Abort forced by user [ 323.306617][T16713] EXT4-fs (loop1): Remounting filesystem read-only [ 323.313160][T16713] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 323.321771][T16713] ext4 filesystem being remounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.386453][T16713] siw: device registration error -23 [ 323.405711][T16730] lo speed is unknown, defaulting to 1000 [ 323.649326][T16711] usb usb1: check_ctrlrecip: process 16711 (+}[@) requesting ep 01 but needs 81 [ 323.658481][T16711] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 323.698882][T16740] netlink: 'syz.3.4831': attribute type 1 has an invalid length. [ 323.726953][T16743] loop3: detected capacity change from 0 to 1024 [ 323.734649][T16743] EXT4-fs: Ignoring removed orlov option [ 323.945254][T16748] netlink: 'syz.0.4834': attribute type 1 has an invalid length. [ 323.962990][T16751] loop3: detected capacity change from 0 to 1024 [ 323.971087][T16751] EXT4-fs: Ignoring removed orlov option [ 324.058709][T16764] loop2: detected capacity change from 0 to 512 [ 324.073770][T16764] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.094755][T16764] loop2: detected capacity change from 0 to 1024 [ 324.128542][T16764] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.144423][T16764] usb usb1: check_ctrlrecip: process 16764 (+}[@) requesting ep 01 but needs 81 [ 324.154001][T16764] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 324.163593][T16770] loop3: detected capacity change from 0 to 128 [ 324.172364][T16770] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.189089][T16773] loop2: detected capacity change from 0 to 1024 [ 324.195830][T16773] EXT4-fs: Ignoring removed orlov option [ 324.241384][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 324.241401][ T29] audit: type=1326 audit(4104047880.409:15932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5285ae5b27 code=0x7ffc0000 [ 324.271292][ T29] audit: type=1326 audit(4104047880.419:15933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5285a8ad69 code=0x7ffc0000 [ 324.294817][ T29] audit: type=1326 audit(4104047880.419:15934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5285aeeb69 code=0x7ffc0000 [ 324.318966][ T29] audit: type=1326 audit(4104047880.449:15935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5285ae5b27 code=0x7ffc0000 [ 324.342524][ T29] audit: type=1326 audit(4104047880.449:15936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5285a8ad69 code=0x7ffc0000 [ 324.366012][ T29] audit: type=1326 audit(4104047880.449:15937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5285aeeb69 code=0x7ffc0000 [ 324.389637][ T29] audit: type=1326 audit(4104047880.469:15938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5285ae5b27 code=0x7ffc0000 [ 324.413186][ T29] audit: type=1326 audit(4104047880.469:15939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5285a8ad69 code=0x7ffc0000 [ 324.436666][ T29] audit: type=1326 audit(4104047880.469:15940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5285aeeb69 code=0x7ffc0000 [ 324.460337][ T29] audit: type=1326 audit(4104047880.479:15941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5285ae5b27 code=0x7ffc0000 [ 324.573638][T16786] loop1: detected capacity change from 0 to 512 [ 324.580731][T16786] EXT4-fs: Ignoring removed orlov option [ 324.587374][T16786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.603699][T16786] EXT4-fs (loop1): orphan cleanup on readonly fs [ 324.612778][T16786] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4848: bg 0: block 248: padding at end of block bitmap is not set [ 324.630667][T16786] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4848: Failed to acquire dquot type 1 [ 324.648158][T16796] loop2: detected capacity change from 0 to 512 [ 324.655299][T16796] EXT4-fs: Ignoring removed orlov option [ 324.659565][T16798] loop4: detected capacity change from 0 to 512 [ 324.661961][T16786] EXT4-fs (loop1): 1 truncate cleaned up [ 324.674461][T16796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.678448][T16786] EXT4-fs: Ignoring removed orlov option [ 324.689463][T16786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.690857][T16796] EXT4-fs (loop2): orphan cleanup on readonly fs [ 324.700729][T16798] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.704947][T16796] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4852: bg 0: block 248: padding at end of block bitmap is not set [ 