last executing test programs: 5m37.290238237s ago: executing program 3 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 5m37.190026679s ago: executing program 3 (id=278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35b", 0x6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) truncate(&(0x7f0000000080)='./file0\x00', 0x8) 5m37.173256579s ago: executing program 3 (id=280): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x10000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x44, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 5m37.13348307s ago: executing program 3 (id=282): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1f, 0x80000000, 0x800, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@exit]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/file0\x00', 0x100) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000540)={0x100, 0x0, 0x1, 0x0, 0x1, "08cfa4d6139dd65044a4efef1b6a8c67920e71", 0x56, 0xcfd}) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$FIONREAD(r6, 0x541b, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 5m36.167709219s ago: executing program 3 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usbip_server_init(0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) chmod(&(0x7f0000000140)='./file0\x00', 0x4) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x200000000}, 0x18) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x46, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8916, &(0x7f0000000000)) 5m36.029015231s ago: executing program 3 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 5m35.996355802s ago: executing program 32 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 3m37.103756227s ago: executing program 5 (id=3014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500), r1, 0x0, 0x2, 0x4}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) 3m37.097167657s ago: executing program 5 (id=3015): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000440)={@multicast1, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f00000003c0)='t', 0x1}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) unshare(0x20000400) r5 = syz_io_uring_setup(0x4bc7, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x18) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000006147e4b0000080001000000000008000100000000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x20048894) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 3m36.572096067s ago: executing program 5 (id=3021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x18, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x2}]}, 0x18}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1d, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3m36.43046016s ago: executing program 5 (id=3022): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000950016"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r3, 0x0, 0xfffffffffffffffc}, 0x10) unshare(0x62040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r6}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x0) fallocate(r0, 0x0, 0x8, 0x2000402) 3m35.863378991s ago: executing program 5 (id=3029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m35.679081785s ago: executing program 5 (id=3038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) chroot(&(0x7f0000000000)='./file0/../file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x7ff, 0xfff, {{0x38, 0x4, 0x3, 0x7, 0xe0, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x17, 0x2d, [@rand_addr=0xa5, @rand_addr=0x64010101, @multicast1, @multicast1, @private=0xa010101]}, @rr={0x7, 0x13, 0x29, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x54, 0x52, 0x3, 0x8, [{@private=0xa010100, 0x80000001}, {@loopback}, {@rand_addr=0x64010100, 0x117d6a44}, {@loopback, 0x3}, {@private=0xa010101, 0x381}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@remote, 0x2}, {@broadcast, 0x8}, {@empty}]}, @ssrr={0x89, 0x13, 0x7e, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @loopback]}, @generic={0x83, 0xe, "8c92ffb14793be65c0459873"}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x1, [{@multicast2, 0x9}, {@multicast1, 0x708}, {@empty, 0x1}, {@private=0xa010102, 0xfffffffb}, {@multicast1, 0x7f}]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@union={0x4, 0x2, 0x0, 0x5, 0x1, 0x1, [{0x1, 0x4, 0x1c0b}, {0x4, 0x4, 0x2}]}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x2}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @volatile={0x10}, @enum={0xd, 0x4, 0x0, 0x6, 0x4, [{0xd, 0x7fe000}, {0xd, 0x1}, {0x1, 0x69cf}, {0xe, 0x9}]}]}, {0x0, [0x61, 0x5f, 0x30, 0x61]}}, &(0x7f0000000900)=""/134, 0x9a, 0x86, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000380)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0x47, &(0x7f0000000640)=""/71, 0x40f00, 0x15, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000a40)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r0], &(0x7f0000000ac0)=[{0x5, 0x1, 0xc, 0x7}], 0x10, 0x9b}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0xf, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex=r9, r1, 0x2, 0x0, r3, @void, @value=r1, @void, @void, r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m35.642495955s ago: executing program 33 (id=3038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) chroot(&(0x7f0000000000)='./file0/../file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x7ff, 0xfff, {{0x38, 0x4, 0x3, 0x7, 0xe0, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x17, 0x2d, [@rand_addr=0xa5, @rand_addr=0x64010101, @multicast1, @multicast1, @private=0xa010101]}, @rr={0x7, 0x13, 0x29, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x54, 0x52, 0x3, 0x8, [{@private=0xa010100, 0x80000001}, {@loopback}, {@rand_addr=0x64010100, 0x117d6a44}, {@loopback, 0x3}, {@private=0xa010101, 0x381}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@remote, 0x2}, {@broadcast, 0x8}, {@empty}]}, @ssrr={0x89, 0x13, 0x7e, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @loopback]}, @generic={0x83, 0xe, "8c92ffb14793be65c0459873"}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x1, [{@multicast2, 0x9}, {@multicast1, 0x708}, {@empty, 0x1}, {@private=0xa010102, 0xfffffffb}, {@multicast1, 0x7f}]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@union={0x4, 0x2, 0x0, 0x5, 0x1, 0x1, [{0x1, 0x4, 0x1c0b}, {0x4, 0x4, 0x2}]}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x2}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @volatile={0x10}, @enum={0xd, 0x4, 0x0, 0x6, 0x4, [{0xd, 0x7fe000}, {0xd, 0x1}, {0x1, 0x69cf}, {0xe, 0x9}]}]}, {0x0, [0x61, 0x5f, 0x30, 0x61]}}, &(0x7f0000000900)=""/134, 0x9a, 0x86, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000380)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0x47, &(0x7f0000000640)=""/71, 0x40f00, 0x15, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000a40)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r0], &(0x7f0000000ac0)=[{0x5, 0x1, 0xc, 0x7}], 0x10, 0x9b}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0xf, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex=r9, r1, 0x2, 0x0, r3, @void, @value=r1, @void, @void, r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.993338042s ago: executing program 0 (id=7171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000002c0)=@rnullb, 0xee01, &(0x7f0000000400)='./file0\x00') 2.976562272s ago: executing program 0 (id=7172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x800, 0x25dfdbfd, {0xa, 0x0, 0x1c, 0x0, 0xfd, 0x1, 0xff, 0x0, 0x1300}}, 0x1c}, 0x1, 0x0, 0x0, 0x30000001}, 0x20000800) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0240, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) mbind(&(0x7f0000188000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000280), 0x0, 0x2}, 0x20) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.076312279s ago: executing program 0 (id=7182): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000440)={@multicast1, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x78}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x80, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0, 0x10b8}, 0x8000) unshare(0x20000400) r5 = syz_io_uring_setup(0x4bc7, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x18) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000006147e4b000008000100000000000800010000000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x20048894) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 1.897976923s ago: executing program 2 (id=7188): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1.865665494s ago: executing program 2 (id=7189): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) close(r1) 1.858928844s ago: executing program 0 (id=7190): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) close(r1) 1.213961197s ago: executing program 1 (id=7197): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1.213819266s ago: executing program 2 (id=7198): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.213507576s ago: executing program 1 (id=7199): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1.211577776s ago: executing program 2 (id=7200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f0000000380)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 1.176688167s ago: executing program 1 (id=7201): socket$inet6(0xa, 0x80003, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x3, 0xffffdffc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.00957611s ago: executing program 0 (id=7202): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 949.941962ms ago: executing program 2 (id=7203): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 948.652011ms ago: executing program 0 (id=7204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) recvmsg(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x2140) 948.523282ms ago: executing program 2 (id=7205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) recvmsg(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x2140) (fail_nth: 1) 885.331373ms ago: executing program 1 (id=7206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000002c0)=@rnullb, 0xee01, &(0x7f0000000400)='./file0\x00') 879.778763ms ago: executing program 1 (id=7207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 807.564944ms ago: executing program 1 (id=7208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r3, 0x20, &(0x7f0000000180)={&(0x7f00000004c0)=""/178, 0xb2, 0x0, &(0x7f0000000580)=""/179, 0xb3}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x4, @random="09076314ed8e"}, 0x27) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @multicast}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x130) 339.867304ms ago: executing program 4 (id=7216): socket$inet6(0xa, 0x80003, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x3, 0xffffdffc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 299.820725ms ago: executing program 4 (id=7218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000002c0)=@rnullb, 0xee01, &(0x7f0000000400)='./file0\x00') 299.638125ms ago: executing program 4 (id=7219): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 210.416816ms ago: executing program 4 (id=7222): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) dup2(r1, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000000000000000007ff9597bf71a687e516af3e11a806bb715d6c0fef489476ea5021e5f1236d9bce0d556b35628111b2bb1f51d7b90e905ffbcccbf18b4df8fbb5b0ecd6c2ef19b68c94ee00000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4e24}, 0x1400}}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f034000000a000100484d41524b00000008000240000000000900010073797a300094fd48870000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = fsopen(&(0x7f0000000100)='gfs2\x00', 0x0) fsmount(r6, 0x0, 0x8) open(&(0x7f0000000140)='./file0\x00', 0x8900, 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) connect$packet(r2, &(0x7f00000000c0)={0x11, 0x9, r7, 0x1, 0x2, 0x6, @random="9c82ccf511a8"}, 0x14) 137.685488ms ago: executing program 4 (id=7224): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 109.982089ms ago: executing program 6 (id=7227): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000005d25a80", 0x14}], 0x1}, 0x811) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x7fff, 0x10, "62f5fe3de261e467"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0) 83.345859ms ago: executing program 6 (id=7228): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000005d25a80", 0x14}], 0x1}, 0x811) r0 = socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0) 82.918359ms ago: executing program 6 (id=7229): socket$inet6(0xa, 0x80003, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x3, 0xffffdffc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 75.168129ms ago: executing program 4 (id=7230): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000080000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r3, 0x180000000) write$qrtrtun(r0, &(0x7f0000000300)="ca0e80", 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8801080}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r6, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x83, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x8}}, @rann={0x7e, 0x15, {{0x1, 0x4d}, 0x7f, 0x4, @device_b, 0x0, 0x8, 0x1ff}}, @challenge={0x10, 0x1, 0xd9}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0x49}}, @preq={0x82, 0x4c, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5, @device_a, 0xe1, @value=@broadcast, 0xd, 0x4, 0x4, [{{}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @channel_switch={0x25, 0x3, {0x0, 0xb4, 0x3}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0x100) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r11, @ANYBLOB="080003"], 0x80}}, 0x8000) 28.75041ms ago: executing program 6 (id=7231): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES8, @ANYBLOB="4352028b774173baa21d2cbb5e58f14342e9e4fe64d3a9bdc33b475863388ee376992b23c92f8a59aae387e6d4f2b6cf3ef58700692d3239f5416bffb65db90b962f24886c7c947b635402d604db54d05c9efed44a5f00ec6e70165966030d89b6d40b146249470d2a24225bd12172004be600e611680d7aa0520075b4577a723e150a78981e937861fca50293db666640152a6b45f9e2cbad34e6f1f8cf518041a02374c2cba17a25ca4ffb5c609ddde3b290297b757ef4d7fdfd46ec5ae44b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff0f}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read$msr(0xffffffffffffffff, &(0x7f00000001c0)=""/10, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) 