last executing test programs: 1m59.965297353s ago: executing program 0 (id=176): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x36) close_range(r0, r1, 0x0) 1m59.935146603s ago: executing program 0 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m59.839962015s ago: executing program 0 (id=168): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x101, 0x4) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 1m59.782873726s ago: executing program 0 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 1m59.720638157s ago: executing program 0 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r3, 0x0, 0x0) 1m59.444898291s ago: executing program 0 (id=181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='mm_page_alloc\x00', r1}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 1m59.421076971s ago: executing program 32 (id=181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='mm_page_alloc\x00', r1}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 1m50.619515836s ago: executing program 5 (id=379): r0 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000500), 0x66) 1m50.341712651s ago: executing program 5 (id=394): r0 = semget$private(0x0, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)) 1m50.276197702s ago: executing program 5 (id=385): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) 1m50.132696164s ago: executing program 5 (id=388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="8fa25bfc83f54cce79168961c7c2dfd3af9e5a31f2e53ff05ce32b40dd981da3fb83f169b7c7a3a8d1f4e0da092a992c5e6c610c78ae50f34ad99e3c643f36009326349fa4ee3e659c666766404bddb5a198c273bbce285d3dbd4257ebe2bc21379d692e904e0ebc755ad3583cc233576b9b9ef976d934f58059fd13901aa80cbb1b95ce7cb46112900bc71e3359f8d2a1f0f8a1c65a5eb78c836396b2934308d139553d75b355563d6f8ce8c0", @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji3pNDU1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpO4CU0iJ8PwmZw9x7eu9tB3LuhGHrzuvH+aylZfWyBKNKAiIi2yKjEhRPwD0GnTgiu72Qi0PfPv5/6+69G6l0empWqenU3KWkUmpk7N2TZzG32/qgbI4+2Pqa/LL59+a/Wz/nHuUslbNUoVhWupovfi7r86ahFnNWXlNqxjR0y1C5gmWU6u3FenvWLC4tVZVeWByOL5UMy1J6oaryRlWVi6pcqqrQQz1XUJqmqeG44CCZldlZPdVh8kKXJ4NjUiql9JCIxNpaMit9mRAAAOir1vo/KKqb9f/quY3y0O21Ebf+X4/41f+XP9Vfq6n+j4qIb/3vje9b/+uHq//bK6Kz5Uj1P06GsUjbqUAjrDWWUnrc/fl1vLy/Ou4E1P8AAAAAAAAAAAAAAAAAAAAAAPwJtm07Ydt2wjt6X4MiEhUR73uf1JCIXO3DlNFFR/j8cQo0HtwLj4iYryqZSqZ+dDtsiIgphoxLQn4414OrFntPHqmaUXlvLrv5y5VMyGlJZSXn5E9IYkBa8217+np6akLVNecPSHx3flIS8pd/frItf3C5konIhfO78jVJyIcFKYopi848GvnPJ5S6djPdMn7M6QcAAAAAwGmgqR2++3dN26u9nr+zv269PxBq7K/Hfff3Yfkv3N+1AwAAAABwVljVp3ndNI3SPkFMDu7TeRA+plf2Vvi7Wd7fMhzfSvcJvMGbmqLuya6/LYFDvC17BEHpJGusthp11FV4t4326iMzk737BJum8c+bt9+7N8SVtegBK+08CO1/AQz07BcQAAAAgJ5pFP3emcn+TggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoF/8mrd9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6KXwEAAP//ziYEEA==") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1m50.027499626s ago: executing program 5 (id=396): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) 1m49.713048051s ago: executing program 5 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040000) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 1m49.712627451s ago: executing program 33 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040000) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 1m29.57235528s ago: executing program 2 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f000079d000/0x4000)=nil, 0x4000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m29.317721684s ago: executing program 2 (id=873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) 1m29.289838624s ago: executing program 2 (id=875): r0 = gettid() r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 1m28.429735328s ago: executing program 2 (id=891): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m28.353571239s ago: executing program 2 (id=892): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) close(r3) 1m28.353238359s ago: executing program 2 (id=893): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 1m28.340643079s ago: executing program 34 (id=893): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 46.838955344s ago: executing program 6 (id=1780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 46.258435033s ago: executing program 6 (id=1781): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 46.145389155s ago: executing program 6 (id=1783): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x448, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 46.103802285s ago: executing program 6 (id=1785): r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0) ioperm(0x3, 0x7, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) 45.951797028s ago: executing program 6 (id=1789): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r1) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 45.684328681s ago: executing program 6 (id=1799): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 45.662377292s ago: executing program 35 (id=1799): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 3.31348336s ago: executing program 4 (id=2728): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4886) r2 = socket$packet(0x11, 0x3, 0x300) pipe2$watch_queue(&(0x7f00000002c0), 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0xc240) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$zero(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 3.29348317s ago: executing program 4 (id=2730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='fib6_table_lookup\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x118800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe, 0x0, 0x0, 0xfffffffffff7bbfe, 0x3, 0x0, 0x0, 0x602}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000004000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 3.209341041s ago: executing program 4 (id=2731): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) 3.188764192s ago: executing program 4 (id=2732): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 1.595837446s ago: executing program 1 (id=2750): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.517426187s ago: executing program 1 (id=2755): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 1.464764608s ago: executing program 1 (id=2756): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4f9d0f312c7b43a8eed05bd", 0xd) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000002e00)='\x00H\xeb', &(0x7f0000002e40)="7b5159eeb60c", 0x6) close(r0) 1.442249508s ago: executing program 4 (id=2757): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 1.30769569s ago: executing program 1 (id=2759): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000080), &(0x7f00000003c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.265471811s ago: executing program 1 (id=2761): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = io_uring_setup(0x4e4d, &(0x7f0000000080)={0x0, 0x5275, 0x80, 0x9, 0x200000}) pause() close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) 1.256374661s ago: executing program 7 (id=2763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x20, 0x0) 1.017922615s ago: executing program 3 (id=2771): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, 0x0, 0x271) 1.017214865s ago: executing program 3 (id=2772): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xfffe, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.014880275s ago: executing program 4 (id=2773): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030020"], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 927.840226ms ago: executing program 3 (id=2776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 895.959427ms ago: executing program 3 (id=2777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 740.318769ms ago: executing program 3 (id=2778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 739.539589ms ago: executing program 8 (id=2788): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) 666.54288ms ago: executing program 8 (id=2779): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 666.23511ms ago: executing program 3 (id=2780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaa"], 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 641.275171ms ago: executing program 8 (id=2781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 625.676811ms ago: executing program 8 (id=2782): ioprio_set$pid(0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 513.430132ms ago: executing program 8 (id=2783): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) 458.747653ms ago: executing program 8 (id=2784): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 407.957854ms ago: executing program 7 (id=2785): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4f9d0f312c7b43a8eed05bd", 0xd) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000002e00)='\x00H\xeb', &(0x7f0000002e40)="7b5159eeb60c", 0x6) close(r0) 407.194624ms ago: executing program 1 (id=2796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 387.724065ms ago: executing program 7 (id=2786): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 317.438795ms ago: executing program 7 (id=2787): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000011300000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f0800034000000120140000001000010000000000000000000084000a"], 0xd0}}, 0x20050800) 114.837449ms ago: executing program 7 (id=2789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0xffffffc0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x8, 0x5, 0x10001) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=2790): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x91) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x5, 0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) kernel console output (not intermixed with test programs): 98][ T8374] kfree: attempt to access beyond end of device [ 105.575598][ T8374] loop4: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 105.588674][ T8374] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 105.598312][ T8374] kfree: attempt to access beyond end of device [ 105.598312][ T8374] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 105.611393][ T8374] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 105.621336][ T8374] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 105.755641][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1728'. [ 105.873006][ T8406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8406 comm=syz.1.1736 [ 106.130611][ T8434] netlink: 'syz.6.1747': attribute type 10 has an invalid length. [ 106.138527][ T8434] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1747'. [ 106.151560][ T8434] dummy0: entered promiscuous mode [ 106.162609][ T8434] bridge0: port 3(dummy0) entered blocking state [ 106.169093][ T8434] bridge0: port 3(dummy0) entered disabled state [ 106.177625][ T8434] dummy0: entered allmulticast mode [ 106.184004][ T8434] bridge0: port 3(dummy0) entered blocking state [ 106.190400][ T8434] bridge0: port 3(dummy0) entered forwarding state [ 107.037033][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 107.487913][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1776'. [ 108.336749][ T8525] IPVS: stopping master sync thread 8526 ... [ 108.342829][ T8526] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 108.456229][ T8533] Set syz1 is full, maxelem 65536 reached [ 108.490145][ T8535] loop6: detected capacity change from 0 to 1024 [ 108.552815][ T8535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.831570][ T8560] rdma_op ffff88811a1f2180 conn xmit_rdma 0000000000000000 [ 108.856836][ T8544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.874223][ T7387] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.903957][ T8570] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 108.917450][ T7387] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.974544][ T7387] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.077833][ T7387] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.090560][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 109.090636][ T29] audit: type=1326 audit(2000000056.363:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.120796][ T29] audit: type=1326 audit(2000000056.363:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.146839][ T29] audit: type=1326 audit(2000000056.403:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.170943][ T29] audit: type=1326 audit(2000000056.403:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.194385][ T29] audit: type=1326 audit(2000000056.403:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.218586][ T29] audit: type=1326 audit(2000000056.403:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.242069][ T29] audit: type=1326 audit(2000000056.403:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.266248][ T29] audit: type=1326 audit(2000000056.403:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.289891][ T29] audit: type=1326 audit(2000000056.403:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.313947][ T29] audit: type=1326 audit(2000000056.403:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 109.399432][ T7387] dummy0: left allmulticast mode [ 109.404571][ T7387] bridge0: port 3(dummy0) entered disabled state [ 109.426437][ T7387] bridge_slave_1: left allmulticast mode [ 109.432146][ T7387] bridge_slave_1: left promiscuous mode [ 109.438427][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.457758][ T7387] bridge_slave_0: left allmulticast mode [ 109.463447][ T7387] bridge_slave_0: left promiscuous mode [ 109.469874][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.539233][ T8604] SELinux: failed to load policy [ 109.561467][ T7387] bond1 (unregistering): (slave gretap1): Releasing active interface [ 109.570592][ T7387] gretap1 (unregistering): left allmulticast mode [ 109.697760][ T7387] bond0 (unregistering): Released all slaves [ 109.707784][ T7387] bond1 (unregistering): Released all slaves [ 109.717330][ T8608] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1820'. [ 109.786038][ T7387] tipc: Disabling bearer [ 109.791079][ T7387] tipc: Disabling bearer [ 109.797131][ T7387] tipc: Left network mode [ 109.808595][ T7387] hsr_slave_0: left promiscuous mode [ 109.814362][ T7387] hsr_slave_1: left promiscuous mode [ 109.820545][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.827979][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.836222][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.843629][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.855054][ T7387] veth1_macvtap: left promiscuous mode [ 109.860779][ T7387] veth0_macvtap: left promiscuous mode [ 109.866858][ T7387] veth1_vlan: left promiscuous mode [ 109.872051][ T7387] veth0_vlan: left promiscuous mode [ 109.920754][ T7387] team0 (unregistering): Port device team_slave_1 removed [ 109.930221][ T7387] team0 (unregistering): Port device team_slave_0 removed [ 109.958685][ T8574] chnl_net:caif_netlink_parms(): no params data found [ 109.990123][ T8574] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.997277][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.004414][ T8574] bridge_slave_0: entered allmulticast mode [ 110.010862][ T8574] bridge_slave_0: entered promiscuous mode [ 110.017513][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.024650][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.032508][ T8574] bridge_slave_1: entered allmulticast mode [ 110.038836][ T8574] bridge_slave_1: entered promiscuous mode [ 110.054503][ T8574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.065399][ T8574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.083139][ T8574] team0: Port device team_slave_0 added [ 110.089938][ T8574] team0: Port device team_slave_1 added [ 110.104676][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.111659][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.138062][ T8574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.149253][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.156208][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.182480][ T8574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.206795][ T8574] hsr_slave_0: entered promiscuous mode [ 110.212759][ T8574] hsr_slave_1: entered promiscuous mode [ 110.225222][ T7387] IPVS: stop unused estimator thread 0... [ 110.274898][ T8574] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.290258][ T8574] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.298980][ T8574] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.307601][ T8574] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.321049][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.328197][ T8574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.335514][ T8574] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.342539][ T8574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.368722][ T8574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.381126][ T8574] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.389660][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.397514][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.410909][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.417978][ T7410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.428603][ T7410] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.435688][ T7410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.487435][ T8574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.570714][ T8574] veth0_vlan: entered promiscuous mode [ 110.578071][ T8574] veth1_vlan: entered promiscuous mode [ 110.591680][ T8574] veth0_macvtap: entered promiscuous mode [ 110.598858][ T8574] veth1_macvtap: entered promiscuous mode [ 110.609674][ T8574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.620077][ T8574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.628781][ T8574] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.637485][ T8574] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.646254][ T8574] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.654941][ T8574] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.796348][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1811'. [ 111.218076][ T8728] ip6gre1: entered allmulticast mode [ 111.293769][ T8742] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 111.315209][ T8742] team1: entered promiscuous mode [ 111.320638][ T8742] team1: entered allmulticast mode [ 111.416134][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1846'. [ 111.500780][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1851'. [ 111.518485][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1854'. [ 111.528564][ T8786] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1854'. [ 111.972828][ T8845] loop3: detected capacity change from 0 to 8192 [ 111.987765][ T8853] loop7: detected capacity change from 0 to 256 [ 111.995160][ T8853] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.009184][ T8854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8854 comm=syz.1.1870 [ 112.042303][ T8845] loop3: p1 p3 p4 [ 112.047316][ T8845] loop3: p1 size 8390912 extends beyond EOD, truncated [ 112.054576][ T8845] loop3: p3 size 589824 extends beyond EOD, truncated [ 112.111831][ T8858] syzkaller1: entered promiscuous mode [ 112.117486][ T8858] syzkaller1: entered allmulticast mode [ 113.925622][ T3739] page_pool_release_retry() stalled pool shutdown: id 46, 2 inflight 60 sec [ 114.231550][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 114.231564][ T29] audit: type=1400 audit(2000000061.503:2883): avc: denied { mount } for pid=8864 comm="syz.8.1885" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 114.289827][ T8874] loop7: detected capacity change from 0 to 512 [ 114.324315][ T29] audit: type=1400 audit(2000000061.593:2884): avc: denied { write } for pid=8876 comm="syz.1.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.383325][ T8874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.406444][ T8874] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.444797][ T29] audit: type=1400 audit(2000000061.713:2885): avc: denied { rename } for pid=8873 comm="syz.7.1878" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.559713][ T8898] can0: slcan on ttyS3. [ 114.591983][ T8899] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.1878: corrupted inode contents [ 114.622019][ T8897] can0 (unregistered): slcan off ttyS3. [ 114.624191][ T8904] loop8: detected capacity change from 0 to 512 [ 114.638512][ T8899] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #18: comm syz.7.1878: mark_inode_dirty error [ 114.672846][ T8906] loop4: detected capacity change from 0 to 512 [ 114.681631][ T8904] EXT4-fs (loop8): 1 orphan inode deleted [ 114.688645][ T8899] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.1878: corrupted inode contents [ 114.700995][ T8904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.702166][ T7410] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.723399][ T7410] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 1 [ 114.730650][ T8904] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.750979][ T8899] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.1878: mark_inode_dirty error [ 114.763144][ T8906] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 114.764835][ T29] audit: type=1400 audit(2000000062.033:2886): avc: denied { setattr } for pid=8903 comm="syz.8.1890" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.772882][ T8906] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 114.774036][ T8899] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.1878: mark inode dirty (error -117) [ 114.819343][ T8906] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.1891: Invalid inode table block 0 in block_group 0 [ 114.832306][ T8899] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 114.843487][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.846947][ T8912] loop3: detected capacity change from 0 to 512 [ 114.852735][ T8906] EXT4-fs (loop4): get root inode failed [ 114.864471][ T8906] EXT4-fs (loop4): mount failed [ 114.880760][ T8912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.896916][ T8912] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.914286][ T8916] loop8: detected capacity change from 0 to 764 [ 114.919416][ T29] audit: type=1400 audit(2000000062.193:2887): avc: denied { create } for pid=8911 comm="syz.3.1892" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 114.942763][ T8912] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1892: corrupted inode contents [ 114.948283][ T6158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.955362][ T8912] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1892: mark_inode_dirty error [ 114.976851][ T8916] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 114.985205][ T8912] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1892: corrupted inode contents [ 115.008947][ T8919] loop4: detected capacity change from 0 to 512 [ 115.018894][ T8919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.033228][ T8912] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1892: mark_inode_dirty error [ 115.040578][ T8924] loop8: detected capacity change from 0 to 164 [ 115.046032][ T8919] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.069379][ T8924] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.098947][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.109466][ T8924] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.118373][ T8924] Symlink component flag not implemented [ 115.124030][ T8924] Symlink component flag not implemented [ 115.129903][ T8924] Symlink component flag not implemented (7) [ 115.130818][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.136022][ T8924] Symlink component flag not implemented (116) [ 115.279034][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.289569][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.342048][ T8950] netlink: 'syz.8.1908': attribute type 10 has an invalid length. [ 115.347472][ T8944] SELinux: failed to load policy [ 115.352509][ T8950] batman_adv: batadv0: Adding interface: team0 [ 115.361123][ T8950] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.386994][ T8950] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 115.447961][ T8952] tipc: Started in network mode [ 115.452877][ T8952] tipc: Node identity 62d7a75c7e0b, cluster identity 4711 [ 115.460360][ T8952] tipc: Enabled bearer , priority 0 [ 115.468227][ T8951] tipc: Resetting bearer [ 115.484504][ T8951] tipc: Disabling bearer [ 115.506365][ T8961] loop3: detected capacity change from 0 to 512 [ 115.512914][ T8961] EXT4-fs: Ignoring removed nobh option [ 115.528675][ T8961] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.1913: corrupted inode contents [ 115.541982][ T8961] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.1913: mark_inode_dirty error [ 115.558257][ T8961] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.1913: corrupted inode contents [ 115.570764][ T8961] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1913: mark_inode_dirty error [ 115.587540][ T8961] Quota error (device loop3): write_blk: dquota write failed [ 115.596843][ T8961] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 115.606990][ T8961] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1913: Failed to acquire dquot type 0 [ 115.629379][ T8961] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1913: corrupted inode contents [ 115.647731][ T8961] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.1913: mark_inode_dirty error [ 115.679688][ T8961] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1913: corrupted inode contents [ 115.696501][ T8961] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1913: mark_inode_dirty error [ 115.711585][ T8961] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1913: corrupted inode contents [ 115.723942][ T8961] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 115.734427][ T8961] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1913: corrupted inode contents [ 115.762984][ T8961] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.1913: mark_inode_dirty error [ 115.774686][ T8961] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 115.784984][ T8961] EXT4-fs (loop3): 1 truncate cleaned up [ 115.793916][ T8961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.820384][ T8961] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.849433][ T8980] loop4: detected capacity change from 0 to 512 [ 115.860161][ T8980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.887085][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.898566][ T8980] EXT4-fs (loop4): 1 truncate cleaned up [ 115.904741][ T8980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.932537][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.942801][ T8987] loop3: detected capacity change from 0 to 2048 [ 115.972281][ T8991] loop7: detected capacity change from 0 to 1024 [ 115.980106][ T8987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.995540][ T8987] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.997810][ T8991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.100261][ T7427] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:49: bg 0: block 345: padding at end of block bitmap is not set [ 116.140103][ T8991] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 116.157582][ T7427] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 124 with error 117 [ 116.170497][ T7427] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.170497][ T7427] [ 116.206605][ T6158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.244656][ T9006] lo: entered promiscuous mode [ 116.263483][ T9006] tunl0: entered promiscuous mode [ 116.274940][ T9006] gre0: entered promiscuous mode [ 116.298831][ T9006] gretap0: entered promiscuous mode [ 116.313739][ T9006] erspan0: entered promiscuous mode [ 116.330465][ T9006] ip_vti0: entered promiscuous mode [ 116.347925][ T9006] ip6_vti0: entered promiscuous mode [ 116.373155][ T9006] sit0: entered promiscuous mode [ 116.394804][ T9006] ip6tnl0: entered promiscuous mode [ 116.412707][ T9006] ip6gre0: entered promiscuous mode [ 116.430865][ T9006] syz_tun: entered promiscuous mode [ 116.449491][ T9006] ip6gretap0: entered promiscuous mode [ 116.463217][ T9006] bridge0: port 3(dummy0) entered disabled state [ 116.482420][ T9006] bridge0: entered promiscuous mode [ 116.496205][ T9006] vcan0: entered promiscuous mode [ 116.512016][ T9006] bond0: entered promiscuous mode [ 116.517081][ T9006] bond_slave_0: entered promiscuous mode [ 116.522839][ T9006] bond_slave_1: entered promiscuous mode [ 116.537575][ T9006] team0: entered promiscuous mode [ 116.542714][ T9006] team_slave_0: entered promiscuous mode [ 116.548465][ T9006] team_slave_1: entered promiscuous mode [ 116.565292][ T9006] nlmon0: entered promiscuous mode [ 116.570870][ T9006] caif0: entered promiscuous mode [ 116.576082][ T9006] vxcan0: entered promiscuous mode [ 116.581319][ T9006] vxcan1: entered promiscuous mode [ 116.586567][ T9006] veth0: entered promiscuous mode [ 116.591633][ T9006] veth1: entered promiscuous mode [ 116.596797][ T9006] wg0: entered promiscuous mode [ 116.601795][ T9006] wg1: entered promiscuous mode [ 116.625683][ T9006] wg2: left allmulticast mode [ 116.639502][ T9006] veth0_to_bridge: entered promiscuous mode [ 116.646671][ T9006] veth1_to_bridge: entered promiscuous mode [ 116.652714][ T9006] veth0_to_bond: entered promiscuous mode [ 116.658662][ T9006] veth1_to_bond: entered promiscuous mode [ 116.664601][ T9006] veth0_to_team: entered promiscuous mode [ 116.670497][ T9006] veth1_to_team: entered promiscuous mode [ 116.676981][ T9006] veth1_to_batadv: entered promiscuous mode [ 116.683012][ T9006] batadv_slave_1: entered promiscuous mode [ 116.688865][ T9006] xfrm0: entered promiscuous mode [ 116.694005][ T9006] veth0_to_hsr: entered promiscuous mode [ 116.699789][ T9006] veth1_to_hsr: entered promiscuous mode [ 116.706255][ T9006] hsr0: entered promiscuous mode [ 116.711366][ T9006] veth1_virt_wifi: entered promiscuous mode [ 116.717439][ T9006] veth0_virt_wifi: entered promiscuous mode [ 116.723438][ T9006] vlan1: entered promiscuous mode [ 116.728679][ T9006] macvlan0: entered promiscuous mode [ 116.734081][ T9006] macvlan1: entered promiscuous mode [ 116.740007][ T9006] ipvlan0: entered promiscuous mode [ 116.745250][ T9006] ipvlan1: entered promiscuous mode [ 116.750760][ T9006] macvtap0: entered promiscuous mode [ 116.756129][ T9006] macsec0: entered promiscuous mode [ 116.761437][ T9006] geneve1: entered promiscuous mode [ 116.767380][ T9006] bond1: entered promiscuous mode [ 116.772470][ T9006] batadv1: entered promiscuous mode [ 116.777982][ T9006] batadv2: entered promiscuous mode [ 116.783260][ T9006] ip6tnl1: entered promiscuous mode [ 116.788677][ T9006] ip6tnl2: entered promiscuous mode [ 116.794461][ T9006] bridge1: entered promiscuous mode [ 116.811891][ T9006] bond2: entered promiscuous mode [ 116.817051][ T9006] gretap1: entered promiscuous mode [ 116.827204][ T9006] bridge2: entered promiscuous mode [ 116.834351][ T9006] netdevsim netdevsim4 eth0: entered promiscuous mode [ 116.855325][ T9006] netdevsim netdevsim4 eth1: entered promiscuous mode [ 116.862413][ T9006] netdevsim netdevsim4 eth2: entered promiscuous mode [ 116.871872][ T9006] netdevsim netdevsim4 eth3: entered promiscuous mode [ 116.879069][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1931'. [ 116.900486][ T9009] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.909323][ T9009] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.918084][ T9009] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.926850][ T9009] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.969747][ T9009] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.978730][ T9009] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.987692][ T9009] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.996645][ T9009] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.075152][ T9027] pim6reg1: entered promiscuous mode [ 117.080622][ T9027] pim6reg1: entered allmulticast mode [ 117.135260][ T9031] serio: Serial port ptm0 [ 117.150366][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.172700][ T9041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 117.202361][ T29] audit: type=1326 audit(2000000064.473:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 117.226687][ T29] audit: type=1326 audit(2000000064.473:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.4.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 117.369898][ T9066] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1952'. [ 117.389632][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1948'. [ 117.398560][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1948'. [ 117.560707][ T9078] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 117.574215][ T9078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.580418][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'. [ 117.597663][ T9078] bond3 (unregistering): Released all slaves [ 117.746265][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1964'. [ 117.755369][ T9093] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1964'. [ 117.764444][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1964'. [ 117.774061][ T9093] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1964'. [ 117.850733][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 118.045400][ T9111] loop4: detected capacity change from 0 to 1024 [ 118.057126][ T9111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.073331][ T9111] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 118.091671][ T9111] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 118.103987][ T9111] EXT4-fs (loop4): This should not happen!! Data will be lost [ 118.103987][ T9111] [ 118.113798][ T9111] EXT4-fs (loop4): Total free blocks count 0 [ 118.119840][ T9111] EXT4-fs (loop4): Free/Dirty block details [ 118.125744][ T9111] EXT4-fs (loop4): free_blocks=16 [ 118.130854][ T9111] EXT4-fs (loop4): dirty_blocks=0 [ 118.135902][ T9111] EXT4-fs (loop4): Block reservation details [ 118.141889][ T9111] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 118.161083][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.284237][ T9141] loop7: detected capacity change from 0 to 512 [ 118.304823][ T9141] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.343083][ T9141] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.476351][ T6158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.534325][ T9162] loop7: detected capacity change from 0 to 512 [ 118.542427][ T9162] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 118.601126][ T9162] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.1990: bad orphan inode 15 [ 118.625494][ T9162] ext4_test_bit(bit=14, block=18) = 1 [ 118.630970][ T9162] is_bad_inode(inode)=0 [ 118.635266][ T9162] NEXT_ORPHAN(inode)=1023 [ 118.639635][ T9162] max_ino=32 [ 118.642842][ T9162] i_nlink=0 [ 118.648402][ T9162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 118.662114][ T9162] ext2 filesystem being mounted at /219/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 118.673417][ T9171] smc: net device bond0 applied user defined pnetid SYZ0 [ 118.699579][ T9171] smc: net device bond0 erased user defined pnetid SYZ0 [ 119.390707][ T9198] loop8: detected capacity change from 0 to 1024 [ 119.398031][ T6158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 119.440421][ T9200] netlink: 'syz.7.2005': attribute type 10 has an invalid length. [ 119.452335][ T9200] dummy0: left promiscuous mode [ 119.457700][ T9198] EXT4-fs: Ignoring removed orlov option [ 119.488940][ T9198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.490241][ T9200] team0: Port device dummy0 added [ 119.576607][ T9204] netlink: 'syz.7.2005': attribute type 10 has an invalid length. [ 119.677706][ T9204] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 119.692600][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 119.692664][ T29] audit: type=1400 audit(2000000066.963:3287): avc: denied { connect } for pid=9207 comm="syz.3.2007" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.777264][ T9204] team0: Failed to send options change via netlink (err -105) [ 119.850376][ T9204] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 119.887636][ T9204] team0: Port device dummy0 removed [ 119.897045][ T9204] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.962356][ T9241] loop7: detected capacity change from 0 to 1024 [ 119.972662][ T9241] EXT4-fs: Ignoring removed bh option [ 119.986267][ T9241] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.998992][ T9241] EXT4-fs error (device loop7): ext4_quota_enable:7124: comm syz.7.2011: inode #2304: comm syz.7.2011: iget: illegal inode # [ 120.027918][ T9241] EXT4-fs (loop7): Remounting filesystem read-only [ 120.034516][ T9241] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 120.050052][ T9241] EXT4-fs (loop7): mount failed [ 120.232532][ T9275] netlink: 'syz.7.2014': attribute type 1 has an invalid length. [ 120.262356][ T9275] bond2: entered promiscuous mode [ 120.267651][ T9275] bond2: entered allmulticast mode [ 120.281419][ T9275] geneve2: entered allmulticast mode [ 120.297332][ T9275] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.305596][ T9275] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.313862][ T9275] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.322078][ T9275] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.331789][ T9275] bond2: (slave geneve2): making interface the new active one [ 120.339334][ T9275] geneve2: entered promiscuous mode [ 120.351200][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.352634][ T9275] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 120.371926][ T9284] bond2: left promiscuous mode [ 120.377469][ T9284] geneve2: left promiscuous mode [ 120.382550][ T9284] bond2: left allmulticast mode [ 120.399155][ T9284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.411180][ T9293] loop8: detected capacity change from 0 to 512 [ 120.421718][ T9293] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 120.434989][ T9293] EXT4-fs (loop8): 1 truncate cleaned up [ 120.441270][ T9293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.701554][ T29] audit: type=1326 audit(2000000067.973:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 120.725203][ T29] audit: type=1326 audit(2000000067.973:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 120.785816][ T29] audit: type=1326 audit(2000000067.973:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 120.809417][ T29] audit: type=1326 audit(2000000067.983:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 120.832872][ T29] audit: type=1326 audit(2000000067.993:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ebbc11e5 code=0x7ffc0000 [ 120.856427][ T29] audit: type=1326 audit(2000000067.993:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 120.879837][ T29] audit: type=1326 audit(2000000067.993:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 120.903265][ T29] audit: type=1326 audit(2000000067.993:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 120.926730][ T29] audit: type=1326 audit(2000000067.993:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 121.332254][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.597069][ T9399] pim6reg1: entered promiscuous mode [ 121.602484][ T9399] pim6reg1: entered allmulticast mode [ 121.926067][ T9430] loop7: detected capacity change from 0 to 1764 [ 122.101173][ T9451] __nla_validate_parse: 6 callbacks suppressed [ 122.101188][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 122.104233][ T9453] loop3: detected capacity change from 0 to 2048 [ 122.137430][ T9453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.153604][ T9453] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 122.168498][ T9453] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 122.180819][ T9453] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.180819][ T9453] [ 122.190493][ T9453] EXT4-fs (loop3): Total free blocks count 0 [ 122.196571][ T9453] EXT4-fs (loop3): Free/Dirty block details [ 122.202556][ T9453] EXT4-fs (loop3): free_blocks=2415919504 [ 122.208309][ T9453] EXT4-fs (loop3): dirty_blocks=16 [ 122.213424][ T9453] EXT4-fs (loop3): Block reservation details [ 122.219429][ T9453] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 122.358027][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.378327][ T9465] loop7: detected capacity change from 0 to 16384 [ 122.456000][ T9465] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 122.472987][ T9471] loop3: detected capacity change from 0 to 1024 [ 122.488271][ T9465] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 122.513871][ T9465] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.523427][ T9465] buffer_io_error: 8 callbacks suppressed [ 122.523440][ T9465] Buffer I/O error on dev loop7, logical block 1120, async page read [ 122.582658][ T9480] IPVS: Error connecting to the multicast addr [ 122.624410][ T9464] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 122.634785][ T9464] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 122.643203][ T9464] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 122.651600][ T9464] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 122.660541][ T9464] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 122.668997][ T9464] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 122.677352][ T9464] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 122.686279][ T9464] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 122.694604][ T9464] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 122.703033][ T9464] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 122.727791][ T9464] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 122.779860][ T9464] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 122.793102][ T9464] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 122.808356][ T9464] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 122.846497][ T9464] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 122.869500][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2090'. [ 122.881770][ T9464] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 123.035355][ T9502] loop8: detected capacity change from 0 to 512 [ 123.046709][ T9502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.071712][ T9502] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 123.106155][ T9502] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.2095: invalid block [ 123.124881][ T9502] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2095: invalid indirect mapped block 4294967295 (level 1) [ 123.140555][ T9502] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2095: invalid indirect mapped block 4294967295 (level 1) [ 123.154847][ T9502] EXT4-fs (loop8): 2 truncates cleaned up [ 123.162252][ T9502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.193274][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.233055][ T9517] loop8: detected capacity change from 0 to 128 [ 123.254452][ T9517] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.276537][ T9517] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.303197][ T8574] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.563824][ T9561] netlink: 'syz.1.2119': attribute type 4 has an invalid length. [ 123.630211][ T9569] netlink: 'syz.1.2119': attribute type 4 has an invalid length. [ 123.673044][ T9571] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.720799][ T9571] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.798748][ T9571] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.898652][ T9571] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.961790][ T9571] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.973119][ T9571] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.999227][ T9571] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.012078][ T9571] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.262524][ T9613] loop8: detected capacity change from 0 to 1024 [ 124.354664][ T9617] loop3: detected capacity change from 0 to 128 [ 124.388759][ T9617] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.407510][ T9617] ext4 filesystem being mounted at /423/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.471231][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.580401][ T9638] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 124.703444][ T9651] loop4: detected capacity change from 0 to 1024 [ 124.734643][ T9654] 9pnet_fd: Insufficient options for proto=fd [ 124.784416][ T9660] loop4: detected capacity change from 0 to 2048 [ 124.816620][ T9660] loop4: p1 < > p4 [ 124.820986][ T9660] loop4: p4 size 8388608 extends beyond EOD, truncated [ 124.937112][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 124.937125][ T29] audit: type=1326 audit(2000000072.214:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ebb8e929 code=0x7ffc0000 [ 125.005980][ T9669] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 125.275399][ T9689] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2185'. [ 125.313117][ T9692] loop3: detected capacity change from 0 to 2048 [ 125.355684][ T9692] loop3: p1 < > p4 [ 125.360077][ T9692] loop3: p4 size 8388608 extends beyond EOD, truncated [ 125.687508][ T29] audit: type=1326 audit(2000000072.964:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.711088][ T29] audit: type=1326 audit(2000000072.964:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.745007][ T29] audit: type=1326 audit(2000000073.014:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.769673][ T29] audit: type=1326 audit(2000000073.014:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.793207][ T29] audit: type=1326 audit(2000000073.014:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.817243][ T29] audit: type=1326 audit(2000000073.014:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.840754][ T29] audit: type=1326 audit(2000000073.014:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.865004][ T29] audit: type=1326 audit(2000000073.014:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.889178][ T29] audit: type=1326 audit(2000000073.014:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.7.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f40153fe929 code=0x7ffc0000 [ 125.932064][ T9718] pim6reg1: entered promiscuous mode [ 125.937541][ T9718] pim6reg1: entered allmulticast mode [ 126.021797][ T9729] loop3: detected capacity change from 0 to 512 [ 126.028805][ T9729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.040056][ T9729] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 126.085487][ T9729] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2190: invalid block [ 126.110893][ T9745] tipc: Enabling of bearer rejected, already enabled [ 126.127230][ T9729] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2190: invalid indirect mapped block 4294967295 (level 1) [ 126.161171][ T9729] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2190: invalid indirect mapped block 4294967295 (level 1) [ 126.177575][ T9729] EXT4-fs (loop3): 2 truncates cleaned up [ 126.183929][ T9729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.210134][ T9761] loop4: detected capacity change from 0 to 2048 [ 126.223425][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.242249][ T9761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.278432][ T9761] random: crng reseeded on system resumption [ 126.289162][ T9766] loop7: detected capacity change from 0 to 2048 [ 126.356283][ T9766] loop7: p1 < > p4 [ 126.361238][ T9766] loop7: p4 size 8388608 extends beyond EOD, truncated [ 126.596248][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.629289][ T9775] loop7: detected capacity change from 0 to 16384 [ 126.671944][ T9779] pim6reg1: entered promiscuous mode [ 126.677386][ T9779] pim6reg1: entered allmulticast mode [ 126.891002][ T9805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9805 comm=syz.8.2216 [ 126.928724][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2216'. [ 126.937656][ T9805] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2216'. [ 126.954373][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 126.985943][ T9810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.003828][ T9805] vlan2: entered allmulticast mode [ 127.009113][ T9805] hsr0: entered allmulticast mode [ 127.014202][ T9805] hsr_slave_0: entered allmulticast mode [ 127.019870][ T9805] hsr_slave_1: entered allmulticast mode [ 127.039000][ T9814] vlan2: entered allmulticast mode [ 127.044157][ T9814] bond2: entered allmulticast mode [ 127.269671][ T9817] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.386848][ T9817] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.436924][ T9817] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.486306][ T9817] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.059064][ T9817] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.070413][ T9817] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.081493][ T9817] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.092153][ T9817] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.120529][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'. [ 128.138106][ T9842] loop8: detected capacity change from 0 to 2048 [ 128.145310][ T9838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2230'. [ 128.176211][ T9842] loop8: p1 < > p4 [ 128.180634][ T9842] loop8: p4 size 8388608 extends beyond EOD, truncated [ 128.315394][ T9851] loop3: detected capacity change from 0 to 8192 [ 128.359669][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2235'. [ 128.478986][ T9867] ip6gre1: entered allmulticast mode [ 128.541526][ T9875] loop4: detected capacity change from 0 to 2048 [ 128.584356][ T9875] loop4: p1 < > p4 [ 128.588846][ T9875] loop4: p4 size 8388608 extends beyond EOD, truncated [ 128.778709][ T9891] loop4: detected capacity change from 0 to 8192 [ 128.879480][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 128.890019][ T9897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2255'. [ 129.641938][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2262'. [ 129.660758][ T9922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.711316][ T9922] vlan3: entered allmulticast mode [ 129.717101][ T9922] bond1: entered allmulticast mode [ 130.026561][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 130.058018][ T9941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2268'. [ 130.494919][ T9999] loop4: detected capacity change from 0 to 164 [ 130.509246][ T9999] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 130.522173][ T9999] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 130.531700][ T9999] Symlink component flag not implemented [ 130.537424][ T9999] Symlink component flag not implemented [ 130.552769][ T9999] Symlink component flag not implemented (7) [ 130.559572][ T9999] Symlink component flag not implemented (116) [ 130.678716][T10026] syzkaller1: entered promiscuous mode [ 130.684282][T10026] syzkaller1: entered allmulticast mode [ 130.865757][T10062] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.879508][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.879557][T10059] netlink: 'syz.3.2289': attribute type 10 has an invalid length. [ 130.888733][T10059] batman_adv: batadv0: Adding interface: team0 [ 130.888750][T10059] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.888809][T10059] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 130.954134][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.974457][T10062] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.989806][T10067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=10067 comm=syz.4.2291 [ 131.017376][T10066] SELinux: failed to load policy [ 131.055778][T10062] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.105755][T10062] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.159711][T10062] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.170790][T10062] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.182453][T10062] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.193559][T10062] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.232637][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2293'. [ 131.250729][T10074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.276714][T10074] vlan2: entered allmulticast mode [ 131.281938][T10074] bond3: entered allmulticast mode [ 131.541726][T10099] loop8: detected capacity change from 0 to 512 [ 131.560750][T10099] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.585773][T10099] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.608099][T10099] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.2305: corrupted inode contents [ 131.622954][T10099] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.2305: mark_inode_dirty error [ 131.653020][T10112] loop7: detected capacity change from 0 to 164 [ 131.653361][T10099] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.2305: corrupted inode contents [ 131.673554][T10112] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.683423][T10099] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.2305: mark_inode_dirty error [ 131.700082][T10112] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.708915][T10112] Symlink component flag not implemented [ 131.714734][T10112] Symlink component flag not implemented [ 131.723260][T10112] Symlink component flag not implemented (7) [ 131.729895][T10112] Symlink component flag not implemented (116) [ 131.779046][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.826249][T10133] loop8: detected capacity change from 0 to 512 [ 131.847474][T10133] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 131.857262][T10133] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 131.873792][T10133] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.2309: Invalid inode table block 0 in block_group 0 [ 131.888501][T10133] EXT4-fs (loop8): get root inode failed [ 131.894186][T10133] EXT4-fs (loop8): mount failed [ 131.965861][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.980018][T10151] can0: slcan on ttyS3. [ 131.986466][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.044594][T10148] can0 (unregistered): slcan off ttyS3. [ 132.376104][T10196] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.576120][T10133] Set syz1 is full, maxelem 65536 reached [ 132.595803][T10196] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.635488][T10196] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.685909][T10196] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.368531][T10196] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.379724][T10196] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.390458][T10196] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.401189][T10196] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.472106][T10210] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2327'. [ 