324.729602][T16786] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 324.730653][T16796] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4852: Failed to acquire dquot type 1 [ 324.751581][T16796] EXT4-fs (loop2): 1 truncate cleaned up [ 324.762935][T16786] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4848: Abort forced by user [ 324.773929][T16798] loop4: detected capacity change from 0 to 1024 [ 324.776138][T16796] EXT4-fs: Ignoring removed orlov option [ 324.780607][T16786] EXT4-fs (loop1): Remounting filesystem read-only [ 324.786340][T16796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.793002][T16786] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 324.809774][T16796] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 324.809757][T16786] ext4 filesystem being remounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.821127][T16798] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.837798][T16796] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4852: Abort forced by user [ 324.851044][T16796] EXT4-fs (loop2): Remounting filesystem read-only [ 324.857357][T16798] usb usb1: check_ctrlrecip: process 16798 (+}[@) requesting ep 01 but needs 81 [ 324.857592][T16796] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 324.867453][T16798] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 324.884006][T16796] ext4 filesystem being remounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.987844][T16811] loop4: detected capacity change from 0 to 1024 [ 324.994904][T16811] EXT4-fs: Ignoring removed orlov option [ 325.104648][T16818] __nla_validate_parse: 36 callbacks suppressed [ 325.104665][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 325.138742][T16820] lo speed is unknown, defaulting to 1000 [ 325.186286][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'. [ 325.252943][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 325.273769][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4859'. [ 325.285453][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 325.392389][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 325.407925][T16827] loop2: detected capacity change from 0 to 1024 [ 325.425856][T16827] EXT4-fs: Ignoring removed orlov option [ 325.524474][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4863'. [ 325.565950][T16837] loop3: detected capacity change from 0 to 1024 [ 325.579414][T16837] EXT4-fs: Ignoring removed orlov option [ 325.620459][T16839] loop2: detected capacity change from 0 to 512 [ 325.627579][T16839] EXT4-fs: Ignoring removed orlov option [ 325.633789][T16839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 325.644716][T16839] EXT4-fs (loop2): orphan cleanup on readonly fs [ 325.653191][T16839] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4865: bg 0: block 248: padding at end of block bitmap is not set [ 325.657164][T16842] loop4: detected capacity change from 0 to 512 [ 325.668749][T16839] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4865: Failed to acquire dquot type 1 [ 325.674456][T16843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16843 comm=syz.3.4864 [ 325.686652][T16839] EXT4-fs (loop2): 1 truncate cleaned up [ 325.712442][T16839] EXT4-fs: Ignoring removed orlov option [ 325.717219][T16842] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.718560][T16839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 325.737494][T16839] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 325.781804][T16839] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4865: Abort forced by user [ 325.792730][T16839] EXT4-fs (loop2): Remounting filesystem read-only [ 325.799316][T16839] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 325.818292][T16839] ext4 filesystem being remounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.836523][T16842] loop4: detected capacity change from 0 to 1024 [ 325.854057][T16842] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.877573][T16842] usb usb1: check_ctrlrecip: process 16842 (+}[@) requesting ep 01 but needs 81 [ 325.893594][T16853] loop2: detected capacity change from 0 to 1024 [ 325.900066][T16842] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 325.900529][T16853] EXT4-fs: Ignoring removed orlov option [ 325.951185][T16861] loop3: detected capacity change from 0 to 512 [ 325.966079][T16861] EXT4-fs: Ignoring removed orlov option [ 325.976404][T16861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 