28.37613ms ago: executing program 6 (id=7232): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 6 (id=7233): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1) kernel console output (not intermixed with test programs): ace_used:4183: comm syz.4.6639: Allocating blocks 41-42 which overlap fs metadata [ 348.305378][T21713] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6639: Failed to acquire dquot type 1 [ 348.317976][T21713] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 348.333965][T21713] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6639: corrupted inode contents [ 348.346085][T21713] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.6639: mark_inode_dirty error [ 348.357831][T21713] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6639: corrupted inode contents [ 348.369908][T21713] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6639: mark_inode_dirty error [ 348.381812][T21713] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6639: corrupted inode contents [ 348.393971][T21713] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 348.408121][T21713] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6639: corrupted inode contents [ 348.420844][T21713] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.6639: mark_inode_dirty error [ 348.432178][T21713] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 348.441301][T21713] EXT4-fs (loop4): 1 truncate cleaned up [ 348.468794][T21727] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6644'. [ 348.629540][T21750] loop2: detected capacity change from 0 to 512 [ 348.636376][T21750] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.643148][T21750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.651187][T21750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.659610][T21750] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.676712][T21750] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.6655: Allocating blocks 41-42 which overlap fs metadata [ 348.699205][T21755] netlink: '+}[@': attribute type 30 has an invalid length. [ 348.737423][T21750] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6655: Failed to acquire dquot type 1 [ 348.749393][T21750] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 348.778339][T21750] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.6655: corrupted inode contents [ 348.793775][T21750] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.6655: mark_inode_dirty error [ 348.806888][T21750] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.6655: corrupted inode contents [ 348.819596][T21750] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6655: mark_inode_dirty error [ 348.831850][T21750] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.6655: corrupted inode contents [ 348.845486][T21750] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 348.860376][T21750] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.6655: corrupted inode contents [ 348.875281][T21750] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.6655: mark_inode_dirty error [ 348.900571][T21750] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 348.911300][T21750] EXT4-fs (loop2): 1 truncate cleaned up [ 349.141999][T21786] netlink: '+}[@': attribute type 30 has an invalid length. [ 349.480857][T21795] loop2: detected capacity change from 0 to 512 [ 349.488331][T21795] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 349.546951][T21797] loop6: detected capacity change from 0 to 512 [ 349.556056][T21795] EXT4-fs (loop2): 1 truncate cleaned up [ 349.651025][T21797] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.711602][T21797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.763191][T21782] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 349.769764][T21782] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 349.777528][T21782] vhci_hcd vhci_hcd.0: Device attached [ 349.793301][T21797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.801796][T21797] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.939509][T21797] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.6673: Allocating blocks 41-42 which overlap fs metadata [ 350.063140][T21797] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.6673: Allocating blocks 41-42 which overlap fs metadata [ 350.226845][T21802] vhci_hcd: connection closed [ 350.227123][ T146] vhci_hcd: stop threads [ 350.236199][ T146] vhci_hcd: release socket [ 350.240642][ T146] vhci_hcd: disconnect device [ 350.279615][T21797] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.6673: Failed to acquire dquot type 1 [ 350.340968][T21797] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 350.402295][T21797] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.6673: corrupted inode contents [ 350.445467][T21797] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #12: comm syz.6.6673: mark_inode_dirty error [ 350.496001][T21797] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.6673: corrupted inode contents [ 350.534952][T21811] loop0: detected capacity change from 0 to 1024 [ 350.541803][T21811] EXT4-fs: Ignoring removed bh option [ 350.547266][T21811] EXT4-fs: inline encryption not supported [ 350.547474][T21797] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.6673: mark_inode_dirty error [ 350.568276][T21811] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.597778][T21797] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.6673: corrupted inode contents [ 350.672300][T21797] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 350.684804][T21811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 350.698791][T21797] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.6673: corrupted inode contents [ 350.734695][T21797] EXT4-fs error (device loop6): ext4_truncate:4666: inode #12: comm syz.6.6673: mark_inode_dirty error [ 350.765768][T21797] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 350.789272][T21811] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.6676: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.806848][T21797] EXT4-fs (loop6): 1 truncate cleaned up [ 350.882364][T21811] __quota_error: 491 callbacks suppressed [ 350.882378][T21811] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 350.972417][T21811] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.6676: lblock 0 mapped to illegal pblock 48 (length 1) [ 351.011237][T21814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.021643][T21814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.066507][T21811] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 351.075435][T21811] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6676: Failed to acquire dquot type 0 [ 351.148298][T21814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.158707][T21814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.180893][T21811] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 351.226923][T21811] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.6676: mark_inode_dirty error [ 351.243239][T21814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.253601][T21814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.305731][T21811] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 351.349651][T21811] EXT4-fs (loop0): 1 orphan inode deleted [ 351.385436][T21814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.395906][T21814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.521304][ T37] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 351.554404][ T37] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 351.562940][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 351.577441][ T1453] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.585763][ T1453] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.626421][ T1453] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.634920][ T1453] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.651846][ T37] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.660101][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.660274][T21811] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.6676: lblock 0 mapped to illegal pblock 48 (length 1) [ 351.674712][ T37] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.690674][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.787292][T21811] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 351.803975][T21818] loop6: detected capacity change from 0 to 8192 [ 351.821253][T21828] __nla_validate_parse: 2 callbacks suppressed [ 351.821266][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6684'. [ 351.836499][T21828] netlink: 'syz.2.6684': attribute type 30 has an invalid length. [ 351.852085][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.861570][ T37] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.870508][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.879004][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.888061][T21818] loop6: p1 p2[DM] p4 [ 351.892284][T21818] loop6: p1 size 196608 extends beyond EOD, truncated [ 351.901625][T21818] loop6: p2 start 4292936063 is beyond EOD, truncated [ 351.908471][T21818] loop6: p4 size 50331648 extends beyond EOD, truncated [ 351.908751][T21831] loop4: detected capacity change from 0 to 1024 [ 351.925890][T21831] EXT4-fs: Ignoring removed bh option [ 351.931951][T21831] EXT4-fs: inline encryption not supported [ 351.939314][T21831] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.941172][T21835] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 351.951203][ T29] audit: type=1400 audit(1758932181.574:16653): avc: denied { setopt } for pid=21817 comm="syz.6.6680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 351.960926][T21834] IPVS: stopping backup sync thread 21835 ... [ 352.012066][ T29] audit: type=1326 audit(1758932181.632:16654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21836 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64859beec9 code=0x7ffc0000 [ 352.035717][ T29] audit: type=1326 audit(1758932181.632:16655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21836 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64859beec9 code=0x7ffc0000 [ 352.059329][ T29] audit: type=1326 audit(1758932181.642:16656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21836 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64859beec9 code=0x7ffc0000 [ 352.083090][ T29] audit: type=1326 audit(1758932181.642:16657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21836 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64859beec9 code=0x7ffc0000 [ 352.106823][ T29] audit: type=1326 audit(1758932181.642:16658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21836 comm="syz.2.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64859beec9 code=0x7ffc0000 [ 352.108460][T21831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 352.165902][T21831] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.6683: lblock 2 mapped to illegal pblock 2 (length 1) [ 352.208967][T21831] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6683: lblock 0 mapped to illegal pblock 48 (length 1) [ 352.312376][T21831] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6683: Failed to acquire dquot type 0 [ 352.360884][T21831] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 352.372027][T21831] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6683: mark_inode_dirty error [ 352.386816][T21831] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 352.397208][T21831] EXT4-fs (loop4): 1 orphan inode deleted [ 352.435849][ T146] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 352.458640][T21872] loop0: detected capacity change from 0 to 1024 [ 352.473013][ T146] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 352.490207][T21872] EXT4-fs: Ignoring removed bh option [ 352.505854][T21872] EXT4-fs: inline encryption not supported [ 352.522293][T21872] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 352.532949][T21831] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6683: lblock 0 mapped to illegal pblock 48 (length 1) [ 352.598477][T21872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 352.612619][T21872] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.6700: lblock 2 mapped to illegal pblock 2 (length 1) [ 352.626813][T21872] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.6700: lblock 0 mapped to illegal pblock 48 (length 1) [ 352.642266][T21872] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6700: Failed to acquire dquot type 0 [ 352.654127][T21872] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 352.665083][T21872] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.6700: mark_inode_dirty error [ 352.676827][T21872] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 352.688111][T21872] EXT4-fs (loop0): 1 orphan inode deleted [ 352.699922][ T1453] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 352.720527][ T1453] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 352.774861][T21872] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.6700: lblock 0 mapped to illegal pblock 48 (length 1) [ 352.792462][T21882] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 352.803091][T21879] IPVS: stopping backup sync thread 21882 ... [ 353.199884][T21903] loop4: detected capacity change from 0 to 512 [ 353.214415][T21903] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.231463][ T23] usb 3-1: enqueue for inactive port 0 [ 353.239841][ T23] usb 3-1: enqueue for inactive port 0 [ 353.250824][T21903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.283325][T21903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.291881][T21903] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 353.327153][ T23] vhci_hcd: vhci_device speed not set [ 353.338776][T21903] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6711: Allocating blocks 41-42 which overlap fs metadata [ 353.352587][ T10] usb 1-1: enqueue for inactive port 0 [ 353.366760][T21911] IPVS: stopping backup sync thread 21917 ... [ 353.384961][ T10] usb 1-1: enqueue for inactive port 0 [ 353.481555][ T10] vhci_hcd: vhci_device speed not set [ 353.521888][T21903] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6711: Allocating blocks 41-42 which overlap fs metadata [ 353.558307][T21903] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6711: Failed to acquire dquot type 1 [ 