last executing test programs: 1m6.911792054s ago: executing program 2 (id=4053): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m6.878703684s ago: executing program 2 (id=4054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000015cbf7bdd5b5512a600fd030001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000580)="607ae53a0bb6ee4db9cb71984ebeda20fcb2c676b405120f354229d8da82ca205b438845f4ad97ae20f7f59e5c51327d4f64c56e7087daac49779288e080c32585b36ffd3959d55cfe480cf3a00037d35fbe8e7d72e0b6009dc0b85c30c88cd37ae5e82c7957a0fdb4dd7a9ac84c42e1bc17ac490c2054bb33f71bbce2130068f4d636cbf709376acb1e64450d348559ae2ccc471514d0c448c83a4d7d1d8f881f0c71dd96dffcccdbb7b1b0e483d86da1f32abe56f11d89d08656b03ecb986943804dc48fac3b271aa9a000c062923a9c53baa07831b3e74898deac7f743fc80791abe3a978392acf9bd5fc4c07f4c2bb8f89d5282340febd", &(0x7f0000000740)=""/221, &(0x7f00000001c0), &(0x7f00000003c0)="1a9e30644b78558d826ebd2ab05615968338e5f5f9bccca142a38503870014a23e5ca2d7d28a04430aea369cf1c0a6d901c8e6603492f8172c24fc3135b1ea4dcfb8c84a5f3849aff9422b76bc15f7f52f3542295373809d88970447d3f8ea7f88d789d16f1febcaf9591177201b26", 0x3, r1}, 0x38) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mq_open(&(0x7f0000000080)='init_itable', 0x80, 0x54, &(0x7f0000000180)={0xfffffffffffff001, 0x0, 0x6, 0x101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) unshare(0x42000000) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mknodat$loop(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x20, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2420, &(0x7f0000000000), 0x1, 0x4a6, &(0x7f0000000a40)="$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") 1m5.519714295s ago: executing program 2 (id=4071): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000200000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x101900, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) openat$cgroup_int(r3, &(0x7f0000000240)='cpu.weight.nice\x00', 0x2, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/psched\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 1m4.365132373s ago: executing program 2 (id=4089): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012"], 0x54}}, 0x0) pipe2(0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080004"], 0x2c}}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000700)=@gcm_256={{0x304}, "8df7eaeeabeca73d", "3840a42b9fafef394b4dde8409160c8d8c08b05c95d22bfdb075f310643ee709", '\x00', "00000000008000"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) write$binfmt_misc(r3, &(0x7f00000003c0)="28474ef926f856b0a1c9e338005ae177ce4f6c8a02486301bbaf077ecc100723", 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m3.456014807s ago: executing program 2 (id=4103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000600000000000000", @ANYBLOB="04000000000000000000000000001d0000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000280), 0xfd, r1}, 0x38) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x224401, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x9, 0x2, 0xb, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0xb, [@struct={0xa, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x0, 0xffffffff}, {0xe, 0x0, 0xa7fe}, {0x6, 0x1, 0xf}]}, @union={0x7, 0x6, 0x0, 0x5, 0x1, 0x5d, [{0x200, 0x3, 0xf4}, {0xa, 0x1, 0x9}, {0x2, 0x4, 0x386}, {0x9, 0x4, 0x2}, {0xe, 0x0, 0x1}, {0xa, 0x2, 0x1}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @fwd={0x10}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x0, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000400)=""/61, 0xcb, 0x3d, 0x1, 0x7fff, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000480)) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1m3.060046123s ago: executing program 2 (id=4106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@remote, {}, {0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) close(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYRESHEX=r7]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) 1m3.042136713s ago: executing program 32 (id=4106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@remote, {}, {0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) close(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYRESHEX=r7]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) 20.075488401s ago: executing program 0 (id=4494): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x4f8f, &(0x7f0000000100)={0x0, 0x10641c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r3, 0xffffffffffffffff, 0x0) 19.142284756s ago: executing program 0 (id=4506): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) r4 = fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x44882000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000240)=""/44, 0x2c, &(0x7f0000000280)=""/203, &(0x7f0000000400)=[0x0, r3, r4, r5, r6], 0x5, {r7}}, 0x58) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x0) fchdir(r8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d03000000000000"], 0x30}}, 0x40081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[], 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r10, 0x2007ffb) sendfile(r10, r10, 0x0, 0x1000000201005) 18.065791662s ago: executing program 0 (id=4520): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 17.949246854s ago: executing program 0 (id=4522): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012"], 0x54}}, 0x0) pipe2(0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080004"], 0x2c}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000700)=@gcm_256={{0x304}, "8df7eaeeabeca73d", "3840a42b9fafef394b4dde8409160c8d8c08b05c95d22bfdb075f310643ee709", '\x00', "00000000008000"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) write$binfmt_misc(r2, &(0x7f00000003c0)="28474ef926f856b0a1c9e338005ae177ce4f6c8a02486301bbaf077ecc100723", 0x20) 17.086021947s ago: executing program 0 (id=4528): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 16.510300476s ago: executing program 0 (id=4534): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x4f8f, &(0x7f0000000100)={0x0, 0x10641c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16.509947116s ago: executing program 33 (id=4534): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x4f8f, &(0x7f0000000100)={0x0, 0x10641c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r3, 0xffffffffffffffff, 0x0) 11.385068874s ago: executing program 6 (id=4589): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) kexec_load(0xd5a, 0x0, 0x0, 0x2) 11.373933945s ago: executing program 6 (id=4591): socket(0x2, 0x80805, 0x0) open$dir(0x0, 0x40, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 10.708385605s ago: executing program 6 (id=4598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r1, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) 10.553307418s ago: executing program 6 (id=4600): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012"], 0x54}}, 0x0) pipe2(0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080004"], 0x2c}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000700)=@gcm_256={{0x304}, "8df7eaeeabeca73d", "3840a42b9fafef394b4dde8409160c8d8c08b05c95d22bfdb075f310643ee709", '\x00', "00000000008000"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) write$binfmt_misc(r2, &(0x7f00000003c0)="28474ef926f856b0a1c9e338005ae177ce4f6c8a02486301bbaf077ecc100723", 0x20) 10.43429513s ago: executing program 6 (id=4603): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 10.126665514s ago: executing program 5 (id=4605): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x44882000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000240)=""/44, 0x2c, &(0x7f0000000280)=""/203, &(0x7f0000000400)=[r0, r3, r4, r5, r6], 0x5, {r7}}, 0x58) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d03000000000000"], 0x30}}, 0x40081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[], 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r10, 0x2007ffb) sendfile(r10, r10, 0x0, 0x1000000201005) 9.905836318s ago: executing program 6 (id=4608): modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0xe88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x83, 0x4}, 0x6010, 0xf3f, 0x0, 0x5, 0xfffffffffffffffe, 0x8, 0xb14, 0x0, 0x200, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r3 = fcntl$getown(0xffffffffffffffff, 0x9) waitid(0x2, r3, &(0x7f00000001c0), 0x1, &(0x7f0000000240)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x509, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r10}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10044084}, 0x0) pipe(&(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x20a, 0x1, 0x7, 0x4, 0x0, 0x1, 0x4}, 0xc) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 9.868405178s ago: executing program 34 (id=4608): modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0xe88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x83, 0x4}, 0x6010, 0xf3f, 0x0, 0x5, 0xfffffffffffffffe, 0x8, 0xb14, 0x0, 0x200, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r3 = fcntl$getown(0xffffffffffffffff, 0x9) waitid(0x2, r3, &(0x7f00000001c0), 0x1, &(0x7f0000000240)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x509, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r10}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10044084}, 0x0) pipe(&(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x20a, 0x1, 0x7, 0x4, 0x0, 0x1, 0x4}, 0xc) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 9.249414978s ago: executing program 5 (id=4615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f00000008c0)) r3 = io_uring_setup(0x5caa, &(0x7f0000000500)={0x0, 0x9ef4, 0x20, 0x0, 0x17b}) io_uring_enter(r3, 0x6b32, 0x8846, 0x40, &(0x7f0000000300)={[0xfff]}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000440), 0x4000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) 8.133906875s ago: executing program 5 (id=4623): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) kexec_load(0xd5a, 0x0, 0x0, 0x2) 8.063080226s ago: executing program 5 (id=4624): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012"], 0x54}}, 0x0) pipe2(0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080004"], 0x2c}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000700)=@gcm_256={{0x304}, "8df7eaeeabeca73d", "3840a42b9fafef394b4dde8409160c8d8c08b05c95d22bfdb075f310643ee709", '\x00', "00000000008000"}, 0x38) write$binfmt_misc(r2, &(0x7f00000003c0)="28474ef926f856b0a1c9e338005ae177ce4f6c8a02486301bbaf077ecc100723", 0x20) 7.687151721s ago: executing program 5 (id=4628): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1220002, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 7.179536519s ago: executing program 4 (id=4631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000000)=0xd, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x5c0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x4f0, 0x2e0, 0x2e0, 0x4f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {0x0, 0xfc}, {}, {}, {}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x5}, {0x0, 0x0, 0xfe, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {0x2}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:inetd_child_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000002940)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="fffaccf7a745ba74aea6082ffbf7e4016bb6734f8b44e8f4a9b3d8b4e58cab1edbacb1f618e73db803f4e2298581cc258bcd211fcfbe8f12ce37eacb72a17cca05fe2b4042e6721669e2cc6948cc1c99c260a28c391569df4a255bcb78871619dd0c822a8377a76587326d86bae27a0c41ef256595b37d15", @ANYRESDEC=r8, @ANYRES8=r4], 0x2c}], 0x1}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x3, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) 7.036125181s ago: executing program 5 (id=4632): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0xbbb, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x200008, &(0x7f00000001c0)={[{@nojournal_checksum}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x1, 0x506, &(0x7f0000001540)="$eJzs3c9vI1cdAPDvOGvHm02btPQACNqlLSxotU7ibaOqBygnhFAlRI8gbUPijaLYcRQ7pQl7SM9InJCoxAmO/AGce+LOBcGNSzkg8SMCNUgcjGY8Tp2svQlkY0fx5yON5r15s/5+32bnvfhl4xfAxLodEQcRUYqIdyNiLr+e5Ee81T3S+z45fLR6dPhoNYlO552/J1l7ei36/kzqVv6a5Yj43rcifpg8Hre1t7+5Uq/XdvL6QruxvdDa27+30VhZr63XtqrV5aXlxTfuv159an19qVHKS1/8+HcHX/txmtZsfqW/H09Tt+vF4zipGxHxncsINgZTeX9K406E/0shIp6PiJez538uprKvJgBwnXU6c9GZ668fS05WAYDropCtgSWFSr4WMBuFQqXSXcN7IWYK9Warffdhc3drrbtWNh/FwsONem0xXyucj2KS1pey8qf16qn6/Yh4LiJ+Nn0zq1dWm/W1cX7jAwAT7Nap+f9f0935HwC45srjTgAAGDnzPwBMHvM/AEwe8z8ATJ7u/H9z3GkAACPk/T8ATB7zPwBMlO++/XZ6dI7yz79ee29vd7P53r21Wmuz0thdraw2d7Yr683mevaZPY2zXq/ebG4vvRa7789/fbvVXmjt7T9oNHe32g+yz/V+UCtmdx2MoGcAwDDPvfTRH5N0Rn7zZnZE314OxbFmBly2wrgTAMZmatwJAGNjty+YXBd4j1+M+KklArgGBmzRe0J50C8IdTqdzuWlBFyyO5+z/g+Tqm/93/8Chglj/R8ml/V/mFydTnLeTf7jvDcCAFebNX5gyM//n8/Pv85/OPCDtdN3fHiZWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV1tv/t5LvBT4bhUKlEvFMRMxHMXm4Ua8tRsSzEfGH6eJ0Wl8ac84AwEUV/pLk+3/dmXt19kTTi7eOi6WI+NEv3vn5+yvt9s7vI0rJP6Z719sf5tero88eADhbb57Ozn1v5D85fLTaO0aZz1+/GRHlbvyjw1IcHce/ETeyczmKETHzzySvdyV9axcXcfBBRHx2UP+TmM3WQLo7n56On8Z+ZqTxCyfiF7K27jn9u/jMU8gFJs1H6fjz1qDnrxC3s/Pg57+cjVAXl49/6UutHmVj4Kfxe+Pf1JDx7/Z5Y7z22293Szcfb/sg4vM3Inqxj/rGn178ZEj8V88Z/09fePHlYW2dX0bcicHx+2MttBvbC629/XsbjZX12nptq1pdXlpefOP+69WFbI16Yfhs8Lc37z47rC3t/8yQ+OUz+v/lc/b/V/959/tfekL8r74yKH4hXnhC/HRO/Mo546/M/KY8rC2Nvzak/2d9/e+eM/7Hf95/bNtwAGB8Wnv7myv1em1HQeHqF9J/slcgjYGFb4wqVikGN/3kle4zfaqp973//xhr2IgxVRrNyARctuOHPiL+Pe5kAAAAAAAAAAAAAACAgUbxG0vj7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX138DAAD//8loxyM=") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x84800, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0}) r5 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x7) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x5) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, @address_request}}}}, 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x8000000000000001, 0x200000) socket(0x2, 0x80805, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") 7.035850932s ago: executing program 35 (id=4632): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0xbbb, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x200008, &(0x7f00000001c0)={[{@nojournal_checksum}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x1, 0x506, &(0x7f0000001540)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x84800, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0}) r5 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x7) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x5) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, @address_request}}}}, 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x8000000000000001, 0x200000) socket(0x2, 0x80805, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") 6.856302154s ago: executing program 4 (id=4634): socket(0x2, 0x80805, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 6.269202523s ago: executing program 4 (id=4638): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1220002, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 6.235120204s ago: executing program 4 (id=4639): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012"], 0x54}}, 0x0) pipe2(0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080004"], 0x2c}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) write$binfmt_misc(r2, &(0x7f00000003c0)="28474ef926f856b0a1c9e338005ae177ce4f6c8a02486301bbaf077ecc100723", 0x20) 6.005734158s ago: executing program 4 (id=4640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000000)=0xd, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x5c0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x4f0, 0x2e0, 0x2e0, 0x4f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {0x0, 0xfc}, {}, {}, {}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x5}, {0x0, 0x0, 0xfe, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {0x2}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:inetd_child_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) 5.426388246s ago: executing program 4 (id=4646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 5.426228317s ago: executing program 36 (id=4646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.665758119s ago: executing program 3 (id=4669): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) listen(r2, 0xffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010104}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000200), 0x0, 0x0, 0x10000}}], 0x58}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x103a3, 0x138) 2.147056197s ago: executing program 8 (id=4677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 1.96101486s ago: executing program 1 (id=4678): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1220002, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.93245611s ago: executing program 1 (id=4679): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) r4 = fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x44882000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000240)=""/44, 0x2c, &(0x7f0000000280)=""/203, &(0x7f0000000400)=[r1, r3, r4, r5, r6], 0x5, {r7}}, 0x58) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x0) fchdir(r8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d03000000000000"], 0x30}}, 0x40081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[], 