325.990294][T16861] EXT4-fs (loop3): orphan cleanup on readonly fs [ 325.999535][T16861] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4871: bg 0: block 248: padding at end of block bitmap is not set [ 326.014800][T16861] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4871: Failed to acquire dquot type 1 [ 326.015218][T16861] EXT4-fs (loop3): 1 truncate cleaned up [ 326.032355][T16861] EXT4-fs: Ignoring removed orlov option [ 326.046665][T16861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.060373][T16861] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 326.076812][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'. [ 326.088188][T16861] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.4871: Abort forced by user [ 326.108716][T16861] EXT4-fs (loop3): Remounting filesystem read-only [ 326.115331][T16861] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 326.125173][T16861] ext4 filesystem being remounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.154645][T16861] siw: device registration error -23 [ 326.189352][T16880] loop2: detected capacity change from 0 to 512 [ 326.196875][T16880] EXT4-fs: Ignoring removed orlov option [ 326.203445][T16880] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.215425][T16880] EXT4-fs (loop2): orphan cleanup on readonly fs [ 326.223312][T16882] usb usb1: check_ctrlrecip: process 16882 (+}[@) requesting ep 01 but needs 81 [ 326.223420][T16880] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4879: bg 0: block 248: padding at end of block bitmap is not set [ 326.232432][T16882] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 326.262114][T16885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4880'. [ 326.268502][T16880] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4879: Failed to acquire dquot type 1 [ 326.273751][T16885] netlink: 'syz.3.4880': attribute type 1 has an invalid length. [ 326.290103][T16885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4880'. [ 326.298891][T16880] EXT4-fs (loop2): 1 truncate cleaned up [ 326.320996][T16880] EXT4-fs: Ignoring removed orlov option [ 326.327373][T16880] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.336217][T16880] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 326.351945][T16880] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4879: Abort forced by user [ 326.362440][T16880] EXT4-fs (loop2): Remounting filesystem read-only [ 326.369106][T16880] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 326.377815][T16880] ext4 filesystem being remounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.407765][T16896] loop2: detected capacity change from 0 to 1024 [ 326.414647][T16896] EXT4-fs: Ignoring removed orlov option [ 326.524107][T16906] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 326.541018][T16908] loop2: detected capacity change from 0 to 1024 [ 326.547983][T16908] EXT4-fs: Ignoring removed orlov option [ 326.667578][T16913] loop2: detected capacity change from 0 to 512 [ 326.674480][T16913] EXT4-fs: Ignoring removed orlov option [ 326.680925][T16913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.683657][T16915] loop1: detected capacity change from 0 to 512 [ 326.691200][T16913] EXT4-fs (loop2): orphan cleanup on readonly fs [ 326.702822][T16913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4890: bg 0: block 248: padding at end of block bitmap is not set [ 326.717466][T16913] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4890: Failed to acquire dquot type 1 [ 326.729486][T16913] EXT4-fs (loop2): 1 truncate cleaned up [ 326.731315][T16915] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.749297][T16913] EXT4-fs: Ignoring removed orlov option [ 326.755162][T16913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.763865][T16915] loop1: detected capacity change from 0 to 1024 [ 326.770305][T16913] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 326.782471][T16913] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4890: Abort forced by user [ 326.783786][T16915] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.793210][T16913] EXT4-fs (loop2): Remounting filesystem read-only [ 326.810057][T16913] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 326.818722][T16913] ext4 filesystem being remounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.838672][T16915] usb usb1: check_ctrlrecip: process 16915 (+}[@) requesting ep 01 but needs 81 [ 326.849672][T16915] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 