353.581947][T21903] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 353.611108][T21903] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6711: corrupted inode contents [ 353.636471][T21903] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.6711: mark_inode_dirty error [ 353.648541][T21903] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6711: corrupted inode contents [ 353.661652][T21903] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6711: mark_inode_dirty error [ 353.673344][T21903] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6711: corrupted inode contents [ 353.688558][T21903] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 353.728543][T21903] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6711: corrupted inode contents [ 353.774474][T21903] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.6711: mark_inode_dirty error [ 353.786294][T21903] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 353.791055][T21945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6729'. [ 353.805638][T21903] EXT4-fs (loop4): 1 truncate cleaned up [ 353.939978][T21962] loop2: detected capacity change from 0 to 1024 [ 353.956354][T21962] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 353.999389][T21962] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6736: Invalid block bitmap block 0 in block_group 0 [ 354.031077][T21962] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6736: Failed to acquire dquot type 0 [ 354.043892][T21962] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6736: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.072876][T21962] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6736: Invalid inode bitmap blk 0 in block_group 0 [ 354.088736][T21962] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 354.116112][T21962] EXT4-fs (loop2): 1 orphan inode deleted [ 354.125094][ T1453] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 354.178564][T21972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6740'. [ 354.225909][T21962] netlink: 'syz.2.6736': attribute type 3 has an invalid length. [ 354.254493][T21962] rdma_rxe: rxe_newlink: failed to add bond0 [ 354.286479][T21982] loop6: detected capacity change from 0 to 1024 [ 354.294749][T21982] EXT4-fs: Ignoring removed bh option [ 354.300251][T21982] EXT4-fs: inline encryption not supported [ 354.306731][T21982] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.323308][T21982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 354.332490][T21982] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.6745: lblock 2 mapped to illegal pblock 2 (length 1) [ 354.346872][T21982] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.6745: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.363412][T21982] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.6745: Failed to acquire dquot type 0 [ 354.375432][T21982] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 354.397163][T21982] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.6745: mark_inode_dirty error [ 354.449903][T21982] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 354.517970][T21982] EXT4-fs (loop6): 1 orphan inode deleted [ 354.524106][T21982] EXT4-fs mount: 34 callbacks suppressed [ 354.524118][T21982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.542815][ T1453] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.566374][ T1453] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 354.609182][T21982] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.6745: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.610723][T22001] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6751'. [ 354.645805][T20187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.760861][T22012] netlink: 'syz.1.6759': attribute type 3 has an invalid length. [ 354.795127][T22012] rdma_rxe: rxe_newlink: failed to add bond0 [ 354.966048][T22021] loop6: detected capacity change from 0 to 1024 [ 354.972695][T22021] EXT4-fs: Ignoring removed bh option [ 354.983136][T22021] EXT4-fs: inline encryption not supported [ 355.000984][T22021] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.095401][T22021] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 355.112940][T22026] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 355.121558][T22026] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 355.162579][T22021] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.6761: lblock 2 mapped to illegal pblock 2 (length 1) [ 355.224678][T22021] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.6761: lblock 0 mapped to illegal pblock 48 (length 1) [ 355.263666][T22021] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.6761: Failed to acquire dquot type 0 [ 355.307378][T22021] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 355.341565][T22021] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.6761: mark_inode_dirty error [ 355.357279][T22053] loop4: detected capacity change from 0 to 1024 [ 355.368554][T22021] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 355.370609][T22053] EXT4-fs: Ignoring removed bh option [ 355.395151][T22021] EXT4-fs (loop6): 1 orphan inode deleted [ 355.409404][T22053] EXT4-fs: inline encryption not supported [ 355.412985][T22021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.421835][T22053] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.439504][ T146] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 355.469715][ T146] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 355.482274][T22053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 355.497637][T22053] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.6774: lblock 2 mapped to illegal pblock 2 (length 1) [ 355.713213][T22021] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.6761: lblock 0 mapped to illegal pblock 48 (length 1) [ 355.749152][T22053] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6774: lblock 0 mapped to illegal pblock 48 (length 1) [ 355.830855][T22053] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6774: Failed to acquire dquot type 0 [ 355.865889][T20187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.879050][T22053] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 355.907502][T22053] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6774: mark_inode_dirty error [ 355.919176][T22053] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 355.930751][T22053] EXT4-fs (loop4): 1 orphan inode deleted [ 355.937444][T22053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.951447][ T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 355.984892][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 356.012264][T22053] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6774: lblock 0 mapped to illegal pblock 48 (length 1) [ 356.275112][T22053] __quota_error: 286 callbacks suppressed [ 356.275147][T22053] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 356.337755][T22102] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6796'. [ 356.472996][T19585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.808172][T22135] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.818018][T22135] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.883922][T22135] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.893749][T22135] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.937206][ T29] audit: type=1326 audit(1758932186.439:16919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110c62eec9 code=0x7ffc0000 [ 356.969594][ T29] audit: type=1326 audit(1758932186.439:16920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110c62eec9 code=0x7ffc0000 [ 356.993229][ T29] audit: type=1326 audit(1758932186.439:16921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110c62eec9 code=0x7ffc0000 [ 357.016833][ T29] audit: type=1326 audit(1758932186.468:16922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f110c62eec9 code=0x7ffc0000 [ 357.040479][ T29] audit: type=1326 audit(1758932186.468:16923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f110c62ef03 code=0x7ffc0000 [ 357.063945][ T29] audit: type=1326 audit(1758932186.468:16924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f110c62ef03 code=0x7ffc0000 [ 357.087445][ T29] audit: type=1326 audit(1758932186.468:16925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110c62eec9 code=0x7ffc0000 [ 357.098042][T22153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6818'. [ 357.111062][ T29] audit: type=1326 audit(1758932186.468:16926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110c62eec9 code=0x7ffc0000 [ 357.119930][T22153] netlink: 'syz.0.6818': attribute type 30 has an invalid length. [ 357.151368][ T29] audit: type=1326 audit(1758932186.468:16927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22149 comm="syz.6.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110c62eec9 code=0x7ffc0000 [ 357.241590][T22135] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.251622][T22135] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.323452][T22135] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.333434][T22135] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.457314][T22139] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 357.463881][T22139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 357.471493][T22139] vhci_hcd vhci_hcd.0: Device attached [ 357.716302][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.724578][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.752232][ T37] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.760582][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.789775][ T3466] vhci_hcd: vhci_device speed not set [ 357.813814][ T37] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.822166][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.857239][T22170] vhci_hcd: connection closed [ 357.905714][ T31] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.918735][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.928850][ T37] vhci_hcd: stop threads [ 357.933201][ T37] vhci_hcd: release socket [ 357.937701][ T37] vhci_hcd: disconnect device [ 358.008632][ T3466] usb 9-1: new full-speed USB device number 20 using vhci_hcd [ 358.018183][ T3466] usb 9-1: enqueue for inactive port 0 [ 358.023666][ T3466] usb 9-1: enqueue for inactive port 0 [ 358.048821][ T3466] usb 9-1: enqueue for inactive port 0 [ 358.158567][ T3466] vhci_hcd: vhci_device speed not set [ 358.234874][T22192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6831'. [ 358.243870][T22192] netlink: 'syz.2.6831': attribute type 30 has an invalid length. [ 358.332204][T22200] loop0: detected capacity change from 0 to 1024 [ 358.347575][T22203] loop6: detected capacity change from 0 to 512 [ 358.359732][T22200] EXT4-fs: Ignoring removed bh option [ 358.365284][T22200] EXT4-fs: inline encryption not supported [ 358.371174][T22203] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 358.403295][T22200] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.417107][T22203] EXT4-fs (loop6): 1 truncate cleaned up [ 358.423441][T22203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.446091][T22200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 358.574253][T22200] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.6834: lblock 2 mapped to illegal pblock 2 (length 1) [ 358.589760][T22200] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.6834: lblock 0 mapped to illegal pblock 48 (length 1) [ 358.624053][T22200] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6834: Failed to acquire dquot type 0 [ 358.656390][T22200] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 358.686558][T22200] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.6834: mark_inode_dirty error [ 358.711457][T22200] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 358.726944][T22200] EXT4-fs (loop0): 1 orphan inode deleted [ 358.733807][T22200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.753372][ T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 358.778127][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 358.863262][T22221] loop4: detected capacity change from 0 to 1024 [ 358.870417][T22221] EXT4-fs: Ignoring removed bh option [ 358.872994][T20187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.875828][T22200] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 358.893209][T22221] EXT4-fs: inline encryption not supported [ 358.899906][T22221] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.910936][T22221] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 358.919966][T22221] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.6842: lblock 2 mapped to illegal pblock 2 (length 1) [ 358.955759][T22221] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6842: lblock 0 mapped to illegal pblock 48 (length 1) [ 359.031191][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.099461][T22221] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6842: Failed to acquire dquot type 0 [ 359.115417][T22221] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 359.129164][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6844'. [ 359.138163][T22227] netlink: 'syz.1.6844': attribute type 30 has an invalid length. [ 359.154608][T22221] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6842: mark_inode_dirty error [ 359.182216][T22221] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 359.194588][T22221] EXT4-fs (loop4): 1 orphan inode deleted [ 359.200759][T22221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.213406][ T146] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 359.227743][ T146] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 359.245320][T22221] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 359.290840][T19585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.679534][T22239] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 359.686077][T22239] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 359.693716][T22239] vhci_hcd vhci_hcd.0: Device attached [ 359.711458][T22264] loop6: detected capacity change from 0 to 1024 [ 359.736559][T22270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6859'. [ 359.739748][T22264] EXT4-fs: Ignoring removed bh option [ 359.770596][T22264] EXT4-fs: inline encryption not supported [ 359.798912][T22264] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 359.848772][T22264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 