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r10, 0x2007ffb) sendfile(r10, r10, 0x0, 0x1000000201005) 1.895130721s ago: executing program 8 (id=4680): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) kexec_load(0xd5a, 0x0, 0x0, 0x2) 1.849291831s ago: executing program 8 (id=4681): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) 1.805317752s ago: executing program 9 (id=4647): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000200000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x101900, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) openat$cgroup_int(r4, &(0x7f0000000240)='cpu.weight.nice\x00', 0x2, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/psched\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 1.785896452s ago: executing program 8 (id=4682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000015cbf7bdd5b5512a600fd030001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000540)="e02742e86c0d85ff978276", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000580)="607ae53a0bb6ee4db9cb71984ebeda20fcb2c676b405120f354229d8da82ca205b438845f4ad97ae20f7f59e5c51327d4f64c56e7087daac49779288e080c32585b36ffd3959d55cfe480cf3a00037d35fbe8e7d72e0b6009dc0b85c30c88cd37ae5e82c7957a0fdb4dd7a9ac84c42e1bc17ac490c2054bb33f71bbce2130068f4d636cbf709376acb1e64450d348559ae2ccc471514d0c448c83a4d7d1d8f881f0c71dd96dffcccdbb7b1b0e483d86da1f32abe56f11d89d08656b03ecb986943804dc48fac3b271aa9a000c062923a9c53baa07831b3e74898deac7f743fc80791abe3a978392acf9bd5fc4c07f4c2bb8f89d5282340febd", &(0x7f0000000740)=""/221, &(0x7f00000001c0), &(0x7f00000003c0)="1a9e30644b78558d826ebd2ab05615968338e5f5f9bccca142a38503870014a23e5ca2d7d28a04430aea369cf1c0a6d901c8e6603492f8172c24fc3135b1ea4dcfb8c84a5f3849aff9422b76bc15f7f52f3542295373809d88970447d3f8ea7f88d789d16f1febcaf9591177201b26", 0x3, r1}, 0x38) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = mq_open(&(0x7f0000000080)='init_itable', 0x80, 0x54, &(0x7f0000000180)={0xfffffffffffff001, 0x0, 0x6, 0x101}) mq_timedsend(r3, &(0x7f0000000480), 0x0, 0x8, &(0x7f0000000300)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) unshare(0x42000000) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mknodat$loop(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x20, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2420, &(0x7f0000000000), 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") 1.721941033s ago: executing program 3 (id=4683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1000, 0x24, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000000000000000001010"}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 1.692119174s ago: executing program 3 (id=4684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000000)=0xd, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x5c0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x4f0, 0x2e0, 0x2e0, 0x4f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {0x0, 0xfc}, {}, {}, {}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x5}, {0x0, 0x0, 0xfe, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {0x2}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:inetd_child_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$eJzs3MFv29YZAPDHxK4NBwsGFGvSNEDZtIfsEFeSFwdGBywaTdtsJVEg5cI5DcXiZMHsblg2YMmly6VDgQ077bz1utOO+6d62T/ggRLlybIzuWkbZcDvB8TvUfzI9z2C4QcRIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEKJks9FoRqGT9Xb34udLNou8e7y0EKbXj/f3rxPNCYsTf0MUQlT9C8vL4eroo6uv/zf2B9WfG+HKaOlKWK6a5fD00hvf/+D1hQvVhotRdCqLl+3xk6e//OTgYP83X2Obo6Ojz6rZfIdpvTTbaS8r86zb3k7jrMzjjfX1xvs7W2W8lXXS8l45SLtxUqTtQV7EN5O7IYSNtThdvZfv9rY32500vpn8MG5ubNy51Wo01uMPV/tpuyjz3vsfrpbJTtbpZL3tYUy1+lbr7XCnOhE/ygbxIG134/jBo4P9tVlJVkHN8wS1ZgW1Gq1Ws9lqNddvb9y+02gs12fr8QcLjSlhepOF+Z+0vHSv1SfKcGF8jXvtW7uIwws6Sv4y7xQAAACA71g0vMceDe/LXx32trJO2jgRcxTNLT0AAADgWzD8an+lvgEQwtUQnf7+DwAAAPx/+/u4c+YzdiGKQtlfisaPqvT33osO21WvfXhx9NHF6T0Otq5Fl+udDJv1hXopSa9Hb46C3hxHf1U3D57/rN8/Q5VHVBSL0bNvlkD4U7g2irl2f9TeH68ZzXZlK+ukq0ne+aAZ2u3LFwbp3uB3nz76fQhFcXTxi173chQePDrYX/35rw7uD3N5Vu3l2WH9C4lTP5Q4mctSmMjlt8fPPdYzvnvyyC8Ob8RUs/6i110ZjduYnP+F0eYXvsb8Pw9vjWLeWhm1Kyfnv1yN2Vw9Y/aTWTT7e+8t1YOdc+ZTWVwfxVy/OTyx3r1Zr1mcyKI1K4vW5PF/oWNxnMW7J7KYPBZrs7JY+4ZZAMzLg+kqdKr+n6q7L3CV+x/VvRqlKuEzq/svZo7yeXhnFPPOtYW6Il0MYeqK3ph1RW+cs66HcHYW/wg3/vbXEHbDjXHw82psNe6fT1TV6PDLaoMvT4/7h1FT/vvhzqWqs3T46/DG4ydPbz06/OTh/sP9T1uttfXGjxqN262wOJxG3ag9AJwhLb6KVgZ/jIoi6/+subHRbA920rjIk4/iItvcTuOsN0iLZKfd207jfpEP8iTvVJ2Ps820jMvdfj+vKklexP28zPaGb36J61e/lGm33RtkSdnvpO0yjZO8N2gng3gzK5O4v/vTTlbupEW8lRdx2U+TbCtL2oMs78Vlvlsk6Wocl2k6EZhtpkefhZBV3V7cL7Juu7gXf5x3drtpvJlW1bI/yKNQ7XA8VtbbyovucLer8z7YAPCKeBzqN9gdv8ru8U/Gq56cWnVmJyzPiJnzFAGAKdNVemneCQEAAAAAAAAAAAAAAKdMPq734/qVPud77O+V7dy9dNaqt+ef2GQnhLDwCqShc87O8quRxmL93/ZF9xOFEGYHf6+KmedVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO9p8AAAD//0n5kWY=") r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000002940)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="fffaccf7a745ba74aea6082ffbf7e4016bb6734f8b44e8f4a9b3d8b4e58cab1edbacb1f618e73db803f4e2298581cc258bcd211fcfbe8f12ce37eacb72a17cca05fe2b4042e6721669e2cc6948cc1c99c260a28c391569df4a255bcb78871619dd0c822a8377a76587326d86bae27a0c41ef256595b37d15", @ANYRESDEC=r8, @ANYRES8=r4], 0x2c}], 0x1}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x3, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) socket$igmp(0x2, 0x3, 0x2) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 1.453885147s ago: executing program 3 (id=4685): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700050000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 884.843756ms ago: executing program 7 (id=4692): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 880.817296ms ago: executing program 3 (id=4693): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) listen(r2, 0xffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010104}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000200), 0x0, 0x0, 0x10000}}], 0x58}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x103a3, 0x138) 831.457747ms ago: executing program 9 (id=4694): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1000, 0x24, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000000000000000001010"}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 762.525568ms ago: executing program 9 (id=4695): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012"], 0x54}}, 0x0) pipe2(0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080004"], 0x2c}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f00000003c0)="28474ef926f856b0a1c9e338005ae177ce4f6c8a02486301bbaf077ecc100723", 0x20) 680.062479ms ago: executing program 8 (id=4696): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 662.69169ms ago: executing program 1 (id=4697): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 660.74631ms ago: executing program 7 (id=4698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000000)=0xd, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x5c0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x4f0, 0x2e0, 0x2e0, 0x4f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {0x0, 0xfc}, {}, {}, {}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x5}, {0x0, 0x0, 0xfe, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {0x2}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:inetd_child_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000002940)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="fffaccf7a745ba74aea6082ffbf7e4016bb6734f8b44e8f4a9b3d8b4e58cab1edbacb1f618e73db803f4e2298581cc258bcd211fcfbe8f12ce37eacb72a17cca05fe2b4042e6721669e2cc6948cc1c99c260a28c391569df4a255bcb78871619dd0c822a8377a76587326d86bae27a0c41ef256595b37d15", @ANYRESDEC=r8, @ANYRES8=r4], 0x2c}], 0x1}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x3, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) socket$igmp(0x2, 0x3, 0x2) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 612.3874ms ago: executing program 1 (id=4699): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1220002, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 552.151811ms ago: executing program 1 (id=4700): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000001}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) 474.312922ms ago: executing program 1 (id=4701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) pipe2$9p(&(0x7f0000000140), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000004000001000000000000ecffffff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfffffffffffffffc, 0x12) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x60180, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 468.313693ms ago: executing program 7 (id=4702): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24048084) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 415.712574ms ago: executing program 7 (id=4703): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x5c0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x4f0, 0x2e0, 0x2e0, 0x4f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {0x0, 0xfc}, {}, {}, {}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x5}, {0x0, 0x0, 0xfe, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {0x2}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:inetd_child_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) 405.089583ms ago: executing program 9 (id=4704): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700050000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 374.911714ms ago: executing program 7 (id=4705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1000, 0x24, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000000000000000001010"}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 352.416614ms ago: executing program 7 (id=4706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000015cbf7bdd5b5512a600fd030001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xd, 0x0, &(0x7f0000000540)="e02742e86c0d85ff9782762f08", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000580)="607ae53a0bb6ee4db9cb71984ebeda20fcb2c676b405120f354229d8da82ca205b438845f4ad97ae20f7f59e5c51327d4f64c56e7087daac49779288e080c32585b36ffd3959d55cfe480cf3a00037d35fbe8e7d72e0b6009dc0b85c30c88cd37ae5e82c7957a0fdb4dd7a9ac84c42e1bc17ac490c2054bb33f71bbce2130068f4d636cbf709376acb1e64450d348559ae2ccc471514d0c448c83a4d7d1d8f881f0c71dd96dffcccdbb7b1b0e483d86da1f32abe56f11d89d08656b03ecb986943804dc48fac3b271aa9a000c062923a9c53baa07831b3e74898deac7f743fc80791abe3a978392acf9bd5fc4c07f4c2bb8f89d5282340febd", &(0x7f0000000740)=""/221, &(0x7f00000001c0), &(0x7f00000003c0)="1a9e30644b78558d826ebd2ab05615968338e5f5f9bccca142a38503870014a23e5ca2d7d28a04430aea369cf1c0a6d901c8e6603492f8172c24fc3135b1ea4dcfb8c84a5f3849aff9422b76bc15f7f52f3542295373809d88970447d3f8ea7f88d789d16f1febcaf9591177201b26", 0x3, r1}, 0x38) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = mq_open(&(0x7f0000000080)='init_itable', 0x80, 0x54, &(0x7f0000000180)={0xfffffffffffff001, 0x0, 0x6, 0x101}) mq_timedsend(r3, &(0x7f0000000480), 0x0, 0x8, &(0x7f0000000300)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) unshare(0x42000000) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mknodat$loop(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x20, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2420, &(0x7f0000000000), 0x1, 0x4a6, &(0x7f0000000a40)="$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") 319.316045ms ago: executing program 8 (id=4707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000015cbf7bdd5b5512a600fd030001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000580)="607ae53a0bb6ee4db9cb71984ebeda20fcb2c676b405120f354229d8da82ca205b438845f4ad97ae20f7f59e5c51327d4f64c56e7087daac49779288e080c32585b36ffd3959d55cfe480cf3a00037d35fbe8e7d72e0b6009dc0b85c30c88cd37ae5e82c7957a0fdb4dd7a9ac84c42e1bc17ac490c2054bb33f71bbce2130068f4d636cbf709376acb1e64450d348559ae2ccc471514d0c448c83a4d7d1d8f881f0c71dd96dffcccdbb7b1b0e483d86da1f32abe56f11d89d08656b03ecb986943804dc48fac3b271aa9a000c062923a9c53baa07831b3e74898deac7f743fc80791abe3a978392acf9bd5fc4c07f4c2bb8f89d5282340febd", &(0x7f0000000740)=""/221, &(0x7f00000001c0), &(0x7f00000003c0)="1a9e30644b78558d826ebd2ab05615968338e5f5f9bccca142a38503870014a23e5ca2d7d28a04430aea369cf1c0a6d901c8e6603492f8172c24fc3135b1ea4dcfb8c84a5f3849aff9422b76bc15f7f52f3542295373809d88970447d3f8ea7f88d789d16f1febcaf9591177201b26", 0x3, r1}, 0x38) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = mq_open(&(0x7f0000000080)='init_itable', 0x80, 0x54, &(0x7f0000000180)={0xfffffffffffff001, 0x0, 0x6, 0x101}) mq_timedsend(r3, &(0x7f0000000480), 0x0, 0x8, &(0x7f0000000300)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) unshare(0x42000000) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mknodat$loop(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x20, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2420, &(0x7f0000000000), 0x1, 0x4a6, &(0x7f0000000a40)="$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") 0s ago: executing program 3 (id=4708): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) kernel console output (not intermixed with test programs): oop5): ext4_dirty_inode:6459: inode #18: comm syz.5.4347: mark_inode_dirty error [ 389.472697][T17534] EXT4-fs (loop4): 1 truncate cleaned up [ 389.490674][T17534] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.519627][T17541] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.4347: corrupted inode contents [ 389.532709][T17541] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.4347: mark_inode_dirty error [ 389.546020][T17541] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.4347: mark inode dirty (error -117) [ 389.566920][T17541] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 389.735178][T17567] syz.5.4353: attempt to access beyond end of device [ 389.735178][T17567] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 389.767490][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4355'. [ 389.781692][T17564] wireguard5: entered promiscuous mode [ 389.787239][T17564] wireguard5: entered allmulticast mode [ 389.853152][T17572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.890908][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4356'. [ 390.022415][T17585] lo speed is unknown, defaulting to 1000 [ 390.146084][T17594] loop3: detected capacity change from 0 to 512 [ 390.153066][T17594] EXT4-fs: Ignoring removed nobh option [ 390.952062][T17592] lo speed is unknown, defaulting to 1000 [ 391.299139][T17606] syz.0.4365: attempt to access beyond end of device [ 391.299139][T17606] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 391.424761][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4367'. [ 391.577601][T17615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 391.658037][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4369'. [ 391.948470][T17631] loop3: detected capacity change from 0 to 512 [ 391.965166][T17632] wireguard13: entered promiscuous mode [ 391.970839][T17632] wireguard13: entered allmulticast mode [ 391.982445][T17631] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.014813][T17631] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.4375: corrupted inode contents [ 392.028036][T17631] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.4375: mark_inode_dirty error [ 392.041950][T17631] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.4375: corrupted inode contents [ 392.054159][T17631] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.4375: mark_inode_dirty error [ 392.067653][T17631] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.4375: mark inode dirty (error -117) [ 392.084615][T17631] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 392.358060][T17645] loop4: detected capacity change from 0 to 512 [ 392.372994][T17645] ext4 filesystem being mounted at /syzcgroup/cpu/syz4/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 392.393354][T17643] loop3: detected capacity change from 0 to 1024 [ 392.404456][T17643] EXT4-fs: Ignoring removed bh option [ 392.411682][T17643] EXT4-fs: inline encryption not supported [ 392.427726][T17643] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 392.459995][T17643] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 392.471064][T17652] loop4: detected capacity change from 0 to 2048 [ 392.492469][T17643] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.4378: lblock 2 mapped to illegal pblock 2 (length 1) [ 392.493307][T17655] loop5: detected capacity change from 0 to 1024 [ 392.501377][T17655] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.509326][T17643] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.4378: lblock 0 mapped to illegal pblock 48 (length 1) [ 392.542024][T17643] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4378: Failed to acquire dquot type 0 [ 392.554798][T17643] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 392.566795][T17643] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4378: mark_inode_dirty error [ 392.581500][T17643] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 392.594096][T17643] EXT4-fs (loop3): 1 orphan inode deleted [ 392.615094][ T37] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.635685][T17659] atomic_op