last executing test programs: 1.852842789s ago: executing program 2 (id=2618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x20000095}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) 1.806138442s ago: executing program 2 (id=2620): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8, 0x97}, 0x2, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu<00||!') 1.60766043s ago: executing program 1 (id=2622): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.586369101s ago: executing program 2 (id=2624): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe2d, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/138, 0x8a, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x41, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 1.422413998s ago: executing program 1 (id=2625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x20010814) close(r1) 1.370568341s ago: executing program 2 (id=2627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@jqfmt_vfsold}, {@debug}, {@abort}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgsnd(0x0, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.304085904s ago: executing program 4 (id=2628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 1.301332354s ago: executing program 4 (id=2629): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000040)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x368, 0x128, 0x128, 0xffffffff, 0x0, 0x128, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'pim6reg\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x44}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5777c784bfe89e37d0184c242a34c316b3fd9e8e69d4cb7e56e7a9a6849a"}}, {{@ip={@remote, @local, 0xff000000, 0xffffff00, 'bond0\x00', 'vxcan1\x00', {}, {0xff}, 0x11, 0x1, 0x69}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x1, 0x0, 0x1, 0x7, 0x1], 0x1, 0x5}, {0xffffffffffffffff, [0x7, 0x2, 0x0, 0x1, 0x2, 0x2], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e24, @icmp_id=0x64}}}}, {{@ip={@empty, @multicast1, 0xff, 0x0, 'geneve1\x00', 'wlan0\x00', {0xff}, {0xff}, 0x6c, 0x0, 0xc}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @private=0xa010101, @remote, @icmp_id=0x64, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r9, 0x0, 0x4}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) unshare(0x100) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000180)={@multicast2, @multicast1}) 1.237990996s ago: executing program 0 (id=2631): socket$pptp(0x18, 0x1, 0x2) syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000200), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x200000) 1.123454731s ago: executing program 4 (id=2633): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x50, 0x4, 0x3, 0xfff00000}, {0x50, 0x7, 0x48, 0x5}]}, 0x10) socketpair(0x21, 0x3, 0x2, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1800001, &(0x7f0000000040)={[{@uid={'uid', 0x3d, r2}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000c80)='./cgroup.cpu/cgroup.procs\x00', 0x22000406, &(0x7f0000000280)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dax_always}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@resuid={'resuid', 0x3d, r2}}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0xc506}}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") setgroups(0x1, &(0x7f0000000080)=[0x0]) getgroups(0x27, &(0x7f0000002540)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x1}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@remote, r8}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000400000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r10, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="100000000b1401022dbd7000ffdbdf253adbd1b50f914ce6f93cb507fdc74d2c4cd22d0577abae25573f0e56b3884c38eb96595d2af8fc4d5da0bb009472bdb46bea36877c13c06483dd27f72ab82f8e"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.016140366s ago: executing program 1 (id=2634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005c00)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 956.932679ms ago: executing program 4 (id=2635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000380), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{0x0}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r5], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r4, 0x1f, 0x1, 0x40, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r4, 0x9, 0x0, @val=@netkit={@void, @value=r0, @void, @void, r6}}, 0x1c) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) 943.28145ms ago: executing program 1 (id=2636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@gettaction={0x74, 0x32, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x62}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40dd}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0x93, &(0x7f0000000000)="8e3f0d5d9f9883641214f5f497941de0bdfe993f51afc33771dbd7515965c3175794a271e568759aa9d94735fede6c05277eb4bcdbdaef1ac61923388f4a24f829a2bbebf06793ba9b4497ec777f2990f7987e25e2401df7959408c62db7ac5984c319a7b415380c55c227aec7a7db207d59c52416ae1917cd44a28188ecd329706f12a30ad38125edf1bae49b9372cdbe36f1"}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r5], 0x0, 0xe317, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000340)=ANY=[@ANYBLOB=' rwm\x00\x00\x00\x00\x00\x00'], 0xa) write$cgroup_devices(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:4\t\n', @ANYRESHEX=r9], 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 906.444481ms ago: executing program 4 (id=2637): r0 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}]}, 0x4c}, 0x2, 0x34005}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x8, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, &(0x7f0000000700)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b0150c104bfeac7d5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2f02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88050000000000000013f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b000944616c1dccf1e9d47969f9569ee50079610a5408d513e770374ac2116ef8ffe4818b9e30ce758f5229", 0xf4, 0xffffffffffffffff) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x77, 