133.497852][T10211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=10211 comm=syz.3.2323 [ 133.528392][T10217] loop4: detected capacity change from 0 to 512 [ 133.568661][T10217] EXT4-fs (loop4): 1 orphan inode deleted [ 133.576701][T10217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.606854][ T1431] __quota_error: 65 callbacks suppressed [ 133.606866][ T1431] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 133.623052][ T1431] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 133.636334][T10217] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.672823][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.698428][T10235] netlink: 'syz.7.2334': attribute type 1 has an invalid length. [ 133.703065][ T29] audit: type=1326 audit(2000000080.974:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.4.2331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x0 [ 133.713265][T10235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.781413][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2334'. [ 133.799597][T10235] bond4 (unregistering): Released all slaves [ 133.871685][ T29] audit: type=1326 audit(2000000081.144:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 133.927424][T10258] serio: Serial port ptm0 [ 133.932654][ T29] audit: type=1326 audit(2000000081.174:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 133.956358][ T29] audit: type=1326 audit(2000000081.174:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 133.979971][ T29] audit: type=1326 audit(2000000081.174:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 134.003477][ T29] audit: type=1326 audit(2000000081.174:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 134.026999][ T29] audit: type=1326 audit(2000000081.174:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 134.050513][ T29] audit: type=1326 audit(2000000081.174:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 134.074040][ T29] audit: type=1326 audit(2000000081.174:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.8.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 134.190310][T10267] loop7: detected capacity change from 0 to 512 [ 134.207713][T10267] EXT4-fs (loop7): 1 orphan inode deleted [ 134.214052][T10267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.227945][ T41] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 134.229167][T10267] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.276313][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 134.285242][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 134.308608][T10277] loop8: detected capacity change from 0 to 512 [ 134.322203][ T6158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.338895][T10277] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.356838][T10277] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.369321][T10287] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 134.385313][T10287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.400778][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 134.416566][T10287] bond3 (unregistering): Released all slaves [ 134.470534][T10289] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #18: comm syz.8.2347: corrupted inode contents [ 134.482626][T10289] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #18: comm syz.8.2347: mark_inode_dirty error [ 134.497757][T10289] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #18: comm syz.8.2347: corrupted inode contents [ 134.511381][T10289] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #18: comm syz.8.2347: mark_inode_dirty error [ 134.519327][T10291] can0: slcan on ttyS3. [ 134.525722][T10289] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #18: comm syz.8.2347: mark inode dirty (error -117) [ 134.548138][T10289] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 134.610322][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.620387][T10290] can0 (unregistered): slcan off ttyS3. [ 134.651304][T10295] serio: Serial port ptm0 [ 134.660352][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2355'. [ 134.669445][T10300] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2355'. [ 134.678994][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2355'. [ 134.688085][T10300] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2355'. [ 134.701554][T10302] loop8: detected capacity change from 0 to 512 [ 134.712644][T10302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.726786][T10302] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.755940][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.828164][T10320] loop7: detected capacity change from 0 to 16384 [ 134.859925][T10325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=10325 comm=syz.8.2357 [ 134.939604][T10320] blk_print_req_error: 16 callbacks suppressed [ 134.939621][T10320] I/O error, dev loop7, sector 11008 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 134.957326][T10320] I/O error, dev loop7, sector 11264 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 134.967573][T10320] I/O error, dev loop7, sector 11008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.977173][T10320] buffer_io_error: 2456 callbacks suppressed [ 134.977246][T10320] Buffer I/O error on dev loop7, logical block 1376, async page read [ 135.027149][T10319] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 135.036903][T10319] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 135.045276][T10319] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 135.053598][T10319] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 135.061936][T10319] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 135.070258][T10319] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 135.078586][T10319] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 135.086982][T10319] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 135.095342][T10319] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 135.103668][T10319] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 135.114631][T10319] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 135.127966][T10319] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 135.140960][T10319] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 135.153478][T10319] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 135.165698][T10319] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 135.178584][T10319] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 135.225114][T10339] loop4: detected capacity change from 0 to 512 [ 135.236247][T10339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.248967][T10339] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.330919][T10342] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.2365: corrupted inode contents [ 135.343446][T10342] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.2365: mark_inode_dirty error [ 135.355019][T10342] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.2365: corrupted inode contents [ 135.367942][T10342] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.2365: mark_inode_dirty error [ 135.380227][T10342] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.2365: mark inode dirty (error -117) [ 135.393009][T10342] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 135.416671][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.656519][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.666806][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.689937][T10351] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.731241][T10351] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.766699][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2370'. [ 135.778978][T10361] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.787235][T10361] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.795479][T10361] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.803716][T10361] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.812950][T10361] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.821530][T10361] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.830048][T10361] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.838556][T10361] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.859293][T10351] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.955720][T10351] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.011994][T10351] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.023836][T10351] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.036377][T10351] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.055547][T10351] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.204991][T10383] loop7: detected capacity change from 0 to 16384 [ 136.789602][T10421] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.866049][T10421] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.915981][T10421] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.944638][T10425] IPVS: Error connecting to the multicast addr [ 136.975708][T10421] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.975870][T10427] loop3: detected capacity change from 0 to 2048 [ 137.051923][T10421] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.065208][T10421] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.076852][T10421] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.089757][T10421] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.168394][T10427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.183884][T10427] random: crng reseeded on system resumption [ 137.502681][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.648590][T10446] loop7: detected capacity change from 0 to 16384 [ 137.692366][T10451] netlink: 'syz.8.2404': attribute type 10 has an invalid length. [ 137.707345][T10450] smc: net device bond0 applied user defined pnetid SYZ0 [ 137.745212][T10451] team0: Port device dummy0 added [ 137.764284][T10450] smc: net device bond0 erased user defined pnetid SYZ0 [ 137.801940][T10451] netlink: 'syz.8.2404': attribute type 10 has an invalid length. [ 137.836985][T10451] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 137.868431][T10451] team0: Failed to send options change via netlink (err -105) [ 137.884284][T10451] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 137.903536][T10451] team0: Port device dummy0 removed [ 137.919276][T10451] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.981595][T10467] loop4: detected capacity change from 0 to 512 [ 138.009034][T10467] EXT4-fs: inline encryption not supported [ 138.020815][T10467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.057469][T10473] loop3: detected capacity change from 0 to 1024 [ 138.088865][T10473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.122225][T10481] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.139216][T10483] loop8: detected capacity change from 0 to 1024 [ 138.148966][T10483] EXT4-fs: Ignoring removed orlov option [ 138.156464][T10473] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 138.178506][T10483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.195078][T10473] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 138.207305][T10473] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.207305][T10473] [ 138.216962][T10473] EXT4-fs (loop3): Total free blocks count 0 [ 138.222941][T10473] EXT4-fs (loop3): Free/Dirty block details [ 138.228938][T10473] EXT4-fs (loop3): free_blocks=16 [ 138.233987][T10473] EXT4-fs (loop3): dirty_blocks=0 [ 138.239052][T10473] EXT4-fs (loop3): Block reservation details [ 138.245090][T10473] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 138.270483][T10481] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.281217][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.321019][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.331536][T10489] smc: net device bond0 applied user defined pnetid SYZ0 [ 138.339882][T10481] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.345903][T10489] smc: net device bond0 erased user defined pnetid SYZ0 [ 138.363566][T10493] loop7: detected capacity change from 0 to 16384 [ 138.425721][T10481] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.477190][T10502] netlink: 'syz.1.2427': attribute type 10 has an invalid length. [ 138.502924][T10502] team0: Port device dummy0 added [ 138.518239][T10502] netlink: 'syz.1.2427': attribute type 10 has an invalid length. [ 138.521804][T10481] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.551465][T10502] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.585634][T10502] team0: Failed to send options change via netlink (err -105) [ 138.604491][T10502] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.615318][T10502] team0: Port device dummy0 removed [ 138.620804][T10512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10512 comm=syz.3.2428 [ 138.622694][T10502] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.670349][T10481] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.688602][T10512] __nla_validate_parse: 9 callbacks suppressed [ 138.688617][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'. [ 138.703781][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2428'. [ 138.726336][T10481] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.798875][T10481] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.837672][T10529] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2431'. [ 138.878716][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 138.878730][ T29] audit: type=1400 audit(2000000086.154:3556): avc: denied { ioctl } for pid=10530 comm="syz.1.2432" path="socket:[30151]" dev="sockfs" ino=30151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.940827][ T29] audit: type=1326 