ffff8881037f9928 conn xmit_atomic 0000000000000000 [ 392.643532][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 392.686878][T17643] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.4378: Invalid inode table block 1 in block_group 0 [ 392.709211][T17643] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 392.724249][T17643] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.4378: mark_inode_dirty error [ 392.973788][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 392.982945][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 393.027220][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 393.037681][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 393.053861][T17682] loop3: detected capacity change from 0 to 512 [ 393.060609][T17682] EXT4-fs: Ignoring removed nobh option [ 393.135405][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 393.145217][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 393.803419][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 393.803461][ T29] audit: type=1326 audit(1748806737.925:17272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 393.834033][T17692] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4393'. [ 393.882913][ T29] audit: type=1326 audit(1748806737.965:17273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 393.906502][ T29] audit: type=1326 audit(1748806737.965:17274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 393.930312][ T29] audit: type=1326 audit(1748806737.965:17275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 393.954078][ T29] audit: type=1326 audit(1748806737.965:17276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 393.977685][ T29] audit: type=1326 audit(1748806737.965:17277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e29c407fc code=0x7ffc0000 [ 394.001229][ T29] audit: type=1326 audit(1748806737.965:17278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 394.024815][ T29] audit: type=1326 audit(1748806737.965:17279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 394.048549][ T29] audit: type=1326 audit(1748806737.965:17280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 394.072323][ T29] audit: type=1326 audit(1748806737.965:17281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17690 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 394.164300][T17695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4395'. [ 394.182272][T17699] syz.4.4396: attempt to access beyond end of device [ 394.182272][T17699] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 394.197573][T17697] sd 0:0:1:0: device reset [ 394.261934][T17706] loop5: detected capacity change from 0 to 512 [ 394.281410][T17706] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.296191][T17706] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.4399: corrupted inode contents [ 394.308329][T17706] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.4399: mark_inode_dirty error [ 394.325705][T17706] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.4399: corrupted inode contents [ 394.362339][T17706] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.4399: mark_inode_dirty error [ 394.380821][T17706] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.4399: mark inode dirty (error -117) [ 394.407047][T17706] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 394.434401][T17715] loop4: detected capacity change from 0 to 1024 [ 394.481814][T17715] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.543392][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'. [ 394.565665][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'. [ 394.610688][T17724] atomic_op ffff888102f49d28 conn xmit_atomic 0000000000000000 [ 394.775341][T17741] syz.0.4408: attempt to access beyond end of device [ 394.775341][T17741] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 394.807851][T17743] sd 0:0:1:0: device reset [ 395.089194][T17750] lo speed is unknown, defaulting to 1000 [ 395.415301][T17749] loop0: detected capacity change from 0 to 512 [ 395.807066][T17772] bond0: entered promiscuous mode [ 395.812193][T17772] bond_slave_0: entered promiscuous mode [ 395.818006][T17772] bond_slave_1: entered promiscuous mode [ 395.959107][T17772] batadv0: entered promiscuous mode [ 396.017874][T17772] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 396.096700][T17772] Cannot create hsr debugfs directory [ 396.153115][T17772] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 396.184948][T17776] syz.0.4420: attempt to access beyond end of device [ 396.184948][T17776] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 396.213527][T17772] bond0: left promiscuous mode [ 396.218367][T17772] bond_slave_0: left promiscuous mode [ 396.223837][T17772] bond_slave_1: left promiscuous mode [ 396.330446][T17772] batadv0: left promiscuous mode [ 396.372891][T17778] sd 0:0:1:0: device reset [ 396.407004][T17771] lo speed is unknown, defaulting to 1000 [ 396.537808][T17782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 396.633431][T17790] loop0: detected capacity change from 0 to 1024 [ 396.733567][T17794] loop3: detected capacity change from 0 to 512 [ 396.741025][T17794] EXT4-fs: Ignoring removed orlov option [ 396.749766][T17794] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 396.758652][T17794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 396.785852][T17800] loop4: detected capacity change from 0 to 512 [ 396.799996][T17790] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.811890][T17794] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.4426: corrupted in-inode xattr: e_value size too large [ 396.837733][T17800] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 396.859576][T17794] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4426: couldn't read orphan inode 15 (err -117) [ 396.876696][T17800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.4427: corrupted inode contents [ 396.922576][T17800] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.4427: mark_inode_dirty error [ 396.961599][T17804] atomic_op ffff888103468d28 conn xmit_atomic 0000000000000000 [ 396.972280][T17800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.4427: corrupted inode contents [ 397.006247][T17800] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.4427: mark_inode_dirty error [ 397.042788][T17800] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.4427: mark inode dirty (error -117) [ 397.088082][T17800] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 397.337859][T17763] loop5: detected capacity change from 0 to 512 [ 397.446734][T17825] loop3: detected capacity change from 0 to 4096 [ 397.454439][T17825] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 397.617255][T17828] lo speed is unknown, defaulting to 1000 [ 397.650773][T17829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.747396][T17829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.355153][T17831] loop5: detected capacity change from 0 to 1024 [ 398.393994][T17831] EXT4-fs: Ignoring removed bh option [ 398.401716][T17831] EXT4-fs: inline encryption not supported [ 398.628618][T17833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 398.672967][T17831] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 398.701902][T17840] loop4: detected capacity change from 0 to 512 [ 398.721749][T17833] __nla_validate_parse: 23 callbacks suppressed [ 398.721766][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4435'. [ 398.748454][T17840] EXT4-fs: Ignoring removed orlov option [ 398.760731][T17831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 398.774716][T17840] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 398.803260][T17840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 398.827067][T17831] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.4436: lblock 2 mapped to illegal pblock 2 (length 1) [ 398.851450][T17840] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.4438: corrupted in-inode xattr: e_value size too large [ 398.883010][T17845] loop0: detected capacity change from 0 to 512 [ 398.896655][T17840] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.4438: couldn't read orphan inode 15 (err -117) [ 398.909869][T17831] __quota_error: 209 callbacks suppressed [ 398.909956][T17831] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 398.941680][T17845] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.954132][T17840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4438'. [ 398.969662][T17831] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.4436: lblock 0 mapped to illegal pblock 48 (length 1) [ 398.987824][T17840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4438'. [ 399.001103][T17845] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.4439: corrupted inode contents [ 399.013226][T17831] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 399.023996][T17831] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4436: Failed to acquire dquot type 0 [ 399.038436][T17845] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.4439: mark_inode_dirty error [ 399.059669][T17845] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.4439: corrupted inode contents [ 399.079377][T17831] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 399.091650][T17845] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.4439: mark_inode_dirty error [ 399.104533][T17845] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.4439: mark inode dirty (error -117) [ 399.117248][T17831] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4436: mark_inode_dirty error [ 399.131616][T17845] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 399.140735][T17831] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 399.153428][T17831] EXT4-fs (loop5): 1 orphan inode deleted [ 399.236123][ T112] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 399.252469][ T112] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 399.260973][ T112] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 399.264767][T17851] loop4: detected capacity change from 0 to 1024 [ 399.286654][T16659] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 399.303741][T16659] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 399.316373][T17853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4441'. [ 399.321697][T16659] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 399.326980][T17851] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.372314][T17858] sd 0:0:1:0: device reset [ 399.392865][ T29] audit: type=1326 audit(1748806743.515:17491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 399.394086][T17862] syz.0.4444: attempt to access beyond end of device [ 399.394086][T17862] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 399.436935][T17861] loop3: detected capacity change from 0 to 512 [ 399.453890][T17861] EXT4-fs: Ignoring removed nobh option [ 399.462938][ T29] audit: type=1326 audit(1748806743.515:17492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 399.486631][ T29] audit: type=1326 audit(1748806743.515:17493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 399.510572][ T29] audit: type=1326 audit(1748806743.515:17494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 399.534318][ T29] audit: type=1326 audit(1748806743.515:17495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 399.558058][ T29] audit: type=1326 audit(1748806743.515:17496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 399.581822][ T29] audit: type=1326 audit(1748806743.515:17497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29c3e969 code=0x7ffc0000 [ 399.632083][T17869] bond0: entered promiscuous mode [ 399.637200][T17869] bond_slave_0: entered promiscuous mode [ 399.637264][T17873] loop0: detected capacity change from 0 to 512 [ 399.643022][T17869] bond_slave_1: entered promiscuous mode [ 399.657665][T17869] batadv0: entered promiscuous mode [ 399.658230][T17861] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.4445: corrupted inode contents [ 399.663161][T17869] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 399.682779][T17869] Cannot create hsr debugfs directory [ 399.688522][T17869] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 399.697941][T17861] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.4445: mark_inode_dirty error [ 399.698323][T17869] bond0: left promiscuous mode [ 399.714052][T17869] bond_slave_0: left promiscuous mode [ 399.719678][T17869] bond_slave_1: left promiscuous mode [ 399.726151][T17869] batadv0: left promiscuous mode [ 399.731686][T17861] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.4445: corrupted inode contents [ 399.749296][T17861] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.4445: mark_inode_dirty error [ 399.765217][T17873] ext4 filesystem being mounted at /syzcgroup/cpu/syz0/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 399.779295][T17861] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4445: Failed to acquire dquot type 0 [ 399.834793][T17861] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4445: corrupted inode contents [ 399.867003][T17861] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.4445: mark_inode_dirty error [ 399.885396][T17861] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4445: corrupted inode contents [ 399.923312][T17861] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.4445: mark_inode_dirty error [ 399.934777][T17883] loop0: detected capacity change from 0 to 2048 [ 399.935069][T17861] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4445: corrupted inode contents [ 399.954909][T17861] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 399.968641][T17861] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4445: corrupted inode contents [ 400.019567][T17861] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.4445: mark_inode_dirty error [ 400.035256][T17887] loop5: detected capacity change from 0 to 1024 [ 400.042153][T17861] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 400.054434][T17887] EXT4-fs: Ignoring removed bh option [ 400.061435][T17861] EXT4-fs (loop3): 1 truncate cleaned up [ 400.066482][T17887] EXT4-fs: inline encryption not supported [ 400.067732][T17861] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.087633][T17887] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 400.132590][T17861] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4445'. [ 400.159440][T17887] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 400.171585][T13516] EXT4-fs unmount: 43 callbacks suppressed [ 400.171604][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.195165][T17887] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.4453: lblock 2 mapped to illegal pblock 2 (length 1) [ 400.212913][T17887] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.4453: lblock 0 mapped to illegal pblock 48 (length 1) [ 400.215063][T17894] sd 0:0:1:0: device reset [ 400.231058][T17887] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4453: Failed to acquire dquot type 0 [ 400.248852][T17887] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 400.262772][T17887] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4453: mark_inode_dirty error [ 400.279154][T17887] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 400.282820][T17896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4455'. [ 400.291691][T17887] EXT4-fs (loop5): 1 orphan inode deleted [ 400.316843][T17887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.333717][ T51] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 400.376670][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 400.392651][T13244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.430584][T17902] syz.3.4458: attempt to access beyond end of device [ 400.430584][T17902] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 400.440916][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.464209][T16659] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 400.505893][T16659] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 400.526588][T16659] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 400.531291][T17908] lo speed is unknown, defaulting to 1000 [ 400.567847][T17914] loop3: detected capacity change from 0 to 1024 [ 400.571929][T17915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.589840][T17915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.613698][T17914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.649449][T17914] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.677283][T17910] lo speed is unknown, defaulting to 1000 [ 400.804989][T17917] bond0: entered promiscuous mode [ 400.810109][T17917] bond_slave_0: entered promiscuous mode [ 400.815939][T17917] bond_slave_1: entered promiscuous mode [ 400.837115][T17917] batadv0: entered promiscuous mode [ 400.842661][T17917] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 400.851501][T17917] Cannot create hsr debugfs directory [ 400.857391][T17917] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 400.866840][T17917] bond0: left promiscuous mode [ 400.871773][T17917] bond_slave_0: left promiscuous mode [ 400.877308][T17917] bond_slave_1: left promiscuous mode [ 400.885022][T17917] batadv0: left promiscuous mode [ 401.028328][T17926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.065973][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4466'. [ 