0x29c780}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r8, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) acct(0x0) acct(0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xb1c9) 876.676162ms ago: executing program 3 (id=2638): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 831.758354ms ago: executing program 1 (id=2639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 831.244394ms ago: executing program 3 (id=2640): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/20, &(0x7f00000000c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10], 0x0, [0x5, 0x401, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x5], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa4}}, 0x0) 788.000457ms ago: executing program 1 (id=2641): socket$inet(0x2, 0x3, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3", 0x1}], 0x1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001e0001002abd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000005000000faff070009"], 0x30}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0x110}}, 0x0) 728.394809ms ago: executing program 3 (id=2642): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r9, 0x80087601, 0x100000000010001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x6, 0x200, &(0x7f0000000880)="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"}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000100)={0x2000000, 0x0, 0x13, 0x4, 0x200, 0x0}) 695.79691ms ago: executing program 2 (id=2643): socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x8, [@enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x4}, {0x10, 0x6}, {0x2}, {0x4, 0x3}, {0x7, 0x4}, {0xa, 0x4}, {0xd, 0xfffff56c}]}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x0, 0x5}]}, @volatile={0x7}]}, {0x0, [0x30, 0x61, 0x2e, 0x0, 0x30, 0x30]}}, &(0x7f00000001c0)=""/163, 0xc4, 0xa3, 0x1, 0x67}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0xd}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3e0}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0x9, 0xab, &(0x7f0000000400)=""/171, 0xaaf1a8b4c99a111d, 0x33, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xc, 0x2, 0x36e}, 0x10, 0x16f19, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)=[{0x1, 0x4, 0x5, 0x8}], 0x10, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x10001) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x8, 0x18}, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {0x0}], 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc85}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xe, 0xc, 0x1}, 0x10, 0x302ca, 0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71184e000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00'}) 651.098533ms ago: executing program 0 (id=2644): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76"], 0x4c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRES8=r1], 0x1c}}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3, 0x6}, {0x10, 0xb}, {0x5, 0xd}}, [{0x8, 0xb, 0xb}, {0x8, 0xb, 0x75}, {0x8, 0xb, 0xf31}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x896}, {0x8, 0xb, 0xca}]}, 0x54}, 0x1, 0x0, 0x0, 0x24054}, 0x10) (rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfffffffffffffffb}}, {@nolazytime}, {@quota}, {@nomblk_io_submit}], [{@subj_role={'subj_role', 0x3d, '^#{]#@&&'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r13, 0x0, 0x10000001}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 627.409773ms ago: executing program 3 (id=2645): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x5, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) close(r0) 563.429696ms ago: executing program 0 (id=2646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005c00)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 563.141276ms ago: executing program 3 (id=2647): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x20010814) close(r2) 485.676459ms ago: executing program 0 (id=2648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000380), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{0x0}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r5], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r4, 0x1f, 0x1, 0x40, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r4, 0x9, 0x0, @val=@netkit={@void, @value=r0, @void, @void, r6}}, 0x1c) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) 453.573531ms ago: executing program 0 (id=2649): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 420.749812ms ago: executing program 2 (id=2650): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000140)=""/195, 0xc3) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) nanosleep(&(0x7f0000000040), 0x0) unshare(0x2a020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r9 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 420.314982ms ago: executing program 0 (id=2651): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/53, 0x35}], 0x1, 0x20, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r4}, 0x38) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x109000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x27f}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000140)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x10000, 0xf}, &(0x7f00000000c0), &(0x7f00000001c0)=0x1, 0xba0, 0xffffffffffffffff, 0x1000000005, 0x4, 0x0, 0xfffffffffffffff9}}], 0xa0}, 0x0) 352.452675ms ago: executing program 3 (id=2652): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000756de0800000000000000000a0000040500010007000010"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usbip_server_init(0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x3f7, 0x200, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x16c15e3878bfaae1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000d1dd0fccd5de059daf79f3", 