359.874397][ T3394] vhci_hcd: vhci_device speed not set [ 359.879843][T22264] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.6855: lblock 2 mapped to illegal pblock 2 (length 1) [ 359.934428][ T3394] usb 9-1: new full-speed USB device number 21 using vhci_hcd [ 359.952101][T22264] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.6855: lblock 0 mapped to illegal pblock 48 (length 1) [ 359.953609][T22290] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 359.977185][T22289] IPVS: stopping backup sync thread 22290 ... [ 359.987097][T22263] vhci_hcd: connection reset by peer [ 359.998103][T22264] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.6855: Failed to acquire dquot type 0 [ 360.014592][ T37] vhci_hcd: stop threads [ 360.018883][ T37] vhci_hcd: release socket [ 360.023322][ T37] vhci_hcd: disconnect device [ 360.047240][T22264] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 360.065019][T22264] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.6855: mark_inode_dirty error [ 360.088462][T22264] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 360.104012][T22264] EXT4-fs (loop6): 1 orphan inode deleted [ 360.115958][T22264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.128501][ T37] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 360.144106][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 360.164454][T22296] IPVS: stopping backup sync thread 22298 ... [ 360.164450][T22298] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 360.210779][T22264] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.6855: lblock 0 mapped to illegal pblock 48 (length 1) [ 360.431704][T22322] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.441626][T22322] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.462979][T20187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.511239][T22331] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 360.523465][T22326] IPVS: stopping backup sync thread 22331 ... [ 360.530543][T22322] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.540464][T22322] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.552801][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6884'. [ 360.599369][T22322] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.609334][T22322] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.700810][T22322] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.710629][T22322] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.740603][T22352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6890'. [ 360.779269][T22358] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 360.790061][T22357] IPVS: stopping backup sync thread 22358 ... [ 360.813778][ T51] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.821978][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.842749][ T51] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.851032][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.870347][ T51] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.878685][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.899089][ T51] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.907442][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.014745][T22377] loop4: detected capacity change from 0 to 1024 [ 361.041658][T22377] EXT4-fs: Ignoring removed bh option [ 361.047875][T22377] EXT4-fs: inline encryption not supported [ 361.060999][T22377] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 361.078638][T22377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 361.098158][T22377] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.6902: lblock 2 mapped to illegal pblock 2 (length 1) [ 361.114033][T22377] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6902: lblock 0 mapped to illegal pblock 48 (length 1) [ 361.128366][T22377] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6902: Failed to acquire dquot type 0 [ 361.140919][T22377] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 361.150562][T22377] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6902: mark_inode_dirty error [ 361.163002][T22377] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 361.173294][T22377] EXT4-fs (loop4): 1 orphan inode deleted [ 361.180403][T22377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.193223][ T51] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.215286][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 361.238558][T22387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6910'. [ 361.247501][T22387] netlink: 'syz.2.6910': attribute type 30 has an invalid length. [ 361.264251][T22377] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6902: lblock 0 mapped to illegal pblock 48 (length 1) [ 361.367549][T22361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 361.374080][T22361] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.381738][T22361] vhci_hcd vhci_hcd.0: Device attached [ 361.402037][T22396] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.435041][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 361.435055][ T29] audit: type=1326 audit(1758932190.858:17081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.466221][ T29] audit: type=1326 audit(1758932190.887:17082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.524505][ T29] audit: type=1326 audit(1758932190.925:17083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.548153][ T29] audit: type=1326 audit(1758932190.925:17084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.571760][ T29] audit: type=1326 audit(1758932190.925:17085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.595352][ T29] audit: type=1326 audit(1758932190.925:17086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.618933][ T29] audit: type=1326 audit(1758932190.925:17087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.642522][ T29] audit: type=1326 audit(1758932190.925:17088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.666101][ T29] audit: type=1326 audit(1758932190.925:17089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.689764][ T29] audit: type=1326 audit(1758932190.925:17090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22360 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 361.713612][ T4448] vhci_hcd: vhci_device speed not set [ 361.714921][T22396] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.747837][T22403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6916'. [ 361.801264][ T4448] usb 1-1: new full-speed USB device number 26 using vhci_hcd [ 361.818098][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6918'. [ 361.827098][T22407] netlink: 'syz.1.6918': attribute type 30 has an invalid length. [ 361.840237][T22396] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.840754][T19585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.887644][T22396] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.955682][T22397] vhci_hcd: connection reset by peer [ 361.965289][ T51] vhci_hcd: stop threads [ 361.969624][ T51] vhci_hcd: release socket [ 361.974058][ T51] vhci_hcd: disconnect device [ 362.026214][ T146] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.053981][T22421] netlink: 'syz.1.6923': attribute type 3 has an invalid length. [ 362.062464][T22421] rdma_rxe: rxe_newlink: failed to add bond0 [ 362.072324][ T146] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.081562][ T146] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.089816][ T146] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.165695][T22428] loop4: detected capacity change from 0 to 1024 [ 362.172442][T22428] EXT4-fs: Ignoring removed bh option [ 362.219678][T22428] EXT4-fs: inline encryption not supported [ 362.220809][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6928'. [ 362.234489][T22434] netlink: 'syz.1.6928': attribute type 30 has an invalid length. [ 362.243963][T22428] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 362.273302][T22436] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 362.282396][T22436] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 362.316481][T22428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 362.329023][T22428] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.6924: lblock 2 mapped to illegal pblock 2 (length 1) [ 362.363687][T22428] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6924: lblock 0 mapped to illegal pblock 48 (length 1) [ 362.410805][T22428] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6924: Failed to acquire dquot type 0 [ 362.477720][T22428] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 362.488582][T22428] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6924: mark_inode_dirty error [ 362.532381][T22428] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 362.551965][T22428] EXT4-fs (loop4): 1 orphan inode deleted [ 362.562911][T22428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.575533][ T51] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 362.600422][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 362.612736][T22463] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.628938][T22462] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 362.638735][T22462] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 362.654244][T22428] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6924: lblock 0 mapped to illegal pblock 48 (length 1) [ 362.680360][T22463] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.906213][T22463] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.917708][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6943'. [ 362.926660][T22471] netlink: 'syz.0.6943': attribute type 30 has an invalid length. [ 363.102515][T22463] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.114542][T19585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.319337][T22486] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 363.330487][T22486] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 363.512404][T22492] loop2: detected capacity change from 0 to 512 [ 363.519300][T22492] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.530200][T22498] loop4: detected capacity change from 0 to 1024 [ 363.537937][T22492] EXT4-fs (loop2): 1 truncate cleaned up [ 363.542247][T22494] IPVS: stopping backup sync thread 22499 ... [ 363.544095][T22492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.552080][T22498] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 363.632968][T22498] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6955: Invalid block bitmap block 0 in block_group 0 [ 363.647309][T22498] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6955: Failed to acquire dquot type 0 [ 363.677194][T22498] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.6955: Freeing blocks not in datazone - block = 0, count = 4096 [ 363.711896][T22498] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.6955: Invalid inode bitmap blk 0 in block_group 0 [ 363.730454][ T1453] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 363.752641][T22498] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 363.771597][T22498] EXT4-fs (loop4): 1 orphan inode deleted [ 363.788381][T22498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.811476][T22498] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.909499][T22515] loop0: detected capacity change from 0 to 1024 [ 363.916541][T22498] netlink: 'syz.4.6955': attribute type 3 has an invalid length. [ 363.925557][T22515] EXT4-fs: Ignoring removed bh option [ 363.931236][T22515] EXT4-fs: inline encryption not supported [ 363.937591][T22498] rdma_rxe: rxe_newlink: failed to add bond0 [ 363.944290][T22515] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 363.956731][T22515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 363.977359][T22515] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.6960: lblock 2 mapped to illegal pblock 2 (length 1) [ 364.016797][T22515] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.6960: lblock 0 mapped to illegal pblock 48 (length 1) [ 364.038288][T22515] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6960: Failed to acquire dquot type 0 [ 364.049968][T22515] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 364.059797][T22515] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.6960: mark_inode_dirty error [ 364.071266][T22515] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 364.081621][T22515] EXT4-fs (loop0): 1 orphan inode deleted [ 364.088025][T22515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.099809][T22521] loop4: detected capacity change from 0 to 1024 [ 364.107242][T22521] EXT4-fs: Ignoring removed bh option [ 364.113055][T22521] EXT4-fs: inline encryption not supported [ 364.120150][ T1453] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.139591][T22521] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.150958][ T1453] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 364.164216][T22521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 364.173544][T22521] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.6962: lblock 2 mapped to illegal pblock 2 (length 1) [ 364.189363][T22515] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 364.198086][T22521] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6962: lblock 0 mapped to illegal pblock 48 (length 1) [ 364.266363][T22521] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6962: Failed to acquire dquot type 0 [ 364.278260][T22521] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 364.288015][T22521] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6962: mark_inode_dirty error [ 364.300147][T22521] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 364.311812][T22521] EXT4-fs (loop4): 1 orphan inode deleted [ 364.318334][T22521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.331248][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.347195][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 364.360534][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.371091][T19739] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.402539][T22521] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6962: lblock 0 mapped to illegal pblock 48 (length 1) [ 364.557945][T22532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6966'. [ 364.629605][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6967'. [ 364.638640][T22536] netlink: 'syz.2.6967': attribute type 30 has an invalid length. [ 