401.075056][T17900] loop4: detected capacity change from 0 to 512 [ 401.335433][T17936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.364391][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4468'. [ 401.405310][T17941] lo speed is unknown, defaulting to 1000 [ 401.502868][T13244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.534881][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.543602][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.554381][T17946] loop3: detected capacity change from 0 to 512 [ 401.570925][T17946] EXT4-fs: Ignoring removed nobh option [ 401.607632][T17946] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.4471: corrupted inode contents [ 401.621899][T17946] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.4471: mark_inode_dirty error [ 401.640028][T17946] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.4471: corrupted inode contents [ 401.658651][T17946] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.4471: mark_inode_dirty error [ 401.677734][T17946] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4471: Failed to acquire dquot type 0 [ 401.691157][T17951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4472'. [ 401.710280][T17946] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4471: corrupted inode contents [ 401.733967][T17946] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.4471: mark_inode_dirty error [ 401.753765][T17953] loop0: detected capacity change from 0 to 512 [ 401.762688][T17946] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4471: corrupted inode contents [ 401.776651][T17953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.790747][T17953] ext4 filesystem being mounted at /syzcgroup/cpu/syz0/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 401.803667][T17946] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.4471: mark_inode_dirty error [ 401.812362][T17953] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.816732][T17946] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4471: corrupted inode contents [ 401.836099][T17946] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 401.845615][T17946] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4471: corrupted inode contents [ 401.857707][T17946] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.4471: mark_inode_dirty error [ 401.869143][T17946] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 401.878829][T17946] EXT4-fs (loop3): 1 truncate cleaned up [ 401.884948][T17946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.897523][T17946] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.917512][T17946] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4471'. [ 401.928813][T17956] loop0: detected capacity change from 0 to 2048 [ 402.023446][T13244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.193505][T17965] loop5: detected capacity change from 0 to 512 [ 402.200368][T17965] EXT4-fs: Ignoring removed nobh option [ 402.310511][T17965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.496523][T17976] bond0: entered promiscuous mode [ 402.501794][T17976] bond_slave_0: entered promiscuous mode [ 402.507584][T17976] bond_slave_1: entered promiscuous mode [ 402.648767][T17976] batadv0: entered promiscuous mode [ 402.704422][T17976] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 402.764030][T17976] Cannot create hsr debugfs directory [ 402.777228][T17981] loop0: detected capacity change from 0 to 1024 [ 402.816570][T17976] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 402.882226][T17976] bond0: left promiscuous mode [ 402.887102][T17976] bond_slave_0: left promiscuous mode [ 402.892676][T17976] bond_slave_1: left promiscuous mode [ 402.904067][T17981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.934049][T17976] batadv0: left promiscuous mode [ 402.941409][T17981] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.022759][T17986] atomic_op ffff8881195f1d28 conn xmit_atomic 0000000000000000 [ 403.500624][T17994] loop3: detected capacity change from 0 to 512 [ 403.520361][T17994] EXT4-fs: Ignoring removed orlov option [ 403.535701][T17994] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 403.559218][T17994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 403.588436][T13052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.600744][T17994] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.4485: corrupted in-inode xattr: e_value size too large [ 403.643226][T17994] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4485: couldn't read orphan inode 15 (err -117) [ 403.679703][T17994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.738101][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.748635][T13244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.777290][T18009] syz.3.4490: attempt to access beyond end of device [ 403.777290][T18009] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 403.887187][T18019] bond0: entered promiscuous mode [ 403.892487][T18019] bond_slave_0: entered promiscuous mode [ 403.898417][T18019] bond_slave_1: entered promiscuous mode [ 403.905786][T18013] netlink: 'syz.3.4493': attribute type 21 has an invalid length. [ 403.907807][T18019] batadv0: entered promiscuous mode [ 403.925528][T18019] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 403.933267][T18019] Cannot create hsr debugfs directory [ 403.939392][T18019] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 403.949484][T18019] bond0: left promiscuous mode [ 403.954385][T18019] bond_slave_0: left promiscuous mode [ 403.959951][T18019] bond_slave_1: left promiscuous mode [ 403.980200][T18019] batadv0: left promiscuous mode [ 403.983684][T18028] __nla_validate_parse: 3 callbacks suppressed [ 403.983704][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 404.002707][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 404.022877][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 404.032557][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 404.060253][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 404.070646][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 404.146039][T18042] loop5: detected capacity change from 0 to 512 [ 404.156975][T18041] loop4: detected capacity change from 0 to 1024 [ 404.160969][T18042] EXT4-fs: Ignoring removed nobh option [ 404.181202][T18041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.195560][T18042] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.4500: corrupted inode contents [ 404.227767][T18041] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.242826][T18042] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.4500: mark_inode_dirty error [ 404.263827][T18042] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.4500: corrupted inode contents [ 404.282425][T18042] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.4500: mark_inode_dirty error [ 404.294198][T18056] atomic_op ffff8881195f0928 conn xmit_atomic 0000000000000000 [ 404.307570][T18042] __quota_error: 255 callbacks suppressed [ 404.307589][T18042] Quota error (device loop5): write_blk: dquota write failed [ 404.334050][T18042] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 404.345812][T18042] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4500: Failed to acquire dquot type 0 [ 404.365697][ T29] audit: type=1326 audit(1748806748.485:17746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 404.366872][T18062] syz.3.4503: attempt to access beyond end of device [ 404.366872][T18062] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 404.402978][ T29] audit: type=1326 audit(1748806748.485:17747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 404.409921][T18042] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4500: corrupted inode contents [ 404.426626][ T29] audit: type=1326 audit(1748806748.485:17748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 404.452536][T18042] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.4500: mark_inode_dirty error [ 404.461991][ T29] audit: type=1326 audit(1748806748.485:17749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 404.483737][T18042] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4500: corrupted inode contents [ 404.496846][ T29] audit: type=1326 audit(1748806748.485:17750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 404.523210][T18042] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.4500: mark_inode_dirty error [ 404.532212][ T29] audit: type=1326 audit(1748806748.485:17751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 404.567341][ T29] audit: type=1326 audit(1748806748.485:17752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 404.568844][T18042] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4500: corrupted inode contents [ 404.591090][ T29] audit: type=1326 audit(1748806748.485:17753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 404.609380][T18066] sd 0:0:1:0: device reset [ 404.647105][T18042] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 404.657204][T18042] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4500: corrupted inode contents [ 404.709417][T18042] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.4500: mark_inode_dirty error [ 404.724639][T18042] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 404.734075][T18042] EXT4-fs (loop5): 1 truncate cleaned up [ 404.743056][T18042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.755701][T18042] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.764750][T18069] lo speed is unknown, defaulting to 1000 [ 404.782571][T18071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.808637][T18071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.817377][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.877257][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4509'. [ 404.886437][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4509'. [ 404.906420][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4509'. [ 404.925025][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4509'. [ 404.984945][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.130210][T18085] loop5: detected capacity change from 0 to 1024 [ 405.144309][T18085] EXT4-fs: Ignoring removed bh option [ 405.152688][T18085] EXT4-fs: inline encryption not supported [ 405.166300][T18085] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.179636][T18085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 405.188702][T18085] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.4512: lblock 2 mapped to illegal pblock 2 (length 1) [ 405.204851][T18085] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.4512: lblock 0 mapped to illegal pblock 48 (length 1) [ 405.221574][T18085] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4512: Failed to acquire dquot type 0 [ 405.234351][T18085] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 405.243957][T18085] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4512: mark_inode_dirty error [ 405.255536][T18085] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 405.265825][T18085] EXT4-fs (loop5): 1 orphan inode deleted [ 405.272009][T18085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.284564][ T112] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 405.298892][ T112] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 405.299241][T18092] netlink: 'syz.1.4513': attribute type 21 has an invalid length. [ 405.312851][T18085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.327711][T18085] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.4512: Invalid inode table block 1 in block_group 0 [ 405.340641][T18085] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 405.351094][T18085] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.4512: mark_inode_dirty error [ 405.416603][T18095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.615009][T18109] bond0: entered promiscuous mode [ 405.620146][T18109] bond_slave_0: entered promiscuous mode [ 405.625882][T18109] bond_slave_1: entered promiscuous mode [ 405.632848][T18109] batadv0: entered promiscuous mode [ 405.638446][T18109] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 405.646033][T18109] Cannot create hsr debugfs directory [ 405.651657][T18109] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.660498][T18109] bond0: left promiscuous mode [ 405.665354][T18109] bond_slave_0: left promiscuous mode [ 405.670925][T18109] bond_slave_1: left promiscuous mode [ 405.677216][T18109] batadv0: left promiscuous mode [ 405.727520][T18119] loop3: detected capacity change from 0 to 512 [ 405.734386][T18119] EXT4-fs: Ignoring removed nobh option [ 405.753432][T18119] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.4516: corrupted inode contents [ 405.819121][T18119] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.4516: mark_inode_dirty error [ 405.869766][T18119] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.4516: corrupted inode contents [ 405.935002][T18119] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.4516: mark_inode_dirty error [ 405.962757][T18136] loop0: detected capacity change from 0 to 1024 [ 405.969677][T18119] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4516: Failed to acquire dquot type 0 [ 405.974612][T18137] loop4: detected capacity change from 0 to 1024 [ 405.983322][T18136] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 406.025901][T18119] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4516: corrupted inode contents [ 406.038805][T18119] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.4516: mark_inode_dirty error [ 406.040373][T18136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.051603][T18119] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4516: corrupted inode contents [ 406.081878][T18137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.087687][T18119] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.4516: mark_inode_dirty error [ 406.121113][T18137] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.121125][T18119] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4516: corrupted inode contents [ 406.143510][T18119] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 406.152173][T18136] loop0: detected capacity change from 1024 to 64 [ 406.172965][T18119] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.4516: corrupted inode contents [ 406.186498][T18119] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.4516: mark_inode_dirty error [ 406.197946][T18119] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 406.208357][T18119] EXT4-fs (loop3): 1 truncate cleaned up [ 406.214717][T18119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.227737][T18149] atomic_op ffff888118ccbd28 conn xmit_atomic 0000000000000000 [ 406.229496][T18148] syz.0.4522: attempt to access beyond end of device [ 406.229496][T18148] loop0: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 406.246293][T18119] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.248592][T18148] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 128) [ 406.248622][T18148] Buffer I/O error on device loop0, logical block 128 [ 406.335380][T13244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.418484][T18152] loop3: detected capacity change from 0 to 1024 [ 406.426333][T18152] EXT4-fs: Ignoring removed bh option [ 406.434126][T18152] EXT4-fs: inline encryption not supported [ 406.448237][T18152] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 406.463652][T18152] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 406.477150][T18152] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.4525: lblock 2 mapped to illegal pblock 2 (length 1) [ 406.493501][T18152] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.4525: lblock 0 mapped to illegal pblock 48 (length 1) [ 406.510404][T18152] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4525: Failed to acquire dquot type 0 [ 406.522391][T18152] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 406.532480][T18152] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4525: mark_inode_dirty error [ 406.545521][T18152] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 406.556908][T18152] EXT4-fs (loop3): 1 orphan inode deleted [ 406.564657][T18152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.577489][ T112] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 406.593279][ T112] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 406.627608][T18152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.638431][T18152] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.4525: Invalid inode table block 1 in block_group 0 [ 406.661320][T18152] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 406.673760][T18152] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.4525: mark_inode_dirty error [ 406.813499][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.827274][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.829154][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.851574][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.865299][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.897175][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.912206][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.926368][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.930215][T18161] lo