0x27}, {&(0x7f0000000540)="37a88dc41ed443abea1e522800b6e02a2724fd355159d140ba8cc80e74f2d600eb117a5a6c08dd62e40e29b00eb7c7ac0c07940d04d4ca38b285433eb6fda99ec50f0decf9955266f63f794d1fd44ee189073167c81a6824ade4f92efc58fcd4e89f7361ac139d64187008a66e906d0be0df92b0112febc2265ff7231f5f08acc71d2081f42987c5b3430fac43cc63de57900a385e7cbd47b94dfc7f31e3498de52465765b7d674eb657b141dbc38697809229ae26d127a2fdd9e9ee888aa776ff60977646134f00e66b644d369bae8518e8e2de4e39d24deedd704ed6d4fb3039b1136c13f2f4a33657103aa8d5b29674102e200efc4fc5dc005bfd6f285e7be7ab8fccff7ef7fabcc4f9b97069b938b1782e67d834ec63d9ccd1b988fa39d90941e3ccf0bb4dfcffe9b5ea2225111ea4fe8260235acf0e593a1dff0c769d79a1e2789e0fff4e6c5f7c76a51767fa68a0f1ea19b49c0b8fd13225c352a2f87080dcfc14c73a6b23a9892b640ff37af91110cd395aa52f9371fc8dd7f888733c029e52feb538e9189d6434180ba8", 0x18e}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10b710b18f6a6eb3e0edacecac6e537e292fa84729d0f9307c991d2dcd08f489b6f01443bea0160d4611573a3da03d088a33db59ac98a334c635c5d036662c3b23e27854dbc6c163d718b4c7abbea840f975cceb9ace04893f367724b01266748ec2aa05aabb345fb3bdeec4b44af54866383c500e53f38217a45b37414a6d48adbb4e7dafc07e90b5596424efc201cff679e3b190cc2e0ff7cf943e65cb300f296e", 0xb4}], 0x4) kernel console output (not intermixed with test programs): =1326 audit(1763598902.442:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 178.839014][ T29] audit: type=1326 audit(1763598902.442:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 178.862758][ T29] audit: type=1326 audit(1763598902.442:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 178.886436][ T29] audit: type=1326 audit(1763598902.442:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 178.910152][ T29] audit: type=1326 audit(1763598902.442:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 178.933846][ T29] audit: type=1326 audit(1763598902.442:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 178.957471][ T29] audit: type=1326 audit(1763598902.442:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 179.125972][T13272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2158'. [ 179.213939][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2159'. [ 179.224048][T13286] syz!: rxe_newlink: already configured on team_slave_0 [ 179.275059][T13268] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2155'. [ 179.284416][T13268] net_ratelimit: 1 callbacks suppressed [ 179.284429][T13268] netlink: zone id is out of range [ 179.295187][T13268] netlink: zone id is out of range [ 179.300676][T13268] netlink: zone id is out of range [ 179.306228][T13268] netlink: zone id is out of range [ 179.311438][T13268] netlink: zone id is out of range [ 179.316591][T13268] netlink: zone id is out of range [ 179.321978][T13268] netlink: zone id is out of range [ 179.327158][T13268] netlink: zone id is out of range [ 179.340617][T13268] netlink: set zone limit has 8 unknown bytes [ 179.411747][T13285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 179.418370][T13285] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.425909][T13285] vhci_hcd vhci_hcd.0: Device attached [ 179.440174][T13285] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 179.446737][T13285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.454304][T13285] vhci_hcd vhci_hcd.0: Device attached [ 179.466399][T13285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.476718][T13285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.485633][T13285] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15) [ 179.492253][T13285] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.499915][T13285] vhci_hcd vhci_hcd.0: Device attached [ 179.527144][T13285] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(17) [ 179.533780][T13285] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.541410][T13285] vhci_hcd vhci_hcd.0: Device attached [ 179.615050][ T3421] vhci_hcd: vhci_device speed not set [ 179.629935][T13302] vhci_hcd: connection closed [ 179.630318][T13294] vhci_hcd: connection closed [ 179.631719][T13299] vhci_hcd: connection closed [ 179.635378][T13292] vhci_hcd: connection closed [ 179.644679][ T9853] vhci_hcd: stop threads [ 179.653842][ T9853] vhci_hcd: release socket [ 179.656110][T13315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2173'. [ 179.658267][ T9853] vhci_hcd: disconnect device [ 179.677677][ T9853] vhci_hcd: stop threads [ 179.682031][ T9853] vhci_hcd: release socket [ 179.686537][ T9853] vhci_hcd: disconnect device [ 179.695707][ T9853] vhci_hcd: stop threads [ 179.700095][ T9853] vhci_hcd: release socket [ 179.704623][ T9853] vhci_hcd: disconnect device [ 179.714238][ T9853] vhci_hcd: stop threads [ 179.718532][ T9853] vhci_hcd: release socket [ 179.723052][ T9853] vhci_hcd: disconnect device [ 179.727888][ T3421] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 179.735372][ T3421] usb 9-1: enqueue for inactive port 0 [ 179.740929][ T3421] usb 9-1: enqueue for inactive port 0 [ 179.747487][ T3421] usb 9-1: enqueue for inactive port 0 [ 179.822079][ T3421] vhci_hcd: vhci_device speed not set [ 179.916389][T13325] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2176'. [ 179.925946][T13325] netlink: zone id is out of range [ 180.069967][T13335] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2177'. [ 180.085844][T13335] loop2: detected capacity change from 0 to 512 [ 180.092811][T13335] EXT4-fs: Ignoring removed orlov option [ 180.105870][T13334] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 180.154456][T13335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.164110][T13335] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.176529][T13335] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2177: bg 0: block 248: padding at end of block bitmap is not set [ 180.192319][T13335] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2177: Failed to acquire dquot type 1 [ 180.207617][T13335] EXT4-fs (loop2): 1 truncate cleaned up [ 180.214486][T13335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.659702][T13359] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.672255][T13359] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 180.683043][T13359] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 180.754369][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.856681][T13364] syz!: rxe_newlink: already configured on team_slave_0 [ 180.866395][ T3401] Process accounting resumed [ 180.928378][T13374] loop3: detected capacity change from 0 to 1024 [ 180.937463][T13374] EXT4-fs: Ignoring removed bh option [ 180.947914][T13374] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.957159][T13374] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.971758][T13374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 180.981235][T13366] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 180.987781][T13366] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 180.995308][T13366] vhci_hcd vhci_hcd.0: Device attached [ 181.005075][T13366] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 181.011712][T13366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.019271][T13366] vhci_hcd vhci_hcd.0: Device attached [ 181.025912][T13366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 181.028155][T13374] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2195: lblock 2 mapped to illegal pblock 2 (length 1) [ 181.034531][T13366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 181.053578][T13374] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2195: lblock 0 mapped to illegal pblock 48 (length 1) [ 181.060089][T13366] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 181.070599][T13374] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2195: Failed to acquire dquot type 0 [ 181.076741][T13366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.076855][T13366] vhci_hcd vhci_hcd.0: Device attached [ 181.101400][T13374] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 181.111669][T13374] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2195: mark_inode_dirty error [ 181.124093][T13366] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 181.130818][T13366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.138475][T13366] vhci_hcd vhci_hcd.0: Device attached [ 181.146709][T13374] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 181.158596][T13386] vhci_hcd: connection closed [ 181.158705][T13384] vhci_hcd: connection closed [ 181.159242][T13374] EXT4-fs (loop3): 1 orphan inode deleted [ 181.163813][T13380] vhci_hcd: connection closed [ 181.168919][T13374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.174416][T13388] vhci_hcd: connection closed [ 181.191257][T10851] vhci_hcd: vhci_device speed not set [ 181.198580][ T2404] vhci_hcd: stop threads [ 181.203284][ T9853] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 181.205666][ T2404] vhci_hcd: release socket [ 181.224229][ T2404] vhci_hcd: disconnect device [ 181.231208][ T9853] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 0 [ 181.231864][ T2404] vhci_hcd: stop threads [ 181.246976][ T2404] vhci_hcd: release socket [ 181.251406][ T2404] vhci_hcd: disconnect device [ 181.256942][ T2404] vhci_hcd: stop threads [ 181.261270][ T2404] vhci_hcd: release socket [ 181.265803][ T2404] vhci_hcd: disconnect device [ 181.270701][ T2404] vhci_hcd: stop threads [ 181.275033][ T2404] vhci_hcd: release socket [ 181.279482][ T2404] vhci_hcd: disconnect device [ 181.291653][T10851] usb 5-1: new full-speed USB device number 7 using vhci_hcd [ 181.299161][T10851] usb 5-1: enqueue for inactive port 0 [ 181.304866][T10851] usb 5-1: enqueue for inactive port 0 [ 181.310471][T10851] usb 5-1: enqueue for inactive port 0 [ 181.342876][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.352430][ T3321] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 181.365688][ T3321] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 181.375364][ T3321] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 181.391748][T10851] vhci_hcd: vhci_device speed not set [ 181.408507][T13399] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 181.461860][ T2966] usb 3-1: enqueue for inactive port 0 [ 181.467433][ T2966] usb 3-1: enqueue for inactive port 0 [ 181.539048][ T3401] Process accounting resumed [ 181.544521][ T2966] vhci_hcd: vhci_device speed not set [ 181.636006][T13414] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 181.800343][T13423] loop2: detected capacity change from 0 to 1024 [ 181.822079][T13423] EXT4-fs: Ignoring removed bh option [ 181.834476][T13423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.844071][T13423] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.862862][T13423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 181.879933][T13423] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2210: lblock 2 mapped to illegal pblock 2 (length 1) [ 181.895037][T13423] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2210: lblock 0 mapped to illegal pblock 48 (length 1) [ 181.911934][T13423] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2210: Failed to acquire dquot type 0 [ 181.941830][T13423] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 181.968178][T13423] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2210: mark_inode_dirty error [ 181.976097][T13421] tipc: Enabled bearer , priority 0 [ 181.997152][T13423] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 182.012026][T13421] tipc: Disabling bearer [ 182.019106][T13423] EXT4-fs (loop2): 1 orphan inode deleted [ 182.026587][T13423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.041735][ T9853] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 182.056809][ T9853] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 0 [ 182.075058][T13432] __nla_validate_parse: 6 callbacks suppressed [ 182.075075][T13432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2213'. [ 182.116441][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2214'. [ 182.196234][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.216711][ T3319] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 182.245453][ T3319] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 182.262329][ T3319] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 182.359612][T13453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2224'. [ 182.425937][T13442] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 182.432524][T13442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 182.440068][T13442] vhci_hcd vhci_hcd.0: Device attached [ 182.463980][T13442] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 