326.858250][T16923] loop4: detected capacity change from 0 to 512 [ 327.003968][T16934] loop1: detected capacity change from 0 to 1024 [ 327.010665][T16934] EXT4-fs: Ignoring removed orlov option [ 327.645027][T16937] lo speed is unknown, defaulting to 1000 [ 327.842997][T16950] loop3: detected capacity change from 0 to 1024 [ 327.849743][T16950] EXT4-fs: Ignoring removed orlov option [ 327.922256][T16956] loop1: detected capacity change from 0 to 512 [ 327.929035][T16956] EXT4-fs: Ignoring removed orlov option [ 327.940152][T16956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.950597][T16956] EXT4-fs (loop1): orphan cleanup on readonly fs [ 327.958657][T16956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4904: bg 0: block 248: padding at end of block bitmap is not set [ 327.975620][T16956] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4904: Failed to acquire dquot type 1 [ 327.987547][T16956] EXT4-fs (loop1): 1 truncate cleaned up [ 327.995684][T16956] EXT4-fs: Ignoring removed orlov option [ 327.997137][T16962] loop3: detected capacity change from 0 to 512 [ 328.008159][T16956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.017921][T16956] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 328.029518][T16962] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.041100][T16956] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4904: Abort forced by user [ 328.053193][T16956] EXT4-fs (loop1): Remounting filesystem read-only [ 328.056609][T16970] loop4: detected capacity change from 0 to 128 [ 328.059744][T16956] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 328.070153][T16970] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.085088][T16962] loop3: detected capacity change from 0 to 1024 [ 328.089933][T16956] ext4 filesystem being remounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.103556][T16962] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.117647][T16962] usb usb1: check_ctrlrecip: process 16962 (+}[@) requesting ep 01 but needs 81 [ 328.117771][T16956] siw: device registration error -23 [ 328.132446][T16962] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 328.224696][T16987] loop1: detected capacity change from 0 to 512 [ 328.231647][T16987] EXT4-fs: Ignoring removed orlov option [ 328.237612][T16990] loop4: detected capacity change from 0 to 1024 [ 328.237741][T16987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.244652][T16990] EXT4-fs: Ignoring removed orlov option [ 328.254488][T16987] EXT4-fs (loop1): orphan cleanup on readonly fs [ 328.265337][T16987] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4915: bg 0: block 248: padding at end of block bitmap is not set [ 328.280967][T16987] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4915: Failed to acquire dquot type 1 [ 328.292787][T16987] EXT4-fs (loop1): 1 truncate cleaned up [ 328.314285][T16987] EXT4-fs: Ignoring removed orlov option [ 328.320237][T16987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.328913][T16987] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 328.342077][T16987] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4915: Abort forced by user [ 328.353612][T16987] EXT4-fs (loop1): Remounting filesystem read-only [ 328.360234][T16987] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 328.368784][T16987] ext4 filesystem being remounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.390957][T16987] siw: device registration error -23 [ 328.410293][T16997] loop1: detected capacity change from 0 to 512 [ 328.474921][T17001] loop4: detected capacity change from 0 to 1024 [ 328.481885][T17001] EXT4-fs: Ignoring removed orlov option [ 328.776551][T17008] loop2: detected capacity change from 0 to 512 [ 328.805078][T17008] EXT4-fs: Ignoring removed orlov option [ 328.818286][T17008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.853699][T17008] EXT4-fs (loop2): orphan cleanup on readonly fs [ 328.876871][T17008] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4920: bg 0: block 248: padding at end of block bitmap is not set [ 328.926660][T17008] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4920: Failed to acquire dquot type 1 [ 328.938797][T17008] EXT4-fs (loop2): 1 truncate cleaned up [ 328.948549][T17008] EXT4-fs: Ignoring removed orlov option [ 328.954570][T17008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.964163][T17008] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 