audit(2000000086.214:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 138.965174][ T29] audit: type=1326 audit(2000000086.214:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 138.985664][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2434'. [ 139.002884][T10540] loop7: detected capacity change from 0 to 1024 [ 139.003034][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2434'. [ 139.015604][ T29] audit: type=1326 audit(2000000086.214:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 139.030504][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2434'. [ 139.042171][ T29] audit: type=1326 audit(2000000086.214:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 139.074592][ T29] audit: type=1326 audit(2000000086.214:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 139.098247][ T29] audit: type=1326 audit(2000000086.244:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 139.107155][T10540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.121836][ T29] audit: type=1326 audit(2000000086.244:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 139.158055][ T29] audit: type=1326 audit(2000000086.244:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 139.158333][T10540] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 139.182052][ T29] audit: type=1326 audit(2000000086.244:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8d83e929 code=0x7ffc0000 [ 139.220597][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2434'. [ 139.221042][T10540] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 139.241655][T10540] EXT4-fs (loop7): This should not happen!! Data will be lost [ 139.241655][T10540] [ 139.251926][T10540] EXT4-fs (loop7): Total free blocks count 0 [ 139.258026][T10540] EXT4-fs (loop7): Free/Dirty block details [ 139.264112][T10540] EXT4-fs (loop7): free_blocks=16 [ 139.269258][T10540] EXT4-fs (loop7): dirty_blocks=0 [ 139.274314][T10540] EXT4-fs (loop7): Block reservation details [ 139.280882][T10540] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 139.289949][T10547] loop8: detected capacity change from 0 to 512 [ 139.298285][T10547] EXT4-fs: Ignoring removed nobh option [ 139.315727][ T6158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.326362][T10547] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #3: comm syz.8.2437: corrupted inode contents [ 139.339671][T10547] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #3: comm syz.8.2437: mark_inode_dirty error [ 139.352686][T10547] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #3: comm syz.8.2437: corrupted inode contents [ 139.373146][T10547] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.2437: mark_inode_dirty error [ 139.385487][T10547] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2437: Failed to acquire dquot type 0 [ 139.389044][T10555] smc: net device bond0 applied user defined pnetid SYZ0 [ 139.398753][T10547] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.2437: corrupted inode contents [ 139.413236][T10555] smc: net device bond0 erased user defined pnetid SYZ0 [ 139.423398][T10547] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #16: comm syz.8.2437: mark_inode_dirty error [ 139.436243][T10547] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.2437: corrupted inode contents [ 139.449269][T10547] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.2437: mark_inode_dirty error [ 139.461945][T10547] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.2437: corrupted inode contents [ 139.475728][T10547] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 139.487245][T10559] loop7: detected capacity change from 0 to 16384 [ 139.499920][T10547] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.2437: corrupted inode contents [ 139.532063][T10547] EXT4-fs error (device loop8): ext4_truncate:4597: inode #16: comm syz.8.2437: mark_inode_dirty error [ 139.563872][T10547] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 139.585099][T10547] EXT4-fs (loop8): 1 truncate cleaned up [ 139.591163][T10547] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.634894][T10547] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.685431][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.881426][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.896223][T10587] pim6reg1: entered promiscuous mode [ 139.901552][T10587] pim6reg1: entered allmulticast mode [ 139.928859][T10589] tipc: New replicast peer: 0.0.255.255 [ 139.929492][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.935137][T10589] tipc: Enabled bearer , priority 10 [ 140.689249][ T3310] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 140.700194][ T3310] CPU: 1 UID: 0 PID: 3310 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 140.700221][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.700300][ T3310] Call Trace: [ 140.700308][ T3310] [ 140.700316][ T3310] __dump_stack+0x1d/0x30 [ 140.700336][ T3310] dump_stack_lvl+0xe8/0x140 [ 140.700355][ T3310] dump_stack+0x15/0x1b [ 140.700369][ T3310] dump_header+0x81/0x220 [ 140.700455][ T3310] oom_kill_process+0x334/0x3f0 [ 140.700485][ T3310] out_of_memory+0x979/0xb80 [ 140.700513][ T3310] try_charge_memcg+0x5e6/0x9e0 [ 140.700537][ T3310] charge_memcg+0x51/0xc0 [ 140.700647][ T3310] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 140.700774][ T3310] __read_swap_cache_async+0x1df/0x350 [ 140.700806][ T3310] swap_cluster_readahead+0x277/0x3e0 [ 140.700891][ T3310] swapin_readahead+0xde/0x6f0 [ 140.700920][ T3310] ? __filemap_get_folio+0x4f7/0x6b0 [ 140.700956][ T3310] ? next_uptodate_folio+0x81c/0x890 [ 140.700974][ T3310] ? swap_cache_get_folio+0x77/0x200 [ 140.701002][ T3310] do_swap_page+0x301/0x2430 [ 140.701022][ T3310] ? css_rstat_updated+0xcd/0x5b0 [ 140.701055][ T3310] ? __pfx_default_wake_function+0x10/0x10 [ 140.701082][ T3310] handle_mm_fault+0x9a5/0x2be0 [ 140.701109][ T3310] ? mas_walk+0xf2/0x120 [ 140.701138][ T3310] do_user_addr_fault+0x636/0x1090 [ 140.701227][ T3310] exc_page_fault+0x62/0xa0 [ 140.701253][ T3310] asm_exc_page_fault+0x26/0x30 [ 140.701272][ T3310] RIP: 0033:0x7ffb74875977 [ 140.701287][ T3310] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 28 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 fd e7 00 48 01 d1 39 7c 24 [ 140.701303][ T3310] RSP: 002b:00007ffff9d962f0 EFLAGS: 00010202 [ 140.701363][ T3310] RAX: 0000001b32020000 RBX: 00000000000004a1 RCX: 00000000000222e0 [ 140.701375][ T3310] RDX: 00000000094ec5b3 RSI: 00007ffff9d96380 RDI: 0000000000000009 [ 140.701388][ T3310] RBP: 00007ffff9d9632c R08: 0000000023818e0c R09: 7fffffffffffffff [ 140.701402][ T3310] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 140.701414][ T3310] R13: 00000000000927c0 R14: 0000000000022210 R15: 00007ffff9d96380 [ 140.701432][ T3310] [ 140.701439][ T3310] memory: usage 307200kB, limit 307200kB, failcnt 294 [ 140.922978][ T3310] memory+swap: usage 307852kB, limit 9007199254740988kB, failcnt 0 [ 140.930941][ T3310] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 140.938266][ T3310] Memory cgroup stats for /syz1: [ 140.940099][ T3310] cache 4096 [ 140.948293][ T3310] rss 0 [ 140.951057][ T3310] shmem 0 [ 140.954102][ T3310] mapped_file 0 [ 140.957558][ T3310] dirty 0 [ 140.960484][ T3310] writeback 0 [ 140.963759][ T3310] workingset_refault_anon 30 [ 140.968385][ T3310] workingset_refault_file 193 [ 140.973049][ T3310] swap 667648 [ 140.976375][ T3310] swapcached 0 [ 140.979731][ T3310] pgpgin 209861 [ 140.983178][ T3310] pgpgout 209860 [ 140.986889][ T3310] pgfault 152333 [ 140.990487][ T3310] pgmajfault 33 [ 140.993972][ T3310] inactive_anon 0 [ 140.997643][ T3310] active_anon 0 [ 141.001095][ T3310] inactive_file 0 [ 141.004781][ T3310] active_file 4096 [ 141.008493][ T3310] unevictable 0 [ 141.011947][ T3310] hierarchical_memory_limit 314572800 [ 141.017376][ T3310] hierarchical_memsw_limit 9223372036854771712 [ 141.023616][ T3310] total_cache 4096 [ 141.025570][T10597] smc: net device bond0 applied user defined pnetid SYZ0 [ 141.027339][ T3310] total_rss 0 [ 141.036982][T10597] smc: net device bond0 erased user defined pnetid SYZ0 [ 141.037600][ T3310] total_shmem 0 [ 141.037609][ T3310] total_mapped_file 0 [ 141.051950][ T3310] total_dirty 0 [ 141.053986][ T7877] tipc: Node number set to 484222812 [ 141.055398][ T3310] total_writeback 0 [ 141.064456][ T3310] total_workingset_refault_anon 30 [ 141.069688][ T3310] total_workingset_refault_file 193 [ 141.074879][ T3310] total_swap 667648 [ 141.078732][ T3310] total_swapcached 0 [ 141.082622][ T3310] total_pgpgin 209861 [ 141.086626][ T3310] total_pgpgout 209860 [ 141.090711][ T3310] total_pgfault 152333 [ 141.094797][ T3310] total_pgmajfault 33 [ 141.098751][ T3310] total_inactive_anon 0 [ 141.102880][ T3310] total_active_anon 0 [ 141.106924][ T3310] total_inactive_file 0 [ 141.111104][ T3310] total_active_file 4096 [ 141.115333][ T3310] total_unevictable 0 [ 141.119302][ T3310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2443,pid=10565,uid=0 [ 141.134407][ T3310] Memory cgroup out of memory: Killed process 10565 (syz.1.2443) total-vm:95800kB, anon-rss:936kB, file-rss:22068kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 141.353402][T10612] loop7: detected capacity change from 0 to 16384 [ 141.439530][T10612] blk_print_req_error: 37 callbacks suppressed [ 141.439541][T10612] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 141.456668][T10612] I/O error, dev loop7, sector 11008 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 141.467117][T10612] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.476616][T10612] buffer_io_error: 4346 callbacks suppressed [ 141.476627][T10612] Buffer I/O error on dev loop7, logical block 1344, async page read [ 141.522873][T10623] loop3: detected capacity change from 0 to 512 [ 141.553630][T10611] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 141.564095][T10611] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 141.572470][T10611] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 141.580827][T10611] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 141.589280][T10611] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 141.598284][T10611] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 141.606890][T10611] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 141.612033][T10623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.615421][T10611] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 141.630148][T10623] ext4 filesystem being mounted at /490/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.636742][T10611] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 141.656118][T10611] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 141.667266][T10611] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 141.680309][T10611] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 141.693854][T10611] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 141.706841][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.719816][T10611] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 141.746418][T10611] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 141.758168][T10637] loop3: detected capacity change from 0 to 1024 [ 141.766560][T10637] EXT4-fs: Invalid commit interval 67108869, must be smaller than 21474836 [ 141.769472][T10611] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 141.781307][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 141.804187][T10639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10639 comm=syz.1.2468 [ 141.863173][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 141.872244][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'. [ 141.896871][T10645] loop8: detected capacity change from 0 to 2048 [ 141.918855][T10645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.947357][T10645] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 141.983068][T10645] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 141.995355][T10645] EXT4-fs (loop8): This should not happen!! Data will be lost [ 141.995355][T10645] [ 142.005062][T10645] EXT4-fs (loop8): Total free blocks count 0 [ 142.011191][T10645] EXT4-fs (loop8): Free/Dirty block details [ 142.017177][T10645] EXT4-fs (loop8): free_blocks=2415919504 [ 142.022974][T10645] EXT4-fs (loop8): dirty_blocks=16 [ 142.028156][T10645] EXT4-fs (loop8): Block reservation details [ 142.034165][T10645] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 142.069669][T10663] loop4: detected capacity change from 0 to 1764 [ 142.135069][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.152245][T10671] loop7: detected capacity change from 0 to 1024 [ 142.159836][T10671] EXT4-fs: Invalid commit interval 67108869, must be smaller than 21474836 [ 142.342123][T10692] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.407450][T10692] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.460348][T10692] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.525775][T10692] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.582567][T10712] loop8: detected capacity change from 0 to 1764 [ 142.589960][T10712] iso9660: Bad value for 'block' [ 142.614954][T10692] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.633016][T10692] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.646464][T10692] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.693749][T10692] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.712623][T10726] loop4: detected capacity change from 0 to 512 [ 142.719805][T10726] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 142.729537][T10726] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2506: bad orphan inode 15 [ 142.741326][T10726] ext4_test_bit(bit=14, block=18) = 1 [ 142.746810][T10726] is_bad_inode(inode)=0 [ 142.751047][T10726] NEXT_ORPHAN(inode)=1023 [ 142.755427][T10726] max_ino=32 [ 142.758630][T10726] i_nlink=0 [ 142.763613][T10726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 142.778099][T10726] ext2 filesystem being mounted at /541/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 142.933297][T10750] loop7: detected capacity change from 0 to 1764 [ 142.945306][T10753] netlink: 'syz.1.2517': attribute type 4 has an invalid length. [ 142.966707][T10755] loop8: detected capacity change from 0 to 1764 [ 142.974816][T10750] iso9660: Bad value for 'block' [ 142.975106][T10753] netlink: 'syz.1.2517': attribute type 4 has an invalid length. [ 143.031120][T10762] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 143.042302][T10761] IPVS: stopping master sync thread 10762 ... [ 143.148339][T10782] loop7: detected capacity change from 0 to 16384 [ 143.450166][T10800] netlink: 'syz.1.2537': attribute type 9 has an invalid length. [ 143.562155][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 143.581753][T10808] loop4: detected capacity change from 0 to 1024 [ 143.588502][T10808] EXT4-fs: Ignoring removed bh option [ 143.594346][T10808] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 143.606349][T10808] EXT4-fs error (device loop4): ext4_quota_enable:7124: comm syz.4.2541: inode #2304: comm syz.4.2541: iget: illegal inode # [ 143.619518][T10808] EXT4-fs (loop4): Remounting filesystem read-only [ 143.626145][T10808] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 143.641798][T10808] EXT4-fs (loop4): mount failed [ 143.889096][T10822] __nla_validate_parse: 5 callbacks suppressed [ 143.889111][T10822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2547'. [ 143.910712][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2547'. [ 143.957681][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 143.957694][ T29] audit: type=1326 audit(2000000091.235:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.4.