182.470530][T13442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.478174][T13442] vhci_hcd vhci_hcd.0: Device attached [ 182.518789][T13467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.543050][T13442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.551800][T13466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2226'. [ 182.557495][T13446] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2221'. [ 182.579662][T13465] tipc: Enabling of bearer rejected, failed to enable media [ 182.589278][T13466] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 182.623905][T13442] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 182.630623][T13442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.638320][T13442] vhci_hcd vhci_hcd.0: Device attached [ 182.693587][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2227'. [ 182.706477][T13467] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(17) [ 182.713110][T13467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.720825][T13467] vhci_hcd vhci_hcd.0: Device attached [ 182.746057][T13472] vhci_hcd: connection closed [ 182.746389][ T9853] vhci_hcd: stop threads [ 182.755423][ T9853] vhci_hcd: release socket [ 182.759860][ T9853] vhci_hcd: disconnect device [ 182.762725][T13468] vhci_hcd: connection closed [ 182.764945][T13463] vhci_hcd: connection closed [ 182.769906][T13458] vhci_hcd: connection closed [ 182.782908][ T9853] vhci_hcd: stop threads [ 182.792038][ T9853] vhci_hcd: release socket [ 182.796473][ T9853] vhci_hcd: disconnect device [ 182.801554][ T9853] vhci_hcd: stop threads [ 182.805841][ T9853] vhci_hcd: release socket [ 182.810266][ T9853] vhci_hcd: disconnect device [ 182.815841][ T9853] vhci_hcd: stop threads [ 182.820118][ T9853] vhci_hcd: release socket [ 182.824592][ T9853] vhci_hcd: disconnect device [ 182.959359][ T3421] Process accounting resumed [ 182.967128][T13487] tipc: Enabled bearer , priority 0 [ 182.975493][T13487] tipc: Disabling bearer [ 182.987199][T13477] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 182.993817][T13477] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.001296][T13477] vhci_hcd vhci_hcd.0: Device attached [ 183.016459][T13477] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 183.023011][T13477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.030552][T13477] vhci_hcd vhci_hcd.0: Device attached [ 183.047317][T13477] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.058727][T13477] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.088372][T13477] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 183.095012][T13477] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 183.102727][T13477] vhci_hcd vhci_hcd.0: Device attached [ 183.118448][T13477] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 183.125097][T13477] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 183.132839][T13477] vhci_hcd vhci_hcd.0: Device attached [ 183.141144][T13498] vhci_hcd: connection closed [ 183.141383][T13490] vhci_hcd: connection closed [ 183.171940][ T2404] vhci_hcd: stop threads [ 183.180917][ T2404] vhci_hcd: release socket [ 183.185437][ T2404] vhci_hcd: disconnect device [ 183.190166][ T2966] vhci_hcd: vhci_device speed not set [ 183.191652][T13492] vhci_hcd: connection closed [ 183.195619][T13502] vhci_hcd: connection closed [ 183.215826][ T2404] vhci_hcd: stop threads [ 183.224881][ T2404] vhci_hcd: release socket [ 183.229359][ T2404] vhci_hcd: disconnect device [ 183.248957][ T2404] vhci_hcd: stop threads [ 183.253294][ T2404] vhci_hcd: release socket [ 183.257770][ T2404] vhci_hcd: disconnect device [ 183.258034][T13505] loop4: detected capacity change from 0 to 1024 [ 183.268998][ T2966] usb 1-1: new full-speed USB device number 7 using vhci_hcd [ 183.269746][ T2404] vhci_hcd: stop threads [ 183.276635][ T2966] usb 1-1: enqueue for inactive port 0 [ 183.280700][ T2404] vhci_hcd: release socket [ 183.290609][ T2404] vhci_hcd: disconnect device [ 183.291030][ T2966] usb 1-1: enqueue for inactive port 0 [ 183.310715][T13505] EXT4-fs: Ignoring removed bh option [ 183.317504][ T2966] usb 1-1: enqueue for inactive port 0 [ 183.323210][T13505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.337825][T13505] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.359112][T13505] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 183.382453][T11204] usb 7-1: enqueue for inactive port 0 [ 183.393908][T11204] usb 7-1: enqueue for inactive port 0 [ 183.401799][ T2966] vhci_hcd: vhci_device speed not set [ 183.407851][T13505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2236: lblock 2 mapped to illegal pblock 2 (length 1) [ 183.441771][T13505] __quota_error: 180 callbacks suppressed [ 183.441788][T13505] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 183.461636][T11204] vhci_hcd: vhci_device speed not set [ 183.467183][T13505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2236: lblock 0 mapped to illegal pblock 48 (length 1) [ 183.491709][T13505] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 183.500512][T13505] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2236: Failed to acquire dquot type 0 [ 183.521693][T13505] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 183.531548][T13512] tipc: Enabled bearer , priority 0 [ 183.534062][T13505] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2236: mark_inode_dirty error [ 183.549851][T13505] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 183.561437][T13512] tipc: Disabling bearer [ 183.562076][T13505] EXT4-fs (loop4): 1 orphan inode deleted [ 183.573689][T13505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.588308][ T9632] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.603966][ T9632] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 183.612538][ T9632] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 0 [ 183.613270][ T29] audit: type=1326 audit(1763598907.272:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 183.670022][T13516] siw: device registration error -23 [ 183.687831][ T29] audit: type=1326 