speed is unknown, defaulting to 1000 [ 406.943217][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.962350][T13052] EXT4-fs warning (device loop0): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.972143][T18162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.000797][T18162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.273674][T13052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.285081][T18142] kmmpd-loop0: attempt to access beyond end of device [ 407.285081][T18142] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 407.298706][T18142] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 407.331597][ T1578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.432304][ T1578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.453731][T18169] lo speed is unknown, defaulting to 1000 [ 407.484288][ T1578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.522904][ T1578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.549944][T18173] lo speed is unknown, defaulting to 1000 [ 407.635256][ T1578] bridge_slave_1: left allmulticast mode [ 407.640984][ T1578] bridge_slave_1: left promiscuous mode [ 407.646749][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.668123][ T1578] bridge_slave_0: left allmulticast mode [ 407.673851][ T1578] bridge_slave_0: left promiscuous mode [ 407.679594][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.801854][T18170] loop4: detected capacity change from 0 to 512 [ 407.911121][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.936501][T18198] loop3: detected capacity change from 0 to 1024 [ 407.949826][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.982259][ T1578] bond0 (unregistering): Released all slaves [ 407.998269][T18198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.999772][ T1578] bond1 (unregistering): Released all slaves [ 408.021738][ T1578] bond2 (unregistering): Released all slaves [ 408.030924][ T1578] bond3 (unregistering): Released all slaves [ 408.037151][T18198] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.040306][ T1578] bond4 (unregistering): Released all slaves [ 408.057329][ T1578] bond5 (unregistering): Released all slaves [ 408.068814][T18198] atomic_op ffff88811cdcc128 conn xmit_atomic 0000000000000000 [ 408.070862][T18173] chnl_net:caif_netlink_parms(): no params data found [ 408.115196][T13244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.140336][ T1578] hsr_slave_0: left promiscuous mode [ 408.146870][ T1578] hsr_slave_1: left promiscuous mode [ 408.161123][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.168630][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.179019][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.186481][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.208127][ T1578] veth0_macvtap: left promiscuous mode [ 408.215985][ T1578] veth1_vlan: left promiscuous mode [ 408.221313][ T1578] veth0_vlan: left promiscuous mode [ 408.324911][T18212] loop4: detected capacity change from 0 to 512 [ 408.331793][T18212] EXT4-fs: Ignoring removed orlov option [ 408.337833][T18212] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 408.346539][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 408.348434][T18212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 408.362671][ T1578] team0 (unregistering): Port device team_slave_0 removed [ 408.369383][T18212] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.4543: corrupted in-inode xattr: e_value size too large [ 408.384493][T18212] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.4543: couldn't read orphan inode 15 (err -117) [ 408.399398][T18212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.443220][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.471557][T18173] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.478733][T18173] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.491401][T18173] bridge_slave_0: entered allmulticast mode [ 408.498125][T18173] bridge_slave_0: entered promiscuous mode [ 408.515401][T18219] lo speed is unknown, defaulting to 1000 [ 408.528679][T18173] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.535804][T18173] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.546324][T18173] bridge_slave_1: entered allmulticast mode [ 408.553668][T18173] bridge_slave_1: entered promiscuous mode [ 408.586483][T18220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.595155][T18220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.608121][T18222] loop4: detected capacity change from 0 to 512 [ 408.617331][T18173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.648643][T18173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.684302][T18222] EXT4-fs: Ignoring removed orlov option [ 408.684960][T18173] team0: Port device team_slave_0 added [ 408.711039][T18222] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 408.854736][T18222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 408.858531][T18173] team0: Port device team_slave_1 added [ 408.868606][T18222] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.4545: corrupted in-inode xattr: e_value size too large [ 408.887824][T18222] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.4545: couldn't read orphan inode 15 (err -117) [ 408.905948][T18173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.907796][T18222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.912918][T18173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.950915][T18173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.973381][T18173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.980425][T18173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.006564][T18173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.017910][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.145370][T18173] hsr_slave_0: entered promiscuous mode [ 409.151549][T18173] hsr_slave_1: entered promiscuous mode [ 409.160102][T18236] loop4: detected capacity change from 0 to 1024 [ 409.185593][T18236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.206903][T18236] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.220640][T18236] atomic_op ffff888105512128 conn xmit_atomic 0000000000000000 [ 409.246056][T18173] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.255347][T18173] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.262930][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.264906][T18173] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.283089][T18173] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 409.293832][T18241] __nla_validate_parse: 20 callbacks suppressed [ 409.293847][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 409.311744][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 409.321612][T18173] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.328667][T18173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.336002][T18173] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.343173][T18173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.359222][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 409.368612][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 409.406080][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 409.406098][ T29] audit: type=1326 audit(1748806753.525:17891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.411812][T18173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.431443][ T29] audit: type=1326 audit(1748806753.555:17892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.468300][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 409.477542][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 409.488586][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.511040][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.547215][T18173] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.547838][ T29] audit: type=1326 audit(1748806753.605:17893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.577562][ T29] audit: type=1326 audit(1748806753.605:17894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.585821][T18173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.601301][ T29] audit: type=1326 audit(1748806753.605:17895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.611655][T18173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.635265][ T29] audit: type=1326 audit(1748806753.605:17896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.662491][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.669274][ T29] audit: type=1326 audit(1748806753.605:17897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8988f207fc code=0x7ffc0000 [ 409.676339][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.699752][ T29] audit: type=1326 audit(1748806753.605:17898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.710144][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.730537][ T29] audit: type=1326 audit(1748806753.605:17899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.737567][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.768603][ T29] audit: type=1326 audit(1748806753.615:17900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8988f1e969 code=0x7ffc0000 [ 409.816434][T18254] sd 0:0:1:0: device reset [ 409.873165][T18173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.935654][T18263] lo speed is unknown, defaulting to 1000 [ 409.982024][T18274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.019863][T18274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.101964][T18269] loop5: detected capacity change from 0 to 1024 [ 410.121305][T18269] EXT4-fs: Ignoring removed bh option [ 410.136142][T18173] veth0_vlan: entered promiscuous mode [ 410.141902][T18269] EXT4-fs: inline encryption not supported [ 410.153185][T18173] veth1_vlan: entered promiscuous mode [ 410.161198][T18285] atomic_op ffff8881254ba128 conn xmit_atomic 0000000000000000 [ 410.171318][T18269] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 410.184621][T18173] veth0_macvtap: entered promiscuous mode [ 410.202121][T18173] veth1_macvtap: entered promiscuous mode [ 410.216245][T18269] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 410.303069][T18269] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.4560: lblock 2 mapped to illegal pblock 2 (length 1) [ 410.367359][T18293] lo speed is unknown, defaulting to 1000 [ 410.380266][T18173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.402470][T18269] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.4560: lblock 0 mapped to illegal pblock 48 (length 1) [ 410.418296][T18269] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4560: Failed to acquire dquot type 0 [ 410.421507][T18290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.438441][T18290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.453458][T18269] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 410.455108][T18173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.498016][T18173] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.506878][T18173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.512625][T18269] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4560: mark_inode_dirty error [ 410.515643][T18173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.515753][T18173] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.562971][T18269] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 410.589808][T18269] EXT4-fs (loop5): 1 orphan inode deleted [ 410.605651][T18269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.626678][ T1578] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 410.652326][ T1578] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 410.678381][T18269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.700677][T18269] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.4560: Invalid inode table block 1 in block_group 0 [ 410.718070][T18269] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 410.768637][T18269] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.4560: mark_inode_dirty error [ 410.837552][T18301] lo speed is unknown, defaulting to 1000 [ 411.119474][T18310] wireguard11: entered promiscuous mode [ 411.125127][T18310] wireguard11: entered allmulticast mode [ 411.205956][T18313] loop5: detected capacity change from 0 to 512 [ 411.218154][T18313] EXT4-fs: Ignoring removed nobh option [ 411.232343][T18316] syz.4.4573: attempt to access beyond end of device [ 411.232343][T18316] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 411.248461][T18313] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.4572: corrupted inode contents [ 411.273110][T18313] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.4572: mark_inode_dirty error [ 411.284565][T18296] loop6: detected capacity change from 0 to 512 [ 411.287383][T18313] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.4572: corrupted inode contents [ 411.302883][T18313] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.4572: mark_inode_dirty error [ 411.303279][T18313] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4572: Failed to acquire dquot type 0 [ 411.303888][T18313] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4572: corrupted inode contents [ 411.304010][T18313] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.4572: mark_inode_dirty error [ 411.359619][T18313] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4572: corrupted inode contents [ 411.392759][T18313] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.4572: mark_inode_dirty error [ 411.418295][T18313] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4572: corrupted inode contents [ 411.447771][T18313] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 411.495932][T18313] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4572: corrupted inode contents [ 411.513078][T18313] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.4572: mark_inode_dirty error [ 411.527320][T18313] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 411.547878][T18313] EXT4-fs (loop5): 1 truncate cleaned up [ 411.555012][T18313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.581764][T18313] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.623664][T18313] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4572'. [ 411.743309][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.834156][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4581'. [ 411.898957][T18344] syz.1.4583: attempt to access beyond end of device [ 411.898957][T18344] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 412.043481][T18349] lo speed is unknown, defaulting to 1000 [ 412.086646][T18349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.095570][T18349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.178801][T18351] loop4: detected capacity change from 0 to 1024 [ 412.189375][T18351] EXT4-fs: Ignoring removed bh option [ 412.195013][T18351] EXT4-fs: inline encryption not supported [ 412.203001][T18351] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 412.233146][T18351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 412.253763][T18351] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.4586: lblock 2 mapped to illegal pblock 2 (length 1) [ 412.300864][T18351] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.4586: lblock 0 mapped to illegal pblock 48 (length 1) [ 412.325308][T18351] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4586: Failed to acquire dquot type 0 [ 412.336779][T18351] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 412.346530][T18351] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4586: mark_inode_dirty error [ 412.358149][T18351] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 412.368660][T18351] EXT4-fs (loop4): 1 orphan inode deleted [ 412.375188][T18351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.388883][ T3862] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 412.405914][ T3862] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 412.420554][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.430078][T13516] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 412.443448][T13516] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 412.453133][T13516] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 412.476443][T18354] sd 0:0:1:0: device reset [ 412.609215][T18360] loop4: detected capacity change from 0 to 1024 [ 412.615983][T18362] loop6: detected capacity change from 0 to 1024 [ 412.624007][T18360] EXT4-fs: Ignoring removed bh option [ 412.626707][T18360] EXT4-fs: inline encryption not supported [ 412.641867][T18360] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 412.688947][T18362] EXT4-fs: Ignoring removed bh option [ 412.699261][T18362] EXT4-fs: inline encryption not supported [ 412.713096][T18360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 412.723418][T18362] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 412.744134][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4594'. [ 412.776843][T18360] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.4590: lblock 2 mapped to illegal pblock 2 (length 1) [ 412.788585][T18362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 412.802609][T18360] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.4590: lblock 0 mapped to illegal pblock 48 (length 1) [ 412.815428][T18362] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.4591: lblock 2 mapped to illegal pblock 2 (length 1) [ 412.818602][T18360] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4590: Failed to acquire dquot type 0 [ 412.834204][T18362] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.4591: lblock 0 mapped to illegal pblock 48 (length 1) [ 412.859249][T18362] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4591: Failed to acquire dquot type 0 [ 412.872264][T18371] wireguard9: entered promiscuous mode [ 412.877769][T18371] wireguard9: entered allmulticast mode [ 412.884475][T18362] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 412.897097][T18360] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 412.898101][T18362] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.4591: mark_inode_dirty error [ 412.921784][T18360] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4590: mark_inode_dirty error [ 412.934620][T18362] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 412.941380][T18360] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 412.945793][T18362] EXT4-fs (loop6): 1 orphan inode deleted [ 412.962366][ T1578] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 412.962498][ T1578] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 412.985201][T18360] EXT4-fs (loop4): 1 orphan inode deleted [ 412.997993][T18362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.011940][ T3862] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 413.029782][ T3862] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 413.052758][T18360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.126972][T18360] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.151356][T18360] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.4590: Invalid inode table block 1 in block_group 0 [ 413.178375][T18360] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 413.191734][T18360] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.4590: mark_inode_dirty error [ 413.191909][T18173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.192268][T18173] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 413.232923][T18381] 8021q: adding VLAN 0 to HW filter on device bond8 [ 413.239742][T18173] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 413.259912][T18173] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 413.280966][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4597'. [ 413.326761][T18390] loop6: detected capacity change from 0 to 1024 [ 413.334558][T18390] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 413.355603][T18390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.410209][T18390] loop6: detected capacity change from 1024 to 64 [ 413.420425][T18390] syz.6.4600: attempt to access beyond end of device [ 413.420425][T18390] loop6: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 413.433932][T18390] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 128) [ 413.445198][T18390] Buffer I/O error on device loop6, logical block 128 [ 413.464840][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.478454][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.492019][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.505702][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.530302][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.545329][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.559003][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.573595][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.587141][T18173] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 413.733524][T18399] bond0: entered promiscuous mode [ 413.738602][T18399] bond_slave_0: entered promiscuous mode [ 413.744459][T18399] bond_slave_1: entered promiscuous mode [ 413.752117][T18399] batadv0: entered promiscuous mode [ 413.757898][T18399] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 413.765557][T18399] Cannot create hsr debugfs directory [ 413.772074][T18399] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 413.783747][T18399] bond0: left promiscuous mode [ 413.788649][T18399] bond_slave_0: left promiscuous mode [ 413.794294][T18399] bond_slave_1: left promiscuous mode [ 413.801635][T18399] batadv0: left promiscuous mode [ 413.827652][T18402] lo speed is unknown, defaulting to 1000 [ 413.869532][T18403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.883893][T18403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.902004][T18173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.920071][T18391] kmmpd-loop6: attempt to access beyond end of device [ 413.920071][T18391] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 413.933688][T18391] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 413.966123][T18407] loop3: detected capacity change from 0 to 128 [ 413.974856][T18407] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 413.987460][T18407] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 414.184970][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.264468][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.316186][T18410] lo speed is unknown, defaulting to 1000 [ 414.324574][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.404351][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.415097][T18432] loop4: detected capacity change from 0 to 1024 [ 414.444155][T18432] EXT4-fs: Ignoring removed bh option [ 414.458342][T18432] EXT4-fs: inline encryption not supported [ 414.460721][T18410] chnl_net:caif_netlink_parms(): no params data found [ 414.470206][T18432] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 414.487815][T18432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 414.513502][T18432] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.4614: lblock 2 mapped to illegal pblock 2 (length 1) [ 414.574830][T18432] __quota_error: 391 callbacks suppressed [ 414.574849][T18432] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 414.589933][T18410] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.597116][T18410] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.604435][T18410] bridge_slave_0: entered allmulticast mode [ 414.611039][T18410] bridge_slave_0: entered promiscuous mode [ 414.620208][T18432] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.4614: lblock 0 mapped to illegal pblock 48 (length 1) [ 414.671376][T18432] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 414.672380][ T37] bridge_slave_1: left allmulticast mode [ 414.680234][T18432] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4614: Failed to acquire dquot type 0 [ 414.697359][ T37] bridge_slave_1: left promiscuous mode [ 414.697510][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.711080][T18432] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 414.720923][ T37] bridge_slave_0: left allmulticast mode [ 414.726663][ T37] bridge_slave_0: left promiscuous mode [ 414.732669][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.771565][T18432] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4614: mark_inode_dirty error [ 414.790472][ T29] audit: type=1326 audit(1748806758.915:18278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424355e969 code=0x7ffc0000 [ 414.791854][T18440] syz.1.4616: attempt to access beyond end of device [ 414.791854][T18440] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 414.829289][ T29] audit: type=1326 audit(1748806758.915:18279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424355e969 code=0x7ffc0000 [ 414.839396][T18432] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 414.853339][ T29] audit: type=1326 audit(1748806758.915:18280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424355e969 code=0x7ffc0000 [ 414.887270][ T29] audit: type=1326 audit(1748806758.915:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424355e969 code=0x7ffc0000 [ 414.911011][ T29] audit: type=1326 audit(1748806758.915:18282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424355e969 code=0x7ffc0000 [ 414.934889][ T29] audit: type=1326 audit(1748806758.915:18283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424355e969 code=0x7ffc0000 [ 414.958691][ T29] audit: type=1326 audit(1748806758.915:18284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424355e969 code=0x7ffc0000 [ 414.982353][ T29] audit: type=1326 audit(1748806758.915:18285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424355e969 code=0x7ffc0000 [ 415.006223][T18432] EXT4-fs (loop4): 1 orphan inode deleted [ 415.015892][T18432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.031198][ T1578] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.048106][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.080700][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.089327][ T1578] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 415.102301][ T37] bond0 (unregistering): Released all slaves [ 415.111003][T18410] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.118193][T18410] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.136437][T18410] bridge_slave_1: entered allmulticast mode [ 415.168957][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.178411][T18410] bridge_slave_1: entered promiscuous mode [ 415.178733][T13516] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 415.198252][T18452] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 415.216202][T13516] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 415.226938][T13516] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 415.259536][T18447] syz_tun: entered allmulticast mode [ 415.274748][T18410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.285109][T18446] syz_tun: left allmulticast mode [ 415.292346][ T112] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 415.303633][ T37] hsr_slave_0: left promiscuous mode [ 415.309611][ T37] hsr_slave_1: left promiscuous mode [ 415.322840][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.330531][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.338319][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.345961][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.363671][ T37] veth1_macvtap: left promiscuous mode [ 415.369186][ T37] veth0_macvtap: left promiscuous mode [ 415.374829][ T37] veth1_vlan: left promiscuous mode [ 415.380102][ T37] veth0_vlan: left promiscuous mode [ 415.467254][ T37] team0 (unregistering): Port device team_slave_1 removed [ 415.479392][ T37] team0 (unregistering): Port device team_slave_0 removed [ 415.524235][T18410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.552179][T18410] team0: Port device team_slave_0 added [ 415.559223][T18410] team0: Port device team_slave_1 added [ 415.597205][T18410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.604234][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.630194][T18410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.641974][T18410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.648974][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.675088][T18410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.678567][T18462] __nla_validate_parse: 6 callbacks suppressed [ 415.678582][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 415.701245][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 415.721650][T18410] hsr_slave_0: entered promiscuous mode [ 415.727893][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 415.727948][T18410] hsr_slave_1: entered promiscuous mode [ 415.749000][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 415.791384][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 415.819442][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 415.863561][T18470] loop5: detected capacity change from 0 to 1024 [ 415.880520][T18410] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 415.881315][T18470] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 415.899597][T18410] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 415.908652][T18410] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 415.918876][T18410] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 415.954415][T18470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.956285][T18472] lo speed is unknown, defaulting to 1000 [ 415.973120][T18410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.997537][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.004015][T18410] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.009785][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.033259][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.040461][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.048628][T18470] loop5: detected capacity change from 1024 to 64 [ 416.057527][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.064701][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.074780][T18470] syz.5.4624: attempt to access beyond end of device [ 416.074780][T18470] loop5: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 416.088347][T18470] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 128) [ 416.099706][T18470] Buffer I/O error on device loop5, logical block 128 [ 416.195821][T18480] syz.3.4626: attempt to access beyond end of device [ 416.195821][T18480] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 416.215281][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.247629][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.283852][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.303346][T18487] loop4: detected capacity change from 0 to 1024 [ 416.303757][T18410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.319986][T18487] EXT4-fs: Ignoring removed bh option [ 416.320767][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.325509][T18487] EXT4-fs: inline encryption not supported [ 416.340922][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.361149][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.375266][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.390434][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.404352][T16659] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 416.446334][T18487] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 416.476516][T18487] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 416.499057][T18487] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.4629: lblock 2 mapped to illegal pblock 2 (length 1) [ 416.514348][T18487] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.4629: lblock 0 mapped to illegal pblock 48 (length 1) [ 416.569193][T18487] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4629: Failed to acquire dquot type 0 [ 416.583081][T18487] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 416.598842][T18487] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4629: mark_inode_dirty error [ 416.611458][T18487] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 416.621291][T18410] veth0_vlan: entered promiscuous mode [ 416.627759][T18487] EXT4-fs (loop4): 1 orphan inode deleted [ 416.631506][T18410] veth1_vlan: entered promiscuous mode [ 416.638255][T18487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.651784][T18410] veth0_macvtap: entered promiscuous mode [ 416.660714][ T3862] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 416.663211][T18410] veth1_macvtap: entered promiscuous mode [ 416.682906][ T3862] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 416.697633][ T112] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.708576][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.718691][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.730432][T13516] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 416.732482][T18410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.754248][T18410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.761561][T13516] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 416.761673][T18473] kmmpd-loop5: attempt to access beyond end of device [ 416.761673][T18473] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 416.772665][T13516] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 416.784510][T18473] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 416.810217][ T112] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.826692][T18410] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.835609][T18410] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.844371][T18410] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.853167][T18410] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.881021][T18505] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 416.895498][ T112] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.911839][T18505] loop4: detected capacity change from 0 to 736 [ 416.931531][T18505] rock: directory entry would overflow storage [ 416.937806][T18505] rock: sig=0x3b10, size=4, remaining=3 [ 416.948697][T18505] syz_tun: entered allmulticast mode [ 416.955208][T18504] syz_tun: left allmulticast mode [ 416.963040][ T112] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.995590][T18512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.005354][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4609'. [ 417.034672][T18508] lo speed is unknown, defaulting to 1000 [ 417.061442][ T112] bridge_slave_1: left allmulticast mode [ 417.067211][ T112] bridge_slave_1: left promiscuous mode [ 417.072996][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.081117][ T112] bridge_slave_0: left allmulticast mode [ 417.086890][ T112] bridge_slave_0: left promiscuous mode [ 417.092732][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.113233][T18521] loop4: detected capacity change from 0 to 1024 [ 417.122186][T18521] EXT4-fs: Ignoring removed bh option [ 417.128634][T18521] EXT4-fs: inline encryption not supported [ 417.141871][T18521] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 417.236411][T18521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 417.263478][T18521] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.4634: lblock 2 mapped to illegal pblock 2 (length 1) [ 417.292662][T18521] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.4634: lblock 0 mapped to illegal pblock 48 (length 1) [ 417.313494][T18521] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4634: Failed to acquire dquot type 0 [ 417.325883][ T112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.338625][T18521] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 417.350398][T18521] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4634: mark_inode_dirty error [ 417.351276][ T112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.363690][T18521] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 417.383036][T18521] EXT4-fs (loop4): 1 orphan inode deleted [ 417.385951][ T112] bond0 (unregistering): Released all slaves [ 417.401748][ T112] bond1 (unregistering): Released all slaves [ 417.404419][T18521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.409432][ T37] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 417.436556][ T112] bond2 (unregistering): Released all slaves [ 417.445780][ T112] bond3 (unregistering): Released all slaves [ 417.447226][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 417.455459][ T112] bond4 (unregistering): Released all slaves [ 417.484380][T18521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.502883][T18521] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.4634: Invalid inode table block 1 in block_group 0 [ 417.519725][T18521] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 417.534901][T18521] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.4634: mark_inode_dirty error [ 417.555391][ T112] hsr_slave_0: left promiscuous mode [ 417.563377][ T112] hsr_slave_1: left promiscuous mode [ 417.569108][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.576639][ T112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.594661][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.602123][ T112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.622735][ T112] veth1_macvtap: left promiscuous mode [ 417.628441][ T112] veth0_macvtap: left promiscuous mode [ 417.634512][ T112] veth1_vlan: left promiscuous mode [ 417.640017][ T112] veth0_vlan: left promiscuous mode [ 417.677192][T18535] loop4: detected capacity change from 0 to 1024 [ 417.688984][T18535] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 417.730711][ T112] team0 (unregistering): Port device team_slave_1 removed [ 417.741059][ T112] team0 (unregistering): Port device team_slave_0 removed [ 417.784501][T18535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.811654][T18508] chnl_net:caif_netlink_parms(): no params data found [ 417.839650][T18535] loop4: detected capacity change from 1024 to 64 [ 417.848101][T18535] syz.4.4639: attempt to access beyond end of device [ 417.848101][T18535] loop4: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 417.861557][T18535] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 128) [ 417.872913][T18535] Buffer I/O error on device loop4, logical block 128 [ 417.892571][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 417.906293][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 417.920129][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 417.935996][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 417.949723][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 417.951859][T18508] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.963186][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 417.970200][T18508] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.983889][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 417.990683][T18508] bridge_slave_0: entered allmulticast mode [ 418.010077][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 418.023949][T13516] EXT4-fs warning (device loop4): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 418.038084][T18508] bridge_slave_0: entered promiscuous mode [ 418.053123][T18508] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.060258][T18508] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.085069][T18508] bridge_slave_1: entered allmulticast mode [ 418.092013][T18508] bridge_slave_1: entered promiscuous mode [ 418.137916][T18508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.149958][T18508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.177321][T18508] team0: Port device team_slave_0 added [ 418.184841][T18508] team0: Port device team_slave_1 added [ 418.218981][T18508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.226107][T18508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.252476][T18508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.265980][T18508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.273066][T18508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.299073][T18508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.329094][T18508] hsr_slave_0: entered promiscuous mode [ 418.335311][T18508] hsr_slave_1: entered promiscuous mode [ 418.341191][T18508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.348799][T18508] Cannot create hsr debugfs directory [ 418.363810][T18552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.367326][T18549] lo speed is unknown, defaulting to 1000 [ 418.376054][T13516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.396323][T18536] kmmpd-loop4: attempt to access beyond end of device [ 418.396323][T18536] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 418.397202][T18552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.409927][T18536] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 418.481525][ T112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.523229][ T112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.583020][ T112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.603929][T18508] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 418.622680][T18508] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 418.642027][ T112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.653500][T18508] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 418.670683][T18508] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.712258][ T112] bridge_slave_1: left allmulticast mode [ 418.718009][ T112] bridge_slave_1: left promiscuous mode [ 418.723796][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.740535][ T112] bridge_slave_0: left allmulticast mode [ 418.746225][ T112] bridge_slave_0: left promiscuous mode [ 418.751999][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.774712][T18566] loop7: detected capacity change from 0 to 1024 [ 418.783427][T18566] EXT4-fs: Ignoring removed bh option [ 418.790119][T18566] EXT4-fs: inline encryption not supported [ 418.798822][T18566] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 418.816383][T18566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 418.830801][T18566] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.4648: lblock 2 mapped to illegal pblock 2 (length 1) [ 418.846251][T18566] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.4648: lblock 0 mapped to illegal pblock 48 (length 1) [ 418.861889][T18566] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4648: Failed to acquire dquot type 0 [ 418.874281][T18566] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 418.885664][T18566] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.4648: mark_inode_dirty error [ 418.897850][ T112] bond0 (unregistering): left promiscuous mode [ 418.898842][T18566] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 418.904106][ T112] bond_slave_0: left promiscuous mode [ 418.904225][ T112] bond_slave_1: left promiscuous mode [ 418.926775][ T112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.926885][T18566] EXT4-fs (loop7): 1 orphan inode deleted [ 418.943013][ T31] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 418.956468][T18566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.959518][ T31] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 418.982608][ T112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.993886][ T112] bond0 (unregistering): Released all slaves [ 419.002489][T18566] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.005244][ T112] bond1 (unregistering): Released all slaves [ 419.014884][T18566] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz.7.4648: Invalid inode table block 1 in block_group 0 [ 419.022256][ T112] bond2 (unregistering): Released all slaves [ 419.034011][T18566] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 419.040517][ T112] bond3 (unregistering): Released all slaves [ 419.049039][T18566] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz.7.4648: mark_inode_dirty error [ 419.055747][ T112] bond4 (unregistering): Released all slaves [ 419.086222][T18556] lo speed is unknown, defaulting to 1000 [ 419.108938][T18508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.128998][ T112] batadv0: left promiscuous mode [ 419.146310][ T112] hsr_slave_0: left promiscuous mode [ 419.154555][ T112] hsr_slave_1: left promiscuous mode [ 419.161883][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.169557][ T112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.179066][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.186944][ T112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.200786][ T112] veth0_macvtap: left promiscuous mode [ 419.206346][ T112] veth1_vlan: left promiscuous mode [ 419.211767][ T112] veth0_vlan: left promiscuous mode [ 419.415724][ T112] team0 (unregistering): Port device team_slave_1 removed [ 419.434486][ T112] team0 (unregistering): Port device team_slave_0 removed [ 419.511766][T18508] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.539020][T18508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.549471][T18508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.593229][ T3862] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.600412][ T3862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.611211][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.618411][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.792299][T18508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.855140][T18556] chnl_net:caif_netlink_parms(): no params data found [ 419.940178][T18556] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.947334][T18556] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.959662][T18556] bridge_slave_0: entered allmulticast mode [ 419.979566][T18556] bridge_slave_0: entered promiscuous mode [ 419.987335][T18556] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.994577][T18556] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.020903][T18556] bridge_slave_1: entered allmulticast mode [ 420.027882][T18556] bridge_slave_1: entered promiscuous mode [ 420.075359][T18556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.092039][T18556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.126064][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 420.126083][ T29] audit: type=1326 audit(1748806764.245:18379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.159813][ T29] audit: type=1326 audit(1748806764.275:18380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.184338][ T29] audit: type=1326 audit(1748806764.285:18381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.208007][ T29] audit: type=1326 audit(1748806764.285:18382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.238086][ T29] audit: type=1326 audit(1748806764.335:18383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.261908][ T29] audit: type=1326 audit(1748806764.335:18384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.285507][ T29] audit: type=1326 audit(1748806764.335:18385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.309208][ T29] audit: type=1326 audit(1748806764.335:18386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.332990][ T29] audit: type=1326 audit(1748806764.335:18387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.356709][ T29] audit: type=1326 audit(1748806764.335:18388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.7.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56622be969 code=0x7ffc0000 [ 420.393335][T18556] team0: Port device team_slave_0 added [ 420.403390][T18556] team0: Port device team_slave_1 added [ 420.442162][T18556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.449135][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.475246][T18556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.491073][T18556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.498059][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.524149][T18556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.539151][T18611] syz.1.4657: attempt to access beyond end of device [ 420.539151][T18611] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 420.573186][T18508] veth0_vlan: entered promiscuous mode [ 420.586639][T18508] veth1_vlan: entered promiscuous mode [ 420.630854][T18556] hsr_slave_0: entered promiscuous mode [ 420.637436][T18556] hsr_slave_1: entered promiscuous mode [ 420.646013][T18556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.659866][T18556] Cannot create hsr debugfs directory [ 420.704354][T18613] loop7: detected capacity change from 0 to 1024 [ 420.716701][T18613] EXT4-fs: Ignoring removed bh option [ 420.725813][T18613] EXT4-fs: inline encryption not supported [ 420.733490][T18622] sd 0:0:1:0: device reset [ 420.763126][T18508] veth0_macvtap: entered promiscuous mode [ 420.770959][T18508] veth1_macvtap: entered promiscuous mode [ 420.797994][T18613] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 420.817068][T18508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.837819][T18508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.870630][T18613] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 420.889038][T18508] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.897979][T18508] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.906940][T18508] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.911262][T18613] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.4658: lblock 2 mapped to illegal pblock 2 (length 1) [ 420.915733][T18508] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.948836][T18613] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.4658: lblock 0 mapped to illegal pblock 48 (length 1) [ 420.949680][T18556] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 420.974926][T18613] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4658: Failed to acquire dquot type 0 [ 420.992959][T18613] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 421.008690][T18556] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 421.026624][T18556] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 421.034008][T18613] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.4658: mark_inode_dirty error [ 421.049289][T18613] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 421.052602][T18556] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 421.068440][T18613] EXT4-fs (loop7): 1 orphan inode deleted [ 421.082724][ T112] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 421.084407][T18613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.119260][ T112] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 421.174072][T18613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.196260][T18556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.202846][T18613] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz.7.4658: Invalid inode table block 1 in block_group 0 [ 421.203605][T18613] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 421.232038][T18613] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz.7.4658: mark_inode_dirty error [ 421.250153][T18556] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.264281][T18642] loop3: detected capacity change from 0 to 1024 [ 421.281988][T18556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.292451][T18556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.310906][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.318059][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.328349][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.335657][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.344303][T18642] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.461767][T18556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.473870][T18658] syz_tun: entered allmulticast mode [ 421.479556][T18656] syz_tun: left allmulticast mode [ 