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 144.020084][ T29] audit: type=1326 audit(2000000091.235:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.4.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 144.043641][ T29] audit: type=1326 audit(2000000091.235:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.4.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 144.067141][ T29] audit: type=1326 audit(2000000091.235:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.4.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 144.090678][ T29] audit: type=1326 audit(2000000091.245:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.4.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 144.177620][T10835] loop4: detected capacity change from 0 to 512 [ 144.184256][T10835] EXT4-fs: Ignoring removed orlov option [ 144.190671][T10835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.200956][T10835] EXT4-fs (loop4): orphan cleanup on readonly fs [ 144.211106][T10835] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2554: bg 0: block 248: padding at end of block bitmap is not set [ 144.211477][T10846] SELinux: ebitmap: truncated map [ 144.227284][T10835] Quota error (device loop4): write_blk: dquota write failed [ 144.232181][T10846] SELinux: failed to load policy [ 144.238478][T10835] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 144.252764][T10835] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2554: Failed to acquire dquot type 1 [ 144.279452][T10835] EXT4-fs (loop4): 1 truncate cleaned up [ 144.302084][T10835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.307978][T10853] loop7: detected capacity change from 0 to 2048 [ 144.331812][T10853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.351949][T10835] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 144.361817][T10853] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.436217][T10835] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 144.471998][T10835] ext4 filesystem being remounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.502778][ T29] audit: type=1326 audit(2000000091.745:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7499e929 code=0x7ffc0000 [ 144.526345][ T29] audit: type=1326 audit(2000000091.745:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb7499e929 code=0x7ffc0000 [ 144.549923][ T29] audit: type=1326 audit(2000000091.745:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7499e929 code=0x7ffc0000 [ 144.608923][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.665683][ T7437] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:59: bg 0: block 345: padding at end of block bitmap is not set [ 144.728438][ T7437] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 758 with error 117 [ 144.741200][ T7437] EXT4-fs (loop7): This should not happen!! Data will be lost [ 144.741200][ T7437] [ 144.973374][T10874] SELinux: ebitmap: truncated map [ 144.980976][T10874] SELinux: failed to load policy [ 145.081405][T10889] loop8: detected capacity change from 0 to 512 [ 145.095853][T10889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.109972][T10889] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.137540][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.205896][T10899] loop3: detected capacity change from 0 to 512 [ 145.231608][T10901] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2576'. [ 145.243573][T10899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.262860][T10899] ext4 filesystem being mounted at /495/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.324003][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2581'. [ 145.375820][T10913] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2579'. [ 145.416190][T10910] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.2574: corrupted inode contents [ 145.428298][T10910] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.2574: mark_inode_dirty error [ 145.443135][ T6158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.457038][T10910] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.2574: corrupted inode contents [ 145.471571][T10910] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.2574: mark_inode_dirty error [ 145.485264][T10910] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.2574: mark inode dirty (error -117) [ 145.545541][T10910] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 145.585036][T10926] SELinux: ebitmap: truncated map [ 145.590076][T10925] wg2: entered promiscuous mode [ 145.595026][T10925] wg2: entered allmulticast mode [ 145.611110][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.623045][T10926] SELinux: failed to load policy [ 145.702877][T10935] loop8: detected capacity change from 0 to 2048 [ 145.755838][T10935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.780080][T10935] EXT4-fs (loop8): shut down requested (0) [ 145.832358][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.867365][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2598'. [ 145.886871][T10957] netlink: 'syz.4.2599': attribute type 4 has an invalid length. [ 145.896023][T10953] x_tables: ip_tables: udp match: only valid for protocol 17 [ 145.912828][T10961] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2601'. [ 145.920955][T10957] netlink: 'syz.4.2599': attribute type 4 has an invalid length. [ 145.990439][T10963] SELinux: ebitmap: truncated map [ 146.003102][T10963] SELinux: failed to load policy [ 146.010150][T10971] netlink: 'syz.1.2609': attribute type 13 has an invalid length. [ 146.160168][T10981] loop7: detected capacity change from 0 to 128 [ 146.209757][T10981] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.229518][T10981] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.265410][ T6158] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.013880][T11012] wg2: left promiscuous mode [ 147.018569][T11012] wg2: left allmulticast mode [ 147.048988][T11012] wg2: entered promiscuous mode [ 147.054499][T11012] wg2: entered allmulticast mode [ 147.130466][T11022] gtp0: entered promiscuous mode [ 147.201578][T11033] loop4: detected capacity change from 0 to 512 [ 147.208962][T11033] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.215550][T11033] EXT4-fs: Ignoring removed orlov option [ 147.228005][T11033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.267711][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.288822][T11026] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2631'. [ 147.289387][T11043] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 147.391469][T11058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2643'. [ 147.484198][T11061] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.493342][T11061] batman_adv: batadv0: Interface activated: team0 [ 147.503737][T11061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.541429][T11071] loop8: detected capacity change from 0 to 128 [ 147.550114][T11071] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.562697][T11071] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.629487][ T8574] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.989138][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 147.996666][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.004112][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.008359][T11104] loop3: detected capacity change from 0 to 128 [ 148.011607][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.019958][T11104] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.025285][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025384][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025409][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025433][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025457][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025477][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025502][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025573][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025592][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025617][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025644][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025712][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025737][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025809][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025833][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.025858][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.039595][T11104] ext4 filesystem being mounted at /510/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.045304][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.045328][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.181314][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.188748][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.196215][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.203573][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.210980][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.218388][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.225837][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.233734][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.241196][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.248670][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.256076][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.263477][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.270873][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.278260][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.285645][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.293045][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.300435][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.307877][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.315330][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.322812][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.330243][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 148.338958][ T23] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 148.348898][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.742711][T11142] netlink: 404 bytes leftover after parsing attributes in process `syz.7.2676'. [ 149.138619][T11159] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2694'. [ 149.138759][T11160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2682'. [ 149.158840][T11160] x_tables: ip_tables: udp match: only valid for protocol 17 [ 149.196000][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 149.196012][ T29] audit: type=1326 audit(2000000096.475:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.225903][ T29] audit: type=1326 audit(2000000096.475:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.250056][ T29] audit: type=1326 audit(2000000096.475:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.273549][ T29] audit: type=1326 audit(2000000096.475:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.297664][ T29] audit: type=1326 audit(2000000096.475:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.321163][ T29] audit: type=1326 audit(2000000096.475:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.345331][ T29] audit: type=1326 audit(2000000096.475:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.369628][ T29] audit: type=1326 audit(2000000096.525:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.393725][ T29] audit: type=1326 audit(2000000096.525:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.417376][ T29] audit: type=1326 audit(2000000096.525:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f543e929 code=0x7ffc0000 [ 149.636012][T11182] loop8: detected capacity change from 0 to 2048 [ 149.684247][T11182] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.700176][T11182] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.796918][T11192] loop4: detected capacity change from 0 to 164 [ 149.825736][T11192] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.844454][ T7399] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:21: bg 0: block 345: padding at end of block bitmap is not set [ 149.871967][ T7399] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 299 with error 117 [ 149.884670][ T7399] EXT4-fs (loop8): This should not happen!! Data will be lost [ 149.884670][ T7399] [ 149.911032][ T7399] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 315 with max blocks 1 with error 117 [ 149.923617][ T7399] EXT4-fs (loop8): This should not happen!! Data will be lost [ 149.923617][ T7399] [ 150.391138][T11224] netlink: 'syz.4.2709': attribute type 13 has an invalid length. [ 150.927846][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.036585][T11252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.131624][T11256] ip6gre3: entered allmulticast mode [ 151.342725][T11275] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2731'. [ 151.407685][T11280] loop4: detected capacity change from 0 to 2048 [ 151.427287][T11282] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2743'. [ 151.455086][T11280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.467373][T11280] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.571404][ T7418] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:40: bg 0: block 345: padding at end of block bitmap is not set [ 151.590570][ T7418] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 557 with error 117 [ 151.603255][ T7418] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.603255][ T7418] [ 151.678910][ T7437] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 573 with max blocks 1 with error 28 [ 151.691443][ T7437] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.691443][ T7437] [ 151.701129][ T7437] EXT4-fs (loop4): Total free blocks count 0 [ 151.707205][ T7437] EXT4-fs (loop4): Free/Dirty block details [ 151.713103][ T7437] EXT4-fs (loop4): free_blocks=0 [ 151.718130][ T7437] EXT4-fs (loop4): dirty_blocks=16 [ 151.723242][ T7437] EXT4-fs (loop4): Block reservation details [ 151.847260][T11294] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.861301][T11292] smc: net device bond0 applied user defined pnetid SYZ0 [ 151.869350][T11292] smc: net device bond0 erased user defined pnetid SYZ0 [ 151.899599][T11294] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.965715][T11294] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.025667][T11294] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.128030][T11294] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.166754][T11294] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.181824][T11294] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.202576][T11294] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.243514][T11316] syzkaller1: entered promiscuous mode [ 152.249231][T11316] syzkaller1: entered allmulticast mode [ 152.250266][T11280] syz.4.2732 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 152.269065][T11280] CPU: 1 UID: 0 PID: 11280 Comm: syz.4.2732 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 152.269091][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.269139][T11280] Call Trace: [ 152.269144][T11280] [ 152.269152][T11280] __dump_stack+0x1d/0x30 [ 152.269174][T11280] dump_stack_lvl+0xe8/0x140 [ 152.269194][T11280] dump_stack+0x15/0x1b [ 152.269211][T11280] dump_header+0x81/0x220 [ 152.269311][T11280] oom_kill_process+0x334/0x3f0 [ 152.269343][T11280] out_of_memory+0x979/0xb80 [ 152.269373][T11280] try_charge_memcg+0x5e6/0x9e0 [ 152.269451][T11280] obj_cgroup_charge_pages+0xa6/0x150 [ 152.269529][T11280] __memcg_kmem_charge_page+0x9f/0x170 [ 152.269605][T11280] __alloc_frozen_pages_noprof+0x188/0x360 [ 152.269718][T11280] alloc_pages_mpol+0xb3/0x250 [ 152.269799][T11280] alloc_pages_noprof+0x90/0x130 [ 152.269837][T11280] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 152.269882][T11280] __kvmalloc_node_noprof+0x30f/0x4e0 [ 152.269981][T11280] ? ip_set_alloc+0x1f/0x30 [ 152.270011][T11280] ? ip_set_alloc+0x1f/0x30 [ 152.270074][T11280] ? __kmalloc_cache_noprof+0x189/0x320 [ 152.270105][T11280] ip_set_alloc+0x1f/0x30 [ 152.270182][T11280] hash_netiface_create+0x282/0x740 [ 152.270243][T11280] ? __pfx_hash_netiface_create+0x10/0x10 [ 152.270268][T11280] ip_set_create+0x3cc/0x960 [ 152.270301][T11280] ? __nla_parse+0x40/0x60 [ 152.270346][T11280] nfnetlink_rcv_msg+0x4c3/0x590 [ 152.270366][T11280] ? put_dec+0xd3/0xe0 [ 152.270398][T11280] ? selinux_capable+0x1f9/0x270 [ 152.270424][T11280] netlink_rcv_skb+0x123/0x220 [ 152.270491][T11280] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 152.270516][T11280] nfnetlink_rcv+0x16b/0x1690 [ 152.270537][T11280] ? sprintf+0x88/0xb0 [ 152.270558][T11280] ? this_cpu_in_panic+0x2d/0x40 [ 152.270662][T11280] ? _prb_read_valid+0x8c1/0x920 [ 152.270713][T11280] ? prb_read_valid+0x3c/0x60 [ 152.270737][T11280] ? __rcu_read_unlock+0x4f/0x70 [ 152.270754][T11280] ? __account_obj_stock+0x211/0x350 [ 152.270837][T11280] ? should_fail_ex+0x30/0x280 [ 152.270862][T11280] ? selinux_nlmsg_lookup+0x99/0x890 [ 152.270970][T11280] ? selinux_netlink_send+0x59f/0x5f0 [ 152.270994][T11280] ? __rcu_read_unlock+0x34/0x70 [ 152.271011][T11280] ? __netlink_lookup+0x266/0x2a0 [ 152.271108][T11280] netlink_unicast+0x59e/0x670 [ 152.271210][T11280] netlink_sendmsg+0x58b/0x6b0 [ 152.271269][T11280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.271285][T11280] __sock_sendmsg+0x145/0x180 [ 152.271306][T11280] ____sys_sendmsg+0x31e/0x4e0 [ 152.271342][T11280] ___sys_sendmsg+0x17b/0x1d0 [ 152.271366][T11280] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 152.271436][T11280] __x64_sys_sendmsg+0xd4/0x160 [ 152.271465][T11280] x64_sys_call+0x2999/0x2fb0 [ 152.271483][T11280] do_syscall_64+0xd2/0x200 [ 152.271497][T11280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.271538][T11280] ? clear_bhb_loop+0x40/0x90 [ 152.271555][T11280] ? clear_bhb_loop+0x40/0x90 [ 152.271623][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.271720][T11280] RIP: 0033:0x7fd6f543e929 [ 152.271733][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.271779][T11280] RSP: 002b:00007fd6f3aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.271799][T11280] RAX: ffffffffffffffda RBX: 00007fd6f5665fa0 RCX: 00007fd6f543e929 [ 152.271809][T11280] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 152.271847][T11280] RBP: 00007fd6f54c0b39 R08: 0000000000000000 R09: 0000000000000000 [ 152.271857][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.271868][T11280] R13: 0000000000000000 R14: 00007fd6f5665fa0 R15: 00007fffcb7f2cc8 [ 152.271883][T11280] [ 152.271890][T11280] memory: usage 307200kB, limit 307200kB, failcnt 276 [ 152.334568][T11320] loop3: detected capacity change from 0 to 512 [ 152.338001][T11280] memory+swap: usage 308440kB, limit 9007199254740988kB, failcnt 0 [ 152.375811][T11320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.379132][T11280] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 152.386200][T11320] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.389030][T11280] Memory cgroup stats for /syz4: [ 152.695737][T11280] cache 28672 [ 152.704640][T11280] rss 0 [ 152.707405][T11280] shmem 0 [ 152.710337][T11280] mapped_file 0 [ 152.713820][T11280] dirty 0 [ 152.716800][T11280] writeback 0 [ 152.720162][T11280] workingset_refault_anon 51 [ 152.724843][T11280] workingset_refault_file 101 [ 152.729513][T11280] swap 1269760 [ 152.733005][T11280] swapcached 4096 [ 152.737293][T11280] pgpgin 151107 [ 152.740765][T11280] pgpgout 151099 [ 152.744401][T11280] pgfault 176696 [ 152.747946][T11280] pgmajfault 41 [ 152.751410][T11280] inactive_anon 4096 [ 152.755414][T11280] active_anon 0 [ 152.758864][T11280] inactive_file 28672 [ 152.763039][T11280] active_file 0 [ 152.767135][T11280] unevictable 0 [ 152.768349][T11325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2747'. [ 152.770572][T11280] hierarchical_memory_limit 314572800 [ 152.785198][T11280] hierarchical_memsw_limit 9223372036854771712 [ 152.791351][T11280] total_cache 28672 [ 152.795819][T11280] total_rss 0 [ 152.799119][T11280] total_shmem 0 [ 152.802572][T11280] total_mapped_file 0 [ 152.806597][T11280] total_dirty 0 [ 152.810048][T11280] total_writeback 0 [ 152.813929][T11280] total_workingset_refault_anon 51 [ 152.819050][T11280] total_workingset_refault_file 101 [ 152.824729][T11280] total_swap 1269760 [ 152.828606][T11280] total_swapcached 4096 [ 152.832733][T11280] total_pgpgin 151107 [ 152.836758][T11280] total_pgpgout 151099 [ 152.841090][T11280] total_pgfault 176696 [ 152.845165][T11280] total_pgmajfault 41 [ 152.849190][T11280] total_inactive_anon 4096 [ 152.853580][T11280] total_active_anon 0 [ 152.858133][T11280] total_inactive_file 28672 [ 152.862630][T11280] total_active_file 0 [ 152.866619][T11280] total_unevictable 0 [ 152.870577][T11280] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2732,pid=11279,uid=0 [ 152.885654][T11280] Memory cgroup out of memory: Killed process 11279 (syz.4.2732) total-vm:95932kB, anon-rss:936kB, file-rss:22264kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 152.909876][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.919583][T11327] netlink: 'syz.1.2749': attribute type 29 has an invalid length. [ 152.929029][T11328] netlink: 'syz.1.2749': attribute type 29 has an invalid length. [ 152.938036][T11329] netlink: 'syz.1.2749': attribute type 29 has an invalid length. [ 152.960177][T11327] netlink: 'syz.1.2749': attribute type 29 has an invalid length. [ 153.062763][T11341] loop7: detected capacity change from 0 to 1024 [ 153.095880][T11341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.114205][T11341] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.2754: Allocating blocks 385-513 which overlap fs metadata [ 153.134833][T11341] EXT4-fs (loop7): pa ffff888106ebc2a0: logic 16, phys. 129, len 24 [ 153.142988][T11341] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 153.189268][ T6158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.567237][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 153.692242][T11394] lo speed is unknown, defaulting to 1000 [ 153.699468][T11394] lo speed is unknown, defaulting to 1000 [ 153.708161][T11394] lo speed is unknown, defaulting to 1000 [ 153.723707][T11394] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.744576][T11394] lo speed is unknown, defaulting to 1000 [ 153.752546][T11394] lo speed is unknown, defaulting to 1000 [ 153.761126][T11394] lo speed is unknown, defaulting to 1000 [ 153.769872][T11394] lo speed is unknown, defaulting to 1000 [ 153.780357][T11394] lo speed is unknown, defaulting to 1000 [ 153.957638][T11409] loop8: detected capacity change from 0 to 512 [ 153.965177][T11409] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 153.976623][T11409] EXT4-fs (loop8): 1 truncate cleaned up [ 153.982625][T11409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.022750][ T8574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.124520][T11416] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.177019][T11416] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.196923][T11423] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2786'. [ 154.275615][T11416] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.335542][T11416] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.372108][T11425] lo speed is unknown, defaulting to 1000 [ 154.467638][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 154.467653][ T29] audit: type=1400 audit(2000000101.745:4340): avc: denied { create } for pid=11429 comm="syz.7.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 154.660356][T11426] ================================================================== [ 154.668470][T11426] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 154.677067][T11426] [ 154.679389][T11426] write to 0xffff888113ece828 of 8 bytes by task 11419 on cpu 1: [ 154.687098][T11426] shmem_file_splice_read+0x470/0x600 [ 154.692470][T11426] splice_direct_to_actor+0x26c/0x680 [ 154.697853][T11426] do_splice_direct+0xda/0x150 [ 154.702615][T11426] do_sendfile+0x380/0x650 [ 154.707030][T11426] __x64_sys_sendfile64+0x105/0x150 [ 154.712229][T11426] x64_sys_call+0xb39/0x2fb0 [ 154.716821][T11426] do_syscall_64+0xd2/0x200 [ 154.721324][T11426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.727217][T11426] [ 154.729538][T11426] write to 0xffff888113ece828 of 8 bytes by task 11426 on cpu 0: [ 154.737255][T11426] shmem_file_splice_read+0x470/0x600 [ 154.742626][T11426] splice_direct_to_actor+0x26c/0x680 [ 154.748010][T11426] do_splice_direct+0xda/0x150 [ 154.752778][T11426] do_sendfile+0x380/0x650 [ 154.757200][T11426] __x64_sys_sendfile64+0x105/0x150 [ 154.762405][T11426] x64_sys_call+0xb39/0x2fb0 [ 154.767006][T11426] do_syscall_64+0xd2/0x200 [ 154.771521][T11426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.777425][T11426] [ 154.779745][T11426] value changed: 0x0000000000006cd3 -> 0x0000000000006cdb [ 154.786845][T11426] [ 154.789159][T11426] Reported by Kernel Concurrency Sanitizer on: [ 154.795300][T11426] CPU: 0 UID: 0 PID: 11426 Comm: syz.1.2796 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 154.807800][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.817868][T11426] ================================================================== [ 156.618509][T11416] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.629438][T11416] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.640292][T11416] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.651093][T11416] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.164505][ T3732] page_pool_release_retry() stalled pool shutdown: id 65, 1 inflight 60 sec