audit(1763598907.302:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 183.711395][ T29] audit: type=1326 audit(1763598907.302:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 183.734923][ T29] audit: type=1326 audit(1763598907.302:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 183.758519][ T29] audit: type=1326 audit(1763598907.302:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 183.782094][ T29] audit: type=1326 audit(1763598907.302:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 183.805803][ T29] audit: type=1326 audit(1763598907.302:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 183.906999][T13525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2243'. [ 183.925493][T13525] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.958575][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.992571][T13530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2242'. [ 183.993792][ T3323] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 184.049031][T13533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2248'. [ 184.060095][ T3323] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 184.065402][T13535] loop3: detected capacity change from 0 to 512 [ 184.075977][ T3323] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 184.096126][T13535] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 184.185279][T13541] loop4: detected capacity change from 0 to 512 [ 184.191647][T13535] EXT4-fs (loop3): invalid journal inode [ 184.195797][T13541] EXT4-fs: dax option not supported [ 184.216225][T13535] EXT4-fs (loop3): can't get journal size [ 184.295453][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 184.314445][T13535] EXT4-fs (loop3): 1 truncate cleaned up [ 184.328879][T13535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.479885][T13539] loop1: detected capacity change from 0 to 32768 [ 184.510760][T10851] Process accounting resumed [ 184.567059][ T3401] Process accounting resumed [ 184.852289][ T3553] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 184.857878][ T3553] loop1: p1 start 460800 is beyond EOD, truncated [ 184.864377][ T3553] loop1: p2 size 83886080 extends beyond EOD, truncated [ 185.072957][ T3553] loop1: p5 start 460800 is beyond EOD, truncated [ 185.079446][ T3553] loop1: p6 size 83886080 extends beyond EOD, truncated [ 185.088019][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.109526][T13539] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 185.115750][T13539] loop1: p1 start 460800 is beyond EOD, truncated [ 185.122261][T13539] loop1: p2 size 83886080 extends beyond EOD, truncated [ 185.151486][T13539] loop1: p5 start 460800 is beyond EOD, truncated [ 185.158009][T13539] loop1: p6 size 83886080 extends beyond EOD, truncated [ 185.235300][T13564] 9pnet: Could not find request transport: f [ 185.312238][T13568] siw: device registration error -23 [ 185.322028][T13562] tipc: Enabled bearer , priority 0 [ 185.322071][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 185.330082][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 185.349640][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 185.361673][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 185.373274][T13562] tipc: Disabling bearer [ 185.477737][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 185.482160][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 185.499769][ T3658] udevd[3658]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 185.508864][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 185.533843][T13574] loop1: detected capacity change from 0 to 128 [ 185.552733][T13574] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 185.839252][T13597] loop2: detected capacity change from 0 to 512 [ 185.846371][T13597] EXT4-fs: Ignoring removed orlov option [ 185.904516][T13597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.933269][T13597] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.940628][T13597] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2261: bg 0: block 248: padding at end of block bitmap is not set [ 185.955506][T13597] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2261: Failed to acquire dquot type 1 [ 185.967858][T13597] EXT4-fs (loop2): 1 truncate cleaned up [ 186.124982][T13597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.199244][T13595] tipc: Enabled bearer , priority 0 [ 186.211294][T10851] Process accounting resumed [ 186.293097][T13595] tipc: Disabling bearer [ 186.429127][T13613] loop0: detected capacity change from 0 to 1024 [ 186.437808][T13613] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 186.448814][T13613] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 186.541633][T13613] JBD2: no valid journal superblock found [ 186.547393][T13613] EXT4-fs (loop0): Could not load journal inode [ 186.555203][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.814025][T13609] lo speed is unknown, defaulting to 1000 [ 186.982214][T11204] Process accounting resumed [ 187.374096][T13649] __nla_validate_parse: 4 callbacks suppressed [ 187.374143][T13649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2282'. [ 187.472801][T11204] Process accounting resumed [ 187.617108][T13661] loop1: detected capacity change from 0 to 512 [ 187.662376][ T3401] Process accounting resumed [ 187.712009][T13661] EXT4-fs: dax option not supported [ 187.735892][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 187.775647][T13667] loop1: detected capacity change from 0 to 1024 [ 187.784721][T13667] EXT4-fs: Ignoring removed bh option [ 187.791318][T13667] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.805236][T13667] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.816628][T13667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 187.828112][T13667] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2286: lblock 2 mapped to illegal pblock 2 (length 1) [ 187.851916][T13667] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2286: lblock 0 mapped to illegal pblock 48 (length 1) [ 187.885264][T13667] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2286: Failed to acquire dquot type 0 [ 