364.708179][T22542] loop0: detected capacity change from 0 to 1024 [ 364.717228][T22542] EXT4-fs: Ignoring removed bh option [ 364.722896][T22542] EXT4-fs: inline encryption not supported [ 364.729356][T22542] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.746556][T22542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 364.757446][T22545] IPVS: stopping backup sync thread 22546 ... [ 364.779629][T22542] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.6970: lblock 2 mapped to illegal pblock 2 (length 1) [ 364.795820][T22542] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.6970: lblock 0 mapped to illegal pblock 48 (length 1) [ 364.802385][T22553] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 364.810654][T22542] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6970: Failed to acquire dquot type 0 [ 364.823556][T22552] IPVS: stopping backup sync thread 22553 ... [ 364.838095][T22542] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 364.847992][T22542] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.6970: mark_inode_dirty error [ 364.859644][T22542] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 364.870378][T22542] EXT4-fs (loop0): 1 orphan inode deleted [ 364.876603][T22542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.890918][ T146] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.905619][ T146] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 364.918048][T19585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.927852][T22542] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 364.940935][T22557] loop2: detected capacity change from 0 to 1024 [ 364.963511][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.967354][T22557] EXT4-fs: Ignoring removed bh option [ 364.995535][T22557] EXT4-fs: inline encryption not supported [ 365.007869][T22557] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.028878][T22557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 365.037739][T22557] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.6975: lblock 2 mapped to illegal pblock 2 (length 1) [ 365.040704][T22563] netlink: 'syz.0.6977': attribute type 30 has an invalid length. [ 365.063158][T22557] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.6975: lblock 0 mapped to illegal pblock 48 (length 1) [ 365.079720][T22557] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6975: Failed to acquire dquot type 0 [ 365.121260][T22557] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 365.130984][T22557] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6975: mark_inode_dirty error [ 365.142401][ T3394] usb 9-1: enqueue for inactive port 0 [ 365.147966][ T3394] usb 9-1: enqueue for inactive port 0 [ 365.169010][T22557] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 365.215090][T22557] EXT4-fs (loop2): 1 orphan inode deleted [ 365.220953][ T3394] vhci_hcd: vhci_device speed not set [ 365.226912][T22557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.239798][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 365.260443][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 365.293196][T22557] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.6975: lblock 0 mapped to illegal pblock 48 (length 1) [ 365.362594][T22584] loop4: detected capacity change from 0 to 512 [ 365.370324][T22584] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.377393][T22584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.385489][T22584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.393968][T22584] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 365.416007][T22584] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6985: Allocating blocks 41-42 which overlap fs metadata [ 365.456691][T22584] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6985: Allocating blocks 41-42 which overlap fs metadata [ 365.470628][T22584] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6985: Failed to acquire dquot type 1 [ 365.483372][T22584] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 365.499173][T22584] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6985: corrupted inode contents [ 365.511319][T22584] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.6985: mark_inode_dirty error [ 365.524028][T22584] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6985: corrupted inode contents [ 365.536236][T22584] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6985: mark_inode_dirty error [ 365.623774][T22584] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6985: corrupted inode contents [ 365.827569][T22584] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 365.860265][T19739] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.001045][T22584] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6985: corrupted inode contents [ 366.051610][T22584] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.6985: mark_inode_dirty error [ 366.096838][T22584] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 366.110824][T22598] loop2: detected capacity change from 0 to 1024 [ 366.117826][T22598] EXT4-fs: Ignoring removed bh option [ 366.124579][T22598] EXT4-fs: inline encryption not supported [ 366.130932][T22598] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.174853][T22598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 366.198070][T22584] EXT4-fs (loop4): 1 truncate cleaned up [ 366.207183][T22598] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.6986: lblock 2 mapped to illegal pblock 2 (length 1) [ 366.211455][T22584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.235142][T22598] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.6986: lblock 0 mapped to illegal pblock 48 (length 1) [ 366.287697][T22598] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6986: Failed to acquire dquot type 0 [ 366.328866][T22598] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 366.353174][T19585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.372869][T22598] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6986: mark_inode_dirty error [ 366.419246][T22598] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 366.431152][T22598] EXT4-fs (loop2): 1 orphan inode deleted [ 366.437412][T22598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.452359][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 366.480487][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 366.481274][ T1453] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.510437][ T1453] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.527726][T22598] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.6986: lblock 0 mapped to illegal pblock 48 (length 1) [ 366.585641][T22598] __quota_error: 56 callbacks suppressed [ 366.585660][T22598] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 366.633066][ T1453] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.660929][ T1453] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.691742][ T1453] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.719862][ T1453] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.746146][ T1453] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.765629][ T1453] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.887817][T19739] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.093449][ T4448] usb 1-1: enqueue for inactive port 0 [ 367.104270][ T4448] usb 1-1: enqueue for inactive port 0 [ 367.269297][T22672] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 367.280221][T22671] IPVS: stopping backup sync thread 22672 ... [ 367.312744][ T29] audit: type=1326 audit(1758932196.586:17119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.0.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7fc00000 [ 367.404774][ T4448] vhci_hcd: vhci_device speed not set [ 367.620611][T22692] __nla_validate_parse: 5 callbacks suppressed [ 367.620632][T22692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7030'. [ 367.844313][T22680] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 367.846228][T22700] IPVS: stopping backup sync thread 22708 ... [ 367.850949][T22680] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 367.864658][T22680] vhci_hcd vhci_hcd.0: Device attached [ 367.949282][ T29] audit: type=1326 audit(1758932197.202:17120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 368.015597][ T29] audit: type=1326 audit(1758932197.202:17121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 368.039298][ T29] audit: type=1326 audit(1758932197.202:17122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 368.063082][ T29] audit: type=1326 audit(1758932197.202:17123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 368.086730][ T29] audit: type=1326 audit(1758932197.202:17124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 368.110581][ T29] audit: type=1326 audit(1758932197.202:17125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 368.134199][ T29] audit: type=1326 audit(1758932197.202:17126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 368.157804][ T29] audit: type=1326 audit(1758932197.202:17127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22679 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 368.181619][ T1038] vhci_hcd: vhci_device speed not set [ 368.205599][T22705] vhci_hcd: connection closed [ 368.205809][ T31] vhci_hcd: stop threads [ 368.214863][ T31] vhci_hcd: release socket [ 368.219299][ T31] vhci_hcd: disconnect device [ 368.243780][ T1038] usb 9-1: new full-speed USB device number 22 using vhci_hcd [ 368.251402][ T1038] usb 9-1: enqueue for inactive port 0 [ 368.257306][ T1038] usb 9-1: enqueue for inactive port 0 [ 368.263682][ T1038] usb 9-1: enqueue for inactive port 0 [ 368.343911][ T1038] vhci_hcd: vhci_device speed not set [ 368.356661][T22724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7042'. [ 368.365597][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7042'. [ 368.445822][T22729] loop6: detected capacity change from 0 to 1024 [ 368.453017][T22729] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.475967][T22729] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7044: Invalid block bitmap block 0 in block_group 0 [ 368.494405][T22729] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.7044: Failed to acquire dquot type 0 [ 368.544283][T22729] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.7044: Freeing blocks not in datazone - block = 0, count = 4096 [ 368.581856][T22729] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.7044: Invalid inode bitmap blk 0 in block_group 0 [ 368.618905][ T1453] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 368.651942][T22737] IPVS: stopping backup sync thread 22741 ... [ 368.679756][T22729] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 368.709673][T22729] EXT4-fs (loop6): 1 orphan inode deleted [ 368.720090][T22729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.737735][T22729] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.790757][T22729] netlink: 'syz.6.7044': attribute type 3 has an invalid length. [ 368.843668][T22750] rdma_rxe: rxe_newlink: failed to add bond0 [ 368.893667][T22751] loop0: detected capacity change from 0 to 1024 [ 368.911929][T22751] EXT4-fs: Ignoring removed bh option [ 368.931909][T22751] EXT4-fs: inline encryption not supported [ 368.951351][T22751] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.982991][T22751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 369.002926][T22751] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.7050: lblock 2 mapped to illegal pblock 2 (length 1) [ 369.052576][T22751] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.7050: lblock 0 mapped to illegal pblock 48 (length 1) [ 369.066935][T22751] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7050: Failed to acquire dquot type 0 [ 369.109328][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7057'. [ 369.118273][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7057'. [ 369.132915][T22768] IPVS: stopping backup sync thread 22769 ... [ 369.150453][T22751] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 369.194599][T22770] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 369.204282][T22770] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 369.206764][T22751] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.7050: mark_inode_dirty error [ 369.238449][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7063'. [ 369.301934][T22751] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 369.325788][T22785] loop6: detected capacity change from 0 to 512 [ 369.348353][T22785] EXT4-fs: Ignoring removed mblk_io_submit option [ 369.355820][T22751] EXT4-fs (loop0): 1 orphan inode deleted [ 369.366145][T22751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.378859][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 369.393529][T22785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.400371][T22772] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 369.406907][T22772] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 369.414591][T22772] vhci_hcd vhci_hcd.0: Device attached [ 369.420687][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 369.433917][T22785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.442408][T22785] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.474641][T22785] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.7065: Allocating blocks 41-42 which overlap fs metadata [ 369.523878][T22751] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.7050: lblock 0 mapped to illegal pblock 48 (length 1) [ 369.549101][T22785] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.7065: Allocating blocks 41-42 which overlap fs metadata [ 369.605397][ T1038] vhci_hcd: vhci_device speed not set [ 369.621513][T22785] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.7065: Failed to acquire dquot type 1 [ 369.673290][ T1038] usb 9-1: new full-speed USB device number 23 using vhci_hcd [ 369.698387][T22785] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 369.720990][T22785] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.7065: corrupted inode contents [ 369.739914][T22785] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #12: comm syz.6.7065: mark_inode_dirty error [ 369.794850][T22785] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.7065: corrupted inode contents [ 369.814526][T22789] vhci_hcd: connection reset by peer [ 369.821257][ T51] vhci_hcd: stop