328.982719][T17008] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4920: Abort forced by user [ 328.993419][T17008] EXT4-fs (loop2): Remounting filesystem read-only [ 329.000012][T17008] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 329.009692][T17008] ext4 filesystem being remounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.042380][T17018] loop4: detected capacity change from 0 to 1024 [ 329.049088][T17018] EXT4-fs: Ignoring removed orlov option [ 329.116793][T17027] loop3: detected capacity change from 0 to 1024 [ 329.124376][T17029] netlink: 'syz.2.4929': attribute type 1 has an invalid length. [ 329.137128][T17027] EXT4-fs: Ignoring removed orlov option [ 329.209403][T17034] loop4: detected capacity change from 0 to 1024 [ 329.216068][T17034] EXT4-fs: Ignoring removed orlov option [ 329.375898][T17036] ================================================================== [ 329.384358][T17036] BUG: KCSAN: data-race in redirty_tail_locked / vfs_fsync_range [ 329.384395][T17036] [ 329.384400][T17036] read-write to 0xffff888118d72008 of 4 bytes by task 17034 on cpu 1: [ 329.384415][T17036] redirty_tail_locked+0x56/0x280 [ 329.384442][T17036] writeback_single_inode+0x21e/0x3e0 [ 329.384466][T17036] sync_inode_metadata+0x5b/0x90 [ 329.384490][T17036] generic_buffers_fsync_noflush+0xd9/0x120 [ 329.384509][T17036] ext4_sync_file+0x1ab/0x690 [ 329.384537][T17036] vfs_fsync_range+0x10d/0x130 [ 329.384555][T17036] ext4_buffered_write_iter+0x34f/0x3c0 [ 329.384583][T17036] ext4_file_write_iter+0x383/0xf00 [ 329.384608][T17036] iter_file_splice_write+0x5f2/0x970 [ 329.384623][T17036] direct_splice_actor+0x153/0x2a0 [ 329.384639][T17036] splice_direct_to_actor+0x30f/0x680 [ 329.384655][T17036] do_splice_direct+0xda/0x150 [ 329.384671][T17036] do_sendfile+0x380/0x650 [ 329.384694][T17036] __x64_sys_sendfile64+0x105/0x150 [ 329.384717][T17036] x64_sys_call+0x2bb0/0x2ff0 [ 329.384737][T17036] do_syscall_64+0xd2/0x200 [ 329.384756][T17036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.384774][T17036] [ 329.384779][T17036] read to 0xffff888118d72008 of 4 bytes by task 17036 on cpu 0: [ 329.384792][T17036] vfs_fsync_range+0x9b/0x130 [ 329.384811][T17036] ext4_buffered_write_iter+0x34f/0x3c0 [ 329.384838][T17036] ext4_file_write_iter+0x383/0xf00 [ 329.384864][T17036] iter_file_splice_write+0x5f2/0x970 [ 329.384879][T17036] direct_splice_actor+0x153/0x2a0 [ 329.384895][T17036] splice_direct_to_actor+0x30f/0x680 [ 329.384911][T17036] do_splice_direct+0xda/0x150 [ 329.384927][T17036] do_sendfile+0x380/0x650 [ 329.384951][T17036] __x64_sys_sendfile64+0x105/0x150 [ 329.384974][T17036] x64_sys_call+0x2bb0/0x2ff0 [ 329.384992][T17036] do_syscall_64+0xd2/0x200 [ 329.385011][T17036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.385029][T17036] [ 329.385032][T17036] value changed: 0x0000003a -> 0x00000002 [ 329.385042][T17036] [ 329.385045][T17036] Reported by Kernel Concurrency Sanitizer on: [ 329.385056][T17036] CPU: 0 UID: 0 PID: 17036 Comm: syz.4.4931 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 329.385079][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.385090][T17036] ================================================================== [ 329.418196][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 329.418209][ T29] audit: type=1326 audit(4104047885.589:16398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.419667][ T29] audit: type=1326 audit(4104047885.589:16399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.419693][ T29] audit: type=1326 audit(4104047885.589:16400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.420885][ T29] audit: type=1326 audit(4104047885.589:16401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.420958][ T29] audit: type=1326 audit(4104047885.589:16402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.421790][ T29] audit: type=1326 audit(4104047885.589:16403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.423308][ T29] audit: type=1326 audit(4104047885.599:16404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.424084][ T29] audit: type=1326 audit(4104047885.599:16405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.424200][ T29] audit: type=1326 audit(4104047885.599:16406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000 [ 329.424819][ T29] audit: type=1326 audit(4104047885.599:16407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f019b6beb69 code=0x7ffc0000