421.526245][T18653] bond0: entered promiscuous mode [ 421.531366][T18653] bond_slave_0: entered promiscuous mode [ 421.537283][T18653] bond_slave_1: entered promiscuous mode [ 421.549445][T18653] batadv0: entered promiscuous mode [ 421.570635][T18653] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 421.584784][T18653] bond0: left promiscuous mode [ 421.589767][T18653] bond_slave_0: left promiscuous mode [ 421.595415][T18653] bond_slave_1: left promiscuous mode [ 421.602021][T18653] batadv0: left promiscuous mode [ 421.758389][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4677'. [ 421.778237][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4677'. [ 421.789685][T18556] veth0_vlan: entered promiscuous mode [ 421.798240][T18556] veth1_vlan: entered promiscuous mode [ 421.799200][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4677'. [ 421.812769][T18556] veth0_macvtap: entered promiscuous mode [ 421.814414][T18556] veth1_macvtap: entered promiscuous mode [ 421.833972][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4677'. [ 421.849203][T18556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.873422][T18556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.891681][T18556] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.900469][T18556] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.909571][T18556] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.911660][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4677'. [ 421.918342][T18556] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.929500][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4677'. [ 421.987058][T18688] lo speed is unknown, defaulting to 1000 [ 422.055364][T18693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.065330][T18693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.131490][T18699] loop9: detected capacity change from 0 to 128 [ 422.138458][T18699] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.165305][T18699] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 422.230636][T18705] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 422.264849][T18705] loop3: detected capacity change from 0 to 736 [ 422.295878][T18707] veth1_macvtap: left promiscuous mode [ 422.315062][T18707] macsec0: entered promiscuous mode [ 422.328263][T18705] rock: directory entry would overflow storage [ 422.334611][T18705] rock: sig=0x3b10, size=4, remaining=3 [ 422.366775][T18705] syz_tun: entered allmulticast mode [ 422.380232][T18704] syz_tun: left allmulticast mode [ 422.406812][T18701] lo speed is unknown, defaulting to 1000 [ 422.623681][T18711] bond0: entered promiscuous mode [ 422.628838][T18711] bond_slave_0: entered promiscuous mode [ 422.634671][T18711] bond_slave_1: entered promiscuous mode [ 422.653950][T18711] batadv0: entered promiscuous mode [ 422.708794][T18711] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 422.865776][T18711] bond0: left promiscuous mode [ 422.870659][T18711] bond_slave_0: left promiscuous mode [ 422.876214][T18711] bond_slave_1: left promiscuous mode [ 422.889862][T18711] batadv0: left promiscuous mode [ 422.909967][T18700] loop8: detected capacity change from 0 to 512 [ 422.925130][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4691'. [ 423.025521][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4692'. [ 423.034660][T18726] loop3: detected capacity change from 0 to 1024 [ 423.042748][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4692'. [ 423.066048][ T37] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 423.091268][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4692'. [ 423.124154][T18726] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.165571][T18735] loop9: detected capacity change from 0 to 1024 [ 423.200008][T18735] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 423.262161][T18741] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 423.274983][T18741] loop7: detected capacity change from 0 to 736 [ 423.300165][T18741] rock: directory entry would overflow storage [ 423.306379][T18741] rock: sig=0x3b10, size=4, remaining=3 [ 423.316306][T18741] syz_tun: entered allmulticast mode [ 423.324466][T18740] syz_tun: left allmulticast mode [ 423.367421][T18752] bond0: entered promiscuous mode [ 423.372638][T18752] bond_slave_0: entered promiscuous mode [ 423.378381][T18752] bond_slave_1: entered promiscuous mode [ 423.388348][T18752] batadv0: entered promiscuous mode [ 423.396791][T18752] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 423.406792][T18752] bond0: left promiscuous mode [ 423.411612][T18752] bond_slave_0: left promiscuous mode [ 423.417126][T18752] bond_slave_1: left promiscuous mode [ 423.419430][T18735] loop9: detected capacity change from 1024 to 64 [ 423.429641][T18752] batadv0: left promiscuous mode [ 423.442930][T18754] syz.9.4695: attempt to access beyond end of device [ 423.442930][T18754] loop9: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 423.456301][T18754] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 128) [ 423.467772][T18754] Buffer I/O error on device loop9, logical block 128 [ 423.488201][T18759] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 423.493939][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.528112][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.544925][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.575543][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.591640][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.605613][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.619242][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.632839][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.646622][T18556] EXT4-fs warning (device loop9): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.788588][T18767] lo speed is unknown, defaulting to 1000 [ 423.809089][T18766] lo speed is unknown, defaulting to 1000 [ 423.899108][T13244] ================================================================== [ 423.907247][T13244] BUG: KCSAN: data-race in folios_put_refs / need_mlock_drain [ 423.914726][T13244] [ 423.917062][T13244] write to 0xffff888237c26a10 of 1 bytes by task 18765 on cpu 0: [ 423.924800][T13244] folios_put_refs+0x285/0x2d0 [ 423.929590][T13244] mlock_folio_batch+0x1a5b/0x1a70 [ 423.934726][T13244] mlock_new_folio+0x1a3/0x200 [ 423.939514][T13244] folio_add_lru_vma+0x5f/0x70 [ 423.944304][T13244] handle_mm_fault+0x27e0/0x2be0 [ 423.949256][T13244] __get_user_pages+0x1036/0x1fb0 [ 423.954295][T13244] __mm_populate+0x243/0x3a0 [ 423.958895][T13244] __se_sys_mremap+0x640/0x6f0 [ 423.963676][T13244] __x64_sys_mremap+0x67/0x80 [ 423.968369][T13244] x64_sys_call+0x2ba9/0x2fb0 [ 423.973056][T13244] do_syscall_64+0xd2/0x200 [ 423.977609][T13244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.983511][T13244] [ 423.985839][T13244] read to 0xffff888237c26a10 of 1 bytes by task 13244 on cpu 1: [ 423.993484][T13244] need_mlock_drain+0x30/0x50 [ 423.998193][T13244] __lru_add_drain_all+0x220/0x3f0 [ 424.003321][T13244] lru_add_drain_all+0x10/0x20 [ 424.008128][T13244] invalidate_bdev+0x47/0x70 [ 424.012737][T13244] ext4_put_super+0x624/0x7d0 [ 424.017440][T13244] generic_shutdown_super+0xe6/0x210 [ 424.022758][T13244] kill_block_super+0x2a/0x70 [ 424.027456][T13244] ext4_kill_sb+0x42/0x80 [ 424.031806][T13244] deactivate_locked_super+0x75/0x1c0 [ 424.037207][T13244] deactivate_super+0x97/0xa0 [ 424.041930][T13244] cleanup_mnt+0x269/0x2e0 [ 424.046369][T13244] __cleanup_mnt+0x19/0x20 [ 424.050802][T13244] task_work_run+0x12e/0x1a0 [ 424.055406][T13244] exit_to_user_mode_loop+0xe4/0x100 [ 424.060726][T13244] do_syscall_64+0x1d6/0x200 [ 424.065339][T13244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.071242][T13244] [ 424.073565][T13244] value changed: 0x1f -> 0x04 [ 424.078242][T13244] [ 424.080565][T13244] Reported by Kernel Concurrency Sanitizer on: [ 424.086720][T13244] CPU: 1 UID: 0 PID: 13244 Comm: syz-executor Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 424.099054][T13244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.109117][T13244] ================================================================== [ 424.518931][ T1578] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.582136][ T1578] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.632716][ T1578] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.691592][ T1578] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.764802][ T1578] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.811931][ T1578] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.912001][ T1578] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.961808][ T1578] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.033968][ T1578] bridge_slave_1: left allmulticast mode [ 425.039708][ T1578] bridge_slave_1: left promiscuous mode [ 425.045337][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.052988][ T1578] bridge_slave_0: left allmulticast mode [ 425.058731][ T1578] bridge_slave_0: left promiscuous mode [ 425.064370][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.072684][ T1578] bridge_slave_1: left allmulticast mode [ 425.078391][ T1578] bridge_slave_1: left promiscuous mode [ 425.084081][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.091914][ T1578] bridge_slave_0: left allmulticast mode [ 425.097549][ T1578] bridge_slave_0: left promiscuous mode [ 425.103426][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.171882][T18745] kmmpd-loop9: attempt to access beyond end of device [ 425.171882][T18745] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 425.185677][T18745] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 425.211692][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.221549][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.231044][ T1578] bond0 (unregistering): Released all slaves [ 425.239710][ T1578] bond1 (unregistering): Released all slaves [ 425.301872][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.312138][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.322452][ T1578] bond0 (unregistering): Released all slaves [ 425.406515][ T1578] hsr_slave_0: left promiscuous mode [ 425.412291][ T1578] hsr_slave_1: left promiscuous mode [ 425.417927][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.425423][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.433196][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.440609][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.450846][ T1578] hsr_slave_0: left promiscuous mode [ 425.456540][ T1578] hsr_slave_1: left promiscuous mode [ 425.462162][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.469587][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.477115][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.484611][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.497489][ T1578] veth1_macvtap: left promiscuous mode [ 425.502983][ T1578] veth0_macvtap: left promiscuous mode [ 425.508475][ T1578] veth1_vlan: left promiscuous mode [ 425.513884][ T1578] veth0_vlan: left promiscuous mode [ 425.519752][ T1578] veth1_macvtap: left promiscuous mode [ 425.525235][ T1578] veth0_macvtap: left promiscuous mode [ 425.530768][ T1578] veth1_vlan: left promiscuous mode [ 425.536001][ T1578] veth0_vlan: left promiscuous mode [ 425.633418][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 425.643249][ T1578] team0 (unregistering): Port device team_slave_0 removed [ 425.694531][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 425.703760][ T1578] team0 (unregistering): Port device team_slave_0 removed [ 426.186776][ T1578] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.242948][ T1578] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.302031][ T1578] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.342179][ T1578] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.396071][ T1578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.431952][ T1578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.501449][ T1578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.541808][ T1578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.614614][ T1578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.661733][ T1578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.702138][ T1578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.751687][ T1578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.813235][ T1578] bridge_slave_1: left allmulticast mode [ 426.818895][ T1578] bridge_slave_1: left promiscuous mode [ 426.824749][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.832671][ T1578] bridge_slave_0: left allmulticast mode [ 426.838308][ T1578] bridge_slave_0: left promiscuous mode [ 426.844115][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.852315][ T1578] bridge_slave_1: left allmulticast mode [ 426.858013][ T1578] bridge_slave_1: left promiscuous mode [ 426.863735][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.871676][ T1578] bridge_slave_0: left allmulticast mode [ 426.877383][ T1578] bridge_slave_0: left promiscuous mode [ 426.883159][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.891689][ T1578] bridge_slave_1: left allmulticast mode [ 426.897325][ T1578] bridge_slave_1: left promiscuous mode [ 426.903020][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.910962][ T1578] bridge_slave_0: left allmulticast mode [ 426.916596][ T1578] bridge_slave_0: left promiscuous mode [ 426.922340][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.041624][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.051558][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.061186][ T1578] bond0 (unregistering): Released all slaves [ 427.112721][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.121865][ T1578] bond_slave_0: left allmulticast mode [ 427.128519][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.138130][ T1578] bond_slave_1: left allmulticast mode [ 427.144408][ T1578] bond0 (unregistering): Released all slaves [ 427.153047][ T1578] bond1 (unregistering): Released all slaves [ 427.161401][ T1578] bond2 (unregistering): Released all slaves [ 427.169825][ T1578] bond3 (unregistering): Released all slaves [ 427.178110][ T1578] bond4 (unregistering): Released all slaves [ 427.281265][ T1578] bond0 (unregistering): left promiscuous mode [ 427.287437][ T1578] bond_slave_0: left promiscuous mode [ 427.293015][ T1578] bond_slave_1: left promiscuous mode [ 427.299058][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.309200][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.319467][ T1578] bond0 (unregistering): Released all slaves [ 427.327748][ T1578] bond1 (unregistering): Released all slaves [ 427.336106][ T1578] bond2 (unregistering): Released all slaves [ 427.344402][ T1578] bond3 (unregistering): Released all slaves [ 427.352998][ T1578] bond4 (unregistering): Released all slaves [ 427.361586][ T1578] bond5 (unregistering): Released all slaves [ 427.369753][ T1578] bond6 (unregistering): Released all slaves [ 427.378036][ T1578] bond7 (unregistering): Released all slaves [ 427.386513][ T1578] bond8 (unregistering): Released all slaves [ 427.472376][ T1578] hsr_slave_0: left promiscuous mode [ 427.477943][ T1578] hsr_slave_1: left promiscuous mode [ 427.483552][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.491311][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.498766][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.506274][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.515397][ T1578] hsr_slave_0: left promiscuous mode [ 427.521073][ T1578] hsr_slave_1: left promiscuous mode [ 427.526604][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.533996][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.541615][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.549008][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.556653][ T1578] batadv0: left promiscuous mode [ 427.563619][ T1578] hsr_slave_0: left promiscuous mode [ 427.569151][ T1578] hsr_slave_1: left promiscuous mode [ 427.574776][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.582195][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.590773][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.598162][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.613003][ T1578] veth0_macvtap: left promiscuous mode [ 427.618515][ T1578] veth1_vlan: left promiscuous mode [ 427.623754][ T1578] veth0_vlan: left promiscuous mode [ 427.629993][ T1578] veth0_macvtap: left promiscuous mode [ 427.635589][ T1578] veth1_vlan: left promiscuous mode [ 427.641016][ T1578] veth0_vlan: left promiscuous mode [ 427.647130][ T1578] veth1_macvtap: left promiscuous mode [ 427.652903][ T1578] veth0_macvtap: left promiscuous mode [ 427.658456][ T1578] veth1_vlan: left promiscuous mode [ 427.663698][ T1578] veth0_vlan: left promiscuous mode [ 427.794496][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 427.804185][ T1578] team0 (unregistering): Port device team_slave_0 removed [ 427.864447][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 427.874480][ T1578] team0 (unregistering): Port device team_slave_0 removed [ 427.940846][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 427.950508][ T1578] team0 (unregistering): Port device team_slave_0 removed