threads [ 369.825529][ T51] vhci_hcd: release socket [ 369.828618][T22785] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.7065: mark_inode_dirty error [ 369.830091][ T51] vhci_hcd: disconnect device [ 369.841416][T22785] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.7065: corrupted inode contents [ 369.862624][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.961676][T22785] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 369.970612][T22785] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.7065: corrupted inode contents [ 369.991670][T22808] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 369.996101][T22785] EXT4-fs error (device loop6): ext4_truncate:4666: inode #12: comm syz.6.7065: mark_inode_dirty error [ 370.002736][T22807] IPVS: stopping backup sync thread 22808 ... [ 370.014775][T22785] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 370.035335][T22785] EXT4-fs (loop6): 1 truncate cleaned up [ 370.044458][T22785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.063572][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7073'. [ 370.072498][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7073'. [ 370.123774][T20187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.145282][T22817] loop2: detected capacity change from 0 to 1024 [ 370.170738][T22817] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.220979][T22817] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7075: Invalid block bitmap block 0 in block_group 0 [ 370.274421][T22817] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7075: Failed to acquire dquot type 0 [ 370.308565][T22827] loop6: detected capacity change from 0 to 1024 [ 370.315267][T22817] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.7075: Freeing blocks not in datazone - block = 0, count = 4096 [ 370.322971][T22827] EXT4-fs: Ignoring removed bh option [ 370.334694][T22817] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7075: Invalid inode bitmap blk 0 in block_group 0 [ 370.343348][T22827] EXT4-fs: inline encryption not supported [ 370.364894][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 370.376939][T22817] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 370.386886][T22827] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.415742][T22817] EXT4-fs (loop2): 1 orphan inode deleted [ 370.422056][T22817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.436039][T22827] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 370.471929][T22827] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.7079: lblock 2 mapped to illegal pblock 2 (length 1) [ 370.489842][T22817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.512033][T22827] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.7079: lblock 0 mapped to illegal pblock 48 (length 1) [ 370.541625][T22830] loop4: detected capacity change from 0 to 1024 [ 370.548045][T22817] netlink: 'syz.2.7075': attribute type 3 has an invalid length. [ 370.561223][T22827] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.7079: Failed to acquire dquot type 0 [ 370.575017][T22817] rdma_rxe: rxe_newlink: failed to add bond0 [ 370.581455][T22830] EXT4-fs: Ignoring removed bh option [ 370.587031][T22830] EXT4-fs: inline encryption not supported [ 370.595024][T22827] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 370.611797][T22830] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.631228][T22827] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.7079: mark_inode_dirty error [ 370.644441][T22827] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 370.645275][T22819] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 370.661247][T22819] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 370.668885][T22819] vhci_hcd vhci_hcd.0: Device attached [ 370.669239][T22830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 370.678807][T22827] EXT4-fs (loop6): 1 orphan inode deleted [ 370.685625][T22830] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.7080: lblock 2 mapped to illegal pblock 2 (length 1) [ 370.688987][T22827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.715363][T22830] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.7080: lblock 0 mapped to illegal pblock 48 (length 1) [ 370.716081][ T31] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 370.743972][T22830] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.7080: Failed to acquire dquot type 0 [ 370.755473][T22830] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 370.756213][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 370.782941][T22830] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.7080: mark_inode_dirty error [ 370.816423][T22830] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 370.826745][T22840] loop2: detected capacity change from 0 to 512 [ 370.826835][T22830] EXT4-fs (loop4): 1 orphan inode deleted [ 370.833533][T22840] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.845509][T22840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.853163][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 370.867422][ T10] vhci_hcd: vhci_device speed not set [ 370.878962][T22830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.895061][T22840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.903655][T22840] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 370.914718][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 370.931771][ T10] usb 3-1: new full-speed USB device number 23 using vhci_hcd [ 370.946251][T22827] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.7079: lblock 0 mapped to illegal pblock 48 (length 1) [ 370.963279][T22830] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 370.963997][T22840] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.7083: Allocating blocks 41-42 which overlap fs metadata [ 370.995223][T22844] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.005156][T22844] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.015685][T22840] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.7083: Allocating blocks 41-42 which overlap fs metadata [ 371.040684][T22834] vhci_hcd: connection reset by peer [ 371.047753][ T31] vhci_hcd: stop threads [ 371.047891][T22840] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7083: Failed to acquire dquot type 1 [ 371.052015][ T31] vhci_hcd: release socket [ 371.052033][ T31] vhci_hcd: disconnect device [ 371.065058][T20187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.086795][T19585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.097160][T22844] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.102703][T22840] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14: [ 371.107015][T22844] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.107022][T22840] freeing already freed block (bit 14); block bitmap corrupt. [ 371.134083][T22840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.7083: corrupted inode contents [ 371.147578][T22840] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.7083: mark_inode_dirty error [ 371.159949][T22847] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.160510][T22840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.7083: corrupted inode contents [ 371.169762][T22847] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.191885][T22840] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.7083: mark_inode_dirty error [ 371.192614][T22850] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 371.203547][T22840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.7083: corrupted inode contents [ 371.213799][T22849] IPVS: stopping backup sync thread 22850 ... [ 371.227021][T22840] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 371.232843][T22844] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.240718][T22840] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.7083: corrupted inode contents [ 371.249859][T22844] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.263154][T22840] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.7083: mark_inode_dirty error [ 371.282847][T22840] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 371.291985][T22840] EXT4-fs (loop2): 1 truncate cleaned up [ 371.298208][T22840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.326607][T22847] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.336484][T22847] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.350732][T19739] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.362520][T22844] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.372400][T22844] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.414928][T22847] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.424732][T22847] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.442207][ T31] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.456099][ T31] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.465003][ T31] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.489894][T22847] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.499931][T22847] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.513618][ T31] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.522148][ T31] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.530568][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.549629][T22865] loop2: detected capacity change from 0 to 1024 [ 371.556191][ T31] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.564465][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.571404][T22865] EXT4-fs: Ignoring removed bh option [ 371.574394][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.581489][T22865] EXT4-fs: inline encryption not supported [ 371.586245][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.614708][T22865] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 371.616736][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.633243][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.649173][ T31] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.657457][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.688198][T22865] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 371.696320][ T31] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.704548][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.714747][T22865] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.7092: lblock 2 mapped to illegal pblock 2 (length 1) [ 371.724127][ T31] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.737118][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.745585][ T31] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.753770][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.763764][T22875] IPVS: stopping backup sync thread 22878 ... [ 371.767495][T22865] __quota_error: 135 callbacks suppressed [ 371.767514][T22865] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 371.784044][T22865] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.7092: lblock 0 mapped to illegal pblock 48 (length 1) [ 371.805338][T22865] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 371.814256][T22865] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7092: Failed to acquire dquot type 0 [ 371.827773][ T29] audit: type=1326 audit(1758932200.989:17238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22873 comm="syz.4.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 371.865878][T22865] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 371.875478][ T29] audit: type=1326 audit(1758932200.989:17239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22873 comm="syz.4.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 371.899166][ T29] audit: type=1326 audit(1758932200.989:17240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22873 comm="syz.4.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 371.922762][ T29] audit: type=1326 audit(1758932200.989:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22873 comm="syz.4.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 371.946563][ T29] audit: type=1326 audit(1758932200.989:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22873 comm="syz.4.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 371.947143][T22884] loop6: detected capacity change from 0 to 512 [ 371.970164][ T29] audit: type=1326 audit(1758932200.989:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22873 comm="syz.4.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 371.977376][T22884] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.000062][ T29] audit: type=1326 audit(1758932200.989:17244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22873 comm="syz.4.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 372.007762][T22865] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.7092: mark_inode_dirty error [ 372.030131][ T29] audit: type=1326 audit(1758932200.989:17245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22873 comm="syz.4.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2a92eec9 code=0x7ffc0000 [ 372.032472][T22884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.075025][T22884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.083521][T22884] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 372.094837][T22865] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 372.105344][T22865] EXT4-fs (loop2): 1 orphan inode deleted [ 372.111708][T22865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.187077][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 372.207021][T22884] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.7099: Allocating blocks 41-42 which overlap fs metadata [ 372.221382][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 372.233502][T22884] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.7099: Allocating blocks 41-42 which overlap fs metadata [ 372.253366][T22865] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.7092: lblock 0 mapped to illegal pblock 48 (length 1) [ 372.267859][T22884] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.7099: Failed to acquire dquot type 1 [ 372.283555][T22884] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 372.298364][T22884] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.7099: corrupted inode contents [ 372.310582][T22884] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #12: comm syz.6.7099: mark_inode_dirty error [ 372.322370][T22884] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.7099: corrupted inode contents [ 372.334602][T22884] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.7099: mark_inode_dirty error [ 372.346319][T22884] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.7099: corrupted inode contents [ 372.359038][T22884] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 372.367952][T22884] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.7099: corrupted inode contents [ 372.380201][T22884] EXT4-fs error (device loop6): ext4_truncate:4666: inode #12: comm syz.6.7099: mark_inode_dirty error [ 372.391810][T22884] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 372.401100][T22884] EXT4-fs (loop6): 1 truncate cleaned up [ 372.407374][T22884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.452759][T19739] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.464525][T20187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.536745][T22915] loop0: detected capacity change from 0 to 512 [ 372.753860][T22925] __nla_validate_parse: 9 callbacks suppressed [ 372.753879][T22925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7116'. [ 372.962609][T22915] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 373.002804][T22915] EXT4-fs (loop0): 1 truncate cleaned up [ 373.008871][T22915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.148608][T22943] loop6: detected capacity change from 0 to 1024 [ 373.174878][T22943] EXT4-fs: Ignoring removed bh option [ 373.198272][T22943] EXT4-fs: inline encryption not supported [ 373.225908][T22943] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 373.258848][T22943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 373.292386][T22943] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.7121: lblock 2 mapped to illegal pblock 2 (length 1) [ 373.338193][T22943] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.7121: lblock 0 mapped to illegal pblock 48 (length 1) [ 373.372499][T22943] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.7121: Failed to acquire dquot type 0 [ 373.397473][T22943] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 373.431488][T22943] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.7121: mark_inode_dirty error [ 373.468480][T22943] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 373.499565][T22943] EXT4-fs (loop6): 1 orphan inode deleted [ 373.517525][T22943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.910175][T22962] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 374.506017][ T51] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 374.544396][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 374.581410][T22943] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.7121: lblock 0 mapped to illegal pblock 48 (length 1) [ 374.762526][T20187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.777659][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.960121][T22982] loop0: detected capacity change from 0 to 1024 [ 374.974691][T22982] EXT4-fs: Ignoring removed bh option [ 374.986377][ T1038] usb 9-1: enqueue for inactive port 0 [ 374.995692][T22982] EXT4-fs: inline encryption not supported [ 375.003540][ T1038] usb 9-1: enqueue for inactive port 0 [ 375.018089][T22982] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 375.048801][T22982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 375.068206][T22982] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.7135: lblock 2 mapped to illegal pblock 2 (length 1) [ 375.100591][T22986] loop4: detected capacity change from 0 to 1024 [ 375.108814][ T1038] vhci_hcd: vhci_device speed not set [ 375.121237][T22982] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.7135: lblock 0 mapped to illegal pblock 48 (length 1) [ 375.143346][T22986] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 375.204474][T22982] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7135: Failed to acquire dquot type 0 [ 375.224118][T22986] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7137: Invalid block bitmap block 0 in block_group 0 [ 375.252114][T22982] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 375.268917][T22986] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.7137: Failed to acquire dquot type 0 [ 375.288553][T22986] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.7137: Freeing blocks not in datazone - block = 0, count = 4096 [ 375.304874][T22982] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.7135: mark_inode_dirty error [ 375.322223][T22982] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 375.344864][T22986] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7137: Invalid inode bitmap blk 0 in block_group 0 [ 375.376288][ T1812] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 375.407558][T22982] EXT4-fs (loop0): 1 orphan inode deleted [ 375.413470][T22986] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 375.426700][ T1574] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 375.442564][T22982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.462485][T22986] EXT4-fs (loop4): 1 orphan inode deleted [ 375.469009][T22986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.496376][ T1574] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 375.526885][T22986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.606141][T22982] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.7135: lblock 0 mapped to illegal pblock 48 (length 1) [ 375.630710][T22998] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.640564][T22998] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.781744][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.828969][T23000] SELinux: policydb version 755781509 does not match my version range 15-35 [ 375.847900][T22986] netlink: 'syz.4.7137': attribute type 3 has an invalid length. [ 375.857681][T22998] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.867597][T22998] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.878842][T23000] SELinux: failed to load policy [ 375.884469][T22986] rdma_rxe: rxe_newlink: failed to add bond0 [ 376.050823][T22998] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.060651][T22998] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.123128][ T10] usb 3-1: enqueue for inactive port 0 [ 376.141950][ T10] usb 3-1: enqueue for inactive port 0 [ 376.199106][T23011] loop4: detected capacity change from 0 to 1024 [ 376.206207][T23011] EXT4-fs: Ignoring removed bh option [ 376.212055][T23011] EXT4-fs: inline encryption not supported [ 376.225361][ T10] vhci_hcd: vhci_device speed not set [ 376.232654][T23011] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 376.244946][T22998] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.254908][T22998] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.318573][ T1812] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.326820][ T1812] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.365141][T23011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 376.454883][T23011] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.7145: lblock 2 mapped to illegal pblock 2 (length 1) [ 376.518629][T23011] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.7145: lblock 0 mapped to illegal pblock 48 (length 1) [ 376.573204][ T1812] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.581428][ T1812] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.653427][ T1812] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.661760][ T1812] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.678832][T23011] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.7145: Failed to acquire dquot type 0 [ 377.598656][T23011] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 377.608625][ T51] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.616876][ T51] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.642812][T23011] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.7145: mark_inode_dirty error [ 377.669038][T23011] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 377.679476][T23011] EXT4-fs (loop4): 1 orphan inode deleted [ 377.698013][ T51] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 377.728700][T23011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.771851][ T51] __quota_error: 82 callbacks suppressed [ 377.771870][ T51] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 377.786069][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 377.869450][T23011] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.7145: lblock 0 mapped to illegal pblock 48 (length 1) [ 377.892892][T23022] IPVS: stopping backup sync thread 23023 ... [ 377.909594][T23011] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 377.957770][T23028] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.967699][T23028] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.013009][ T29] audit: type=1400 audit(1758932207.024:17309): avc: denied { write } for pid=23030 comm="syz.1.7153" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.046267][T23033] loop2: detected capacity change from 0 to 1024 [ 378.047059][ T29] audit: type=1400 audit(1758932207.024:17310): avc: denied { open } for pid=23030 comm="syz.1.7153" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.054963][T23033] EXT4-fs: Ignoring removed bh option [ 378.081014][T23028] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.090817][T23028] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.092223][T23033] EXT4-fs: inline encryption not supported [ 378.107956][T19585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.123733][T23033] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 378.137156][T23033] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 378.157161][T23028] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.167019][T23028] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.179456][T23033] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.7151: lblock 2 mapped to illegal pblock 2 (length 1) [ 378.194875][T23033] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 378.209125][T23033] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.7151: lblock 0 mapped to illegal pblock 48 (length 1) [ 378.226896][T23033] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 378.235787][T23033] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7151: Failed to acquire dquot type 0 [ 378.250851][T23028] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.260810][T23028] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.273249][T23033] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 378.273955][T23035] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 378.289244][T23035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 378.296890][T23035] vhci_hcd vhci_hcd.0: Device attached [ 378.311919][ T29] audit: type=1326 audit(1758932207.318:17311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 378.335632][ T29] audit: type=1326 audit(1758932207.318:17312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 378.347382][T23033] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.7151: mark_inode_dirty error [ 378.359360][ T29] audit: type=1326 audit(1758932207.318:17313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 378.406345][T23033] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 378.431574][T23033] EXT4-fs (loop2): 1 orphan inode deleted [ 378.443209][ T1574] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 378.475529][T23050] loop4: detected capacity change from 0 to 1024 [ 378.481220][ T29] audit: type=1326 audit(1758932207.406:17314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f769835eec9 code=0x7ffc0000 [ 378.482563][T23050] EXT4-fs: Ignoring removed bh option [ 378.505856][ T10] vhci_hcd: vhci_device speed not set [ 378.513273][T23033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.533241][ T1574] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 378.554057][T23050] EXT4-fs: inline encryption not supported [ 378.562880][T23050] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 378.573283][ T10] usb 1-1: new full-speed USB device number 27 using vhci_hcd [ 378.597131][T23044] vhci_hcd: connection reset by peer [ 378.606082][ T1574] vhci_hcd: stop threads [ 378.610364][ T1574] vhci_hcd: release socket [ 378.614831][ T1574] vhci_hcd: disconnect device [ 378.621192][T23050] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 378.630595][T23033] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.7151: lblock 0 mapped to illegal pblock 48 (length 1) [ 378.639500][T23050] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.7157: lblock 2 mapped to illegal pblock 2 (length 1) [ 378.660743][T23050] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.7157: lblock 0 mapped to illegal pblock 48 (length 1) [ 378.675379][T23050] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.7157: Failed to acquire dquot type 0 [ 378.686853][T23050] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 378.696556][T23050] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.7157: mark_inode_dirty error [ 378.708071][T23050] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 378.718649][T23050] EXT4-fs (loop4): 1 orphan inode deleted [ 378.724973][T23050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.742029][ T1453] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 378.757617][ T1453] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 378.775100][T23050] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.7157: lblock 0 mapped to illegal pblock 48 (length 1) [ 378.810709][T23055] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 378.810902][T23054] IPVS: stopping backup sync thread 23055 ... [ 379.020801][T23060] loop2: detected capacity change from 0 to 512 [ 379.027824][T23060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 379.039275][T23060] EXT4-fs (loop2): 1 truncate cleaned up [ 379.207864][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7165'. [ 379.216811][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7165'. [ 379.297648][T23078] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 379.311540][T23078] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 379.773494][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7176'. [ 379.782441][T23097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7176'. [ 379.902732][T23102] loop2: detected capacity change from 0 to 512 [ 379.909504][T23102] EXT4-fs: Ignoring removed nobh option [ 379.917485][T23095] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 379.924028][T23095] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 379.931671][T23095] vhci_hcd vhci_hcd.0: Device attached [ 380.004410][T23102] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 380.022901][T23102] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7178: invalid indirect mapped block 256 (level 1) [ 380.042936][T23102] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7178: invalid indirect mapped block 2683928664 (level 1) [ 380.106458][T23102] EXT4-fs (loop2): 1 truncate cleaned up [ 380.118191][T23103] vhci_hcd: connection closed [ 380.119731][ T3408] vhci_hcd: vhci_device speed not set [ 380.130382][ T1453] vhci_hcd: stop threads [ 380.134699][ T1453] vhci_hcd: release socket [ 380.139148][ T1453] vhci_hcd: disconnect device [ 380.169510][T23102] tap0: tun_chr_ioctl cmd 1074025675 [ 380.174857][T23102] tap0: persist enabled [ 380.179240][T23102] tap0: tun_chr_ioctl cmd 1074025675 [ 380.184543][T23102] tap0: persist disabled [ 380.188937][ T3408] usb 9-1: new full-speed USB device number 24 using vhci_hcd [ 380.196896][ T3408] usb 9-1: enqueue for inactive port 0 [ 380.202520][ T3408] usb 9-1: enqueue for inactive port 0 [ 380.208517][ T3408] usb 9-1: enqueue for inactive port 0 [ 380.275939][T23116] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.285811][T23116] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.295934][ T3408] vhci_hcd: vhci_device speed not set [ 380.335202][T23116] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.345091][T23116] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.419997][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7187'. [ 380.428919][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7187'. [ 380.460748][T23116] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.470631][T23116] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.503998][T23136] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.513904][T23136] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.525973][T23134] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.535842][T23134] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.547726][T23116] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.557534][T23116] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.600924][T23134] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.610763][T23134] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.622939][T23136] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.632738][T23136] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.663106][ T1574] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.671291][ T1574] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.684013][ T1574] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.692266][ T1574] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.703238][T23134] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.713171][T23134] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.727128][ T1453] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.735401][ T1453] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.745022][T23136] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.754883][T23136] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.768222][ T1453] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.776596][ T1453] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.787062][T23134] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.796995][T23134] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.827927][T23136] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.837811][T23136] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.896000][ T1453] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.904241][ T1453] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.918562][ T1453] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.926775][ T1453] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.939646][ T1453] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.947926][ T1453] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.965368][ T1453] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.973655][ T1453] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.988965][ T1453] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.997193][ T1453] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.015876][ T1453] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.024127][ T1453] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.033837][ T1453] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.042090][ T1453] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.053620][ T1453] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.061898][ T1453] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.107522][T23154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7198'. [ 381.116479][T23154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7198'. [ 381.143443][T23159] FAULT_INJECTION: forcing a failure. [ 381.143443][T23159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.156612][T23159] CPU: 1 UID: 0 PID: 23159 Comm: syz.2.7200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 381.156644][T23159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.156660][T23159] Call Trace: [ 381.156667][T23159] [ 381.156676][T23159] __dump_stack+0x1d/0x30 [ 381.156702][T23159] dump_stack_lvl+0xe8/0x140 [ 381.156726][T23159] dump_stack+0x15/0x1b [ 381.156757][T23159] should_fail_ex+0x265/0x280 [ 381.156788][T23159] should_fail+0xb/0x20 [ 381.156815][T23159] should_fail_usercopy+0x1a/0x20 [ 381.156958][T23159] _copy_from_user+0x1c/0xb0 [ 381.157041][T23159] __sys_bpf+0x178/0x7b0 [ 381.157115][T23159] __x64_sys_bpf+0x41/0x50 [ 381.157145][T23159] x64_sys_call+0x2aea/0x2ff0 [ 381.157173][T23159] do_syscall_64+0xd2/0x200 [ 381.157211][T23159] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.157286][T23159] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 381.157321][T23159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.157356][T23159] RIP: 0033:0x7f64859beec9 [ 381.157373][T23159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.157472][T23159] RSP: 002b:00007f648441f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.157490][T23159] RAX: ffffffffffffffda RBX: 00007f6485c15fa0 RCX: 00007f64859beec9 [ 381.157504][T23159] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 381.157520][T23159] RBP: 00007f648441f090 R08: 0000000000000000 R09: 0000000000000000 [ 381.157535][T23159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.157551][T23159] R13: 00007f6485c16038 R14: 00007f6485c15fa0 R15: 00007fff979b4a38 [ 381.157571][T23159] [ 381.347808][ T1812] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.356150][ T1812] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.369165][ T1812] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.377658][ T1812] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.416003][T23169] syzkaller0: entered promiscuous mode [ 381.421478][T23169] syzkaller0: entered allmulticast mode [ 381.462225][T23171] syzkaller0: entered promiscuous mode [ 381.468114][T23171] syzkaller0: entered allmulticast mode [ 381.475325][ T1574] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.483552][ T1574] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.495938][ T1574] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.504327][ T1574] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.513711][T23171] FAULT_INJECTION: forcing a failure. [ 381.513711][T23171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.526838][T23171] CPU: 0 UID: 0 PID: 23171 Comm: syz.2.7205 Not tainted syzkaller #0 PREEMPT(voluntary) [ 381.526869][T23171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.526884][T23171] Call Trace: [ 381.526891][T23171] [ 381.526900][T23171] __dump_stack+0x1d/0x30 [ 381.527015][T23171] dump_stack_lvl+0xe8/0x140 [ 381.527085][T23171] dump_stack+0x15/0x1b [ 381.527102][T23171] should_fail_ex+0x265/0x280 [ 381.527130][T23171] should_fail+0xb/0x20 [ 381.527154][T23171] should_fail_usercopy+0x1a/0x20 [ 381.527188][T23171] _copy_from_user+0x1c/0xb0 [ 381.527258][T23171] ___sys_recvmsg+0xaa/0x370 [ 381.527281][T23171] ? 0xffffffff81000000 [ 381.527292][T23171] ? __rcu_read_unlock+0x4f/0x70 [ 381.527327][T23171] __x64_sys_recvmsg+0xd1/0x160 [ 381.527405][T23171] x64_sys_call+0x2b42/0x2ff0 [ 381.527430][T23171] do_syscall_64+0xd2/0x200 [ 381.527463][T23171] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.527527][T23171] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 381.527552][T23171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.527575][T23171] RIP: 0033:0x7f64859beec9 [ 381.527591][T23171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.527612][T23171] RSP: 002b:00007f648441f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 381.527709][T23171] RAX: ffffffffffffffda RBX: 00007f6485c15fa0 RCX: 00007f64859beec9 [ 381.527724][T23171] RDX: 0000000000002140 RSI: 0000200000000b40 RDI: 0000000000000008 [ 381.527745][T23171] RBP: 00007f648441f090 R08: 0000000000000000 R09: 0000000000000000 [ 381.527760][T23171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.527775][T23171] R13: 00007f6485c16038 R14: 00007f6485c15fa0 R15: 00007fff979b4a38 [ 381.527799][T23171] [ 381.736333][T23177] batadv_slave_1: entered promiscuous mode [ 381.761119][T23177] syzkaller0: entered promiscuous mode [ 381.766786][T23177] syzkaller0: entered allmulticast mode [ 381.789530][T23176] batadv_slave_1: left promiscuous mode [ 381.811752][T23191] FAULT_INJECTION: forcing a failure. [ 381.811752][T23191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.824859][T23191] CPU: 1 UID: 0 PID: 23191 Comm: syz.4.7212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 381.824890][T23191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.824907][T23191] Call Trace: [ 381.824914][T23191] [ 381.824923][T23191] __dump_stack+0x1d/0x30 [ 381.824948][T23191] dump_stack_lvl+0xe8/0x140 [ 381.825027][T23191] dump_stack+0x15/0x1b [ 381.825048][T23191] should_fail_ex+0x265/0x280 [ 381.825074][T23191] should_fail+0xb/0x20 [ 381.825092][T23191] should_fail_usercopy+0x1a/0x20 [ 381.825115][T23191] _copy_from_user+0x1c/0xb0 [ 381.825211][T23191] __sys_connect+0xd0/0x2b0 [ 381.825237][T23191] __x64_sys_connect+0x3f/0x50 [ 381.825253][T23191] x64_sys_call+0x2c08/0x2ff0 [ 381.825296][T23191] do_syscall_64+0xd2/0x200 [ 381.825329][T23191] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.825405][T23191] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 381.825437][T23191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.825526][T23191] RIP: 0033:0x7f4d2a92eec9 [ 381.825543][T23191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.825594][T23191] RSP: 002b:00007f4d29397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 381.825616][T23191] RAX: ffffffffffffffda RBX: 00007f4d2ab85fa0 RCX: 00007f4d2a92eec9 [ 381.825631][T23191] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 381.825645][T23191] RBP: 00007f4d29397090 R08: 0000000000000000 R09: 0000000000000000 [ 381.825731][T23191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.825744][T23191] R13: 00007f4d2ab86038 R14: 00007f4d2ab85fa0 R15: 00007fffea207b58 [ 381.825824][T23191] [ 382.161407][T23213] xt_HMARK: proto mask must be zero with L3 mode [ 382.193575][T23216] netlink: 'syz.6.7223': attribute type 1 has an invalid length. [ 382.285052][T23231] loop4: detected capacity change from 0 to 1024 [ 382.293098][T23231] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 382.305163][T23231] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7230: Invalid block bitmap block 0 in block_group 0 [ 382.319256][T23231] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.7230: Failed to acquire dquot type 0 [ 382.334336][T23231] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.7230: Freeing blocks not in datazone - block = 0, count = 4096 [ 382.348086][T23231] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7230: Invalid inode bitmap blk 0 in block_group 0 [ 382.360941][T10420] ================================================================== [ 382.369025][T10420] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 382.376041][T10420] [ 382.378353][T10420] read-write to 0xffff888237c29d64 of 4 bytes by task 3408 on cpu 0: [ 382.386405][T10420] wq_worker_running+0x95/0x120 [ 382.391243][T10420] schedule_timeout+0xb7/0x170 [ 382.396025][T10420] msleep+0x50/0x90 [ 382.399823][T10420] nsim_fib_event_work+0x14a2/0x21a0 [ 382.405101][T10420] process_scheduled_works+0x4cb/0x9d0 [ 382.410577][T10420] worker_thread+0x582/0x770 [ 382.415168][T10420] kthread+0x489/0x510 [ 382.419224][T10420] ret_from_fork+0x11f/0x1b0 [ 382.423810][T10420] ret_from_fork_asm+0x1a/0x30 [ 382.428569][T10420] [ 382.430881][T10420] read to 0xffff888237c29d64 of 4 bytes by task 10420 on cpu 1: [ 382.438492][T10420] kick_pool+0x49/0x2d0 [ 382.442635][T10420] __queue_work+0x8cb/0xb50 [ 382.447139][T10420] queue_work_on+0xd1/0x160 [ 382.451632][T10420] process_srcu+0x999/0xbc0 [ 382.456141][T10420] process_scheduled_works+0x4cb/0x9d0 [ 382.461602][T10420] worker_thread+0x582/0x770 [ 382.466208][T10420] kthread+0x489/0x510 [ 382.470284][T10420] ret_from_fork+0x11f/0x1b0 [ 382.474863][T10420] ret_from_fork_asm+0x1a/0x30 [ 382.479615][T10420] [ 382.481921][T10420] value changed: 0x00000000 -> 0x00000001 [ 382.487617][T10420] [ 382.489923][T10420] Reported by Kernel Concurrency Sanitizer on: [ 382.496073][T10420] CPU: 1 UID: 0 PID: 10420 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 382.505963][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.516009][T10420] Workqueue: rcu_gp process_srcu [ 382.520944][T10420] ================================================================== [ 382.531433][ T146] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 382.532627][T23231] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 382.552990][T23231] EXT4-fs (loop4): 1 orphan inode deleted [ 382.559772][T23242] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 382.575075][T23231] netlink: 'syz.4.7230': attribute type 3 has an invalid length. [ 382.583294][T23231] rdma_rxe: rxe_newlink: failed to add bond0 [ 383.748282][ T10] usb 1-1: enqueue for inactive port 0 [ 383.753825][ T10] usb 1-1: enqueue for inactive port 0 [ 383.830387][ T10] vhci_hcd: vhci_device speed not set