187.905971][T13667] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 187.916672][T13667] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2286: mark_inode_dirty error [ 187.928804][T13667] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 187.940914][T13667] EXT4-fs (loop1): 1 orphan inode deleted [ 187.960445][ T2404] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 187.979997][T13667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.017194][ T2404] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 188.084758][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.103222][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 188.142213][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 188.158375][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 188.243875][T13688] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2290'. [ 188.253772][T13688] net_ratelimit: 21 callbacks suppressed [ 188.253785][T13688] netlink: zone id is out of range [ 188.264732][T13688] netlink: zone id is out of range [ 188.276640][T13688] netlink: zone id is out of range [ 188.283112][T13688] netlink: zone id is out of range [ 188.288273][T13688] netlink: zone id is out of range [ 188.293451][T13688] netlink: zone id is out of range [ 188.298917][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 188.341903][T13688] netlink: zone id is out of range [ 188.347148][T13688] netlink: zone id is out of range [ 188.369662][T13688] netlink: set zone limit has 8 unknown bytes [ 188.520325][T13690] loop2: detected capacity change from 0 to 32768 [ 188.552128][ T3553] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 188.557951][ T3553] loop2: p1 start 460800 is beyond EOD, truncated [ 188.564499][ T3553] loop2: p2 size 83886080 extends beyond EOD, truncated [ 188.574473][ T3553] loop2: p5 start 460800 is beyond EOD, truncated [ 188.580967][ T3553] loop2: p6 size 83886080 extends beyond EOD, truncated [ 188.582058][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 188.603445][T13690] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 188.609167][T13690] loop2: p1 start 460800 is beyond EOD, truncated [ 188.615669][T13690] loop2: p2 size 83886080 extends beyond EOD, truncated [ 188.625081][T13690] loop2: p5 start 460800 is beyond EOD, truncated [ 188.631701][T13690] loop2: p6 size 83886080 extends beyond EOD, truncated [ 188.705272][T11204] Process accounting resumed [ 188.721261][T13699] loop4: detected capacity change from 0 to 512 [ 188.727993][T13699] EXT4-fs: test_dummy_encryption option not supported [ 188.773198][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 188.775331][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 188.945908][T13711] loop3: detected capacity change from 0 to 1024 [ 188.963216][T13711] EXT4-fs: Ignoring removed bh option [ 188.972004][T13711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.990987][T13711] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.012221][T13711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 189.030913][T13711] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2301: lblock 2 mapped to illegal pblock 2 (length 1) [ 189.045650][T13711] __quota_error: 96 callbacks suppressed [ 189.045669][T13711] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 189.059521][T13711] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2301: lblock 0 mapped to illegal pblock 48 (length 1) [ 189.074879][T13711] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 189.083852][T13711] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2301: Failed to acquire dquot type 0 [ 189.098169][T13711] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 189.108249][T13711] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2301: mark_inode_dirty error [ 189.120016][T13711] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 189.151280][T13711] EXT4-fs (loop3): 1 orphan inode deleted [ 189.157491][T13711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.170369][ T3440] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.185558][ T3440] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 189.194145][ T3440] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 189.241634][ T29] audit: type=1326 audit(1763598912.882:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88010ff749 code=0x7ffc0000 [ 189.265228][ T29] audit: type=1326 audit(1763598912.882:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88010ff749 code=0x7ffc0000 [ 189.288793][ T29] audit: type=1326 audit(1763598912.882:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88010ff749 code=0x7ffc0000 [ 189.312293][ T29] audit: type=1326 audit(1763598912.892:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88010ff749 code=0x7ffc0000 [ 189.335810][ T29] audit: type=1326 audit(1763598912.892:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88010ff749 code=0x7ffc0000 [ 189.359328][ T29] audit: type=1326 audit(1763598912.892:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88010ff749 code=0x7ffc0000 [ 189.382894][ T29] audit: type=1326 audit(1763598912.892:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88010ff749 code=0x7ffc0000 [ 189.484169][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.493526][ T3321] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 189.533151][ T3321] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 189.557436][ T3321] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 189.671195][T13735] loop3: detected capacity change from 0 to 128 [ 189.749903][T13737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2308'. [ 189.766460][T13737] loop1: detected capacity change from 0 to 512 [ 189.773316][T13737] EXT4-fs: Ignoring removed orlov option [ 189.785864][T13730] tipc: Enabled bearer , priority 0 [ 189.892756][T10851] Process accounting resumed [ 190.020591][T13730] tipc: Disabling bearer [ 190.092175][T10851] Process accounting resumed [ 190.100284][T13735] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 190.110628][T13737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.130670][T13737] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.137673][T13737] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2308: bg 0: block 248: padding at end of block bitmap is not set [ 190.152339][T13737] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2308: Failed to acquire dquot type 1 [ 190.167636][T13737] EXT4-fs (loop1): 1 truncate cleaned up [ 190.173701][T13737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.178400][T13735] syzkaller0: entered promiscuous mode [ 190.191661][T13735] syzkaller0: entered allmulticast mode [ 190.436305][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.455600][T13744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 190.462276][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.469760][T13744] vhci_hcd vhci_hcd.0: Device attached [ 190.506189][T13754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2313'. [ 190.516043][T13754] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 190.535589][T13757] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 190.542279][T13757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.549958][T13757] vhci_hcd vhci_hcd.0: Device attached [ 190.566026][ T3395] Process accounting resumed [ 190.566401][T13756] siw: device registration error -23 [ 190.607277][T13744] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.626354][T13744] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.651636][T10851] vhci_hcd: vhci_device speed not set [ 190.662728][T13744] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 190.669404][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 190.677025][T13744] vhci_hcd vhci_hcd.0: Device attached [ 190.707586][T13768] loop1: detected capacity change from 0 to 1024 [ 190.721953][T10851] usb 5-1: new full-speed USB device number 8 using vhci_hcd [ 190.738973][T13776] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2315'. [ 190.748437][T13776] netlink: zone id is out of range [ 190.772082][T13768] EXT4-fs: Ignoring removed bh option [ 190.782586][T13768] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.803660][T13770] vhci_hcd: connection closed [ 190.803843][T13759] vhci_hcd: connection closed [ 190.804198][T13744] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 190.810512][ T142] vhci_hcd: stop threads [ 190.813243][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 190.813313][T13744] vhci_hcd vhci_hcd.0: Device attached [ 190.819932][ T142] vhci_hcd: release socket [ 190.824305][T13751] vhci_hcd: connection closed [ 190.831773][ T142] vhci_hcd: disconnect device [ 190.851064][T13752] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 190.857175][T13774] vhci_hcd: connection closed [ 190.861502][T13768] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.909328][T13768] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 190.919351][ T142] vhci_hcd: stop threads [ 190.923674][ T142] vhci_hcd: release socket [ 190.928176][ T142] vhci_hcd: disconnect device [ 190.928395][T13768] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2317: lblock 2 mapped to illegal pblock 2 (length 1) [ 190.949019][T13768] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2317: lblock 0 mapped to illegal pblock 48 (length 1) [ 190.967521][T13768] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2317: Failed to acquire dquot type 0 [ 190.979147][T13768] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 190.990792][T13768] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2317: mark_inode_dirty error [ 191.000966][ T142] vhci_hcd: stop threads [ 191.002460][T13768] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 191.006496][ T142] vhci_hcd: release socket [ 191.006518][ T142] vhci_hcd: disconnect device [ 191.026360][T13768] EXT4-fs (loop1): 1 orphan inode deleted [ 191.035743][T13768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.050310][ T3440] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.064995][ T142] vhci_hcd: stop threads [ 191.069290][ T142] vhci_hcd: release socket [ 191.073870][ T142] vhci_hcd: disconnect device [ 191.079337][ T3440] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 191.093286][T13780] loop4: detected capacity change from 0 to 1024 [ 191.100359][T13780] EXT4-fs: Ignoring removed bh option [ 191.108743][T13780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.132772][T13780] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.157219][T13780] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 191.166443][T13780] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2318: lblock 2 mapped to illegal pblock 2 (length 1) [ 191.180803][T13780] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2318: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.195290][T13780] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2318: Failed to acquire dquot type 0 [ 191.211103][T13780] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 191.231611][T13780] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2318: mark_inode_dirty error [ 191.244101][T13780] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 191.273360][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.283325][ T3421] Process accounting resumed [ 191.302097][T13780] EXT4-fs (loop4): 1 orphan inode deleted [ 191.308036][ T3440] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.323009][T13780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.349348][ T3440] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 191.378754][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 191.407253][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 191.423068][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 191.436752][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.450699][ T3323] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 191.472115][ T3323] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 191.481844][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2322'. [ 191.501706][ T3323] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 191.548934][ T3395] Process accounting resumed [ 191.566822][T13800] loop1: detected capacity change from 0 to 512 [ 191.579855][T13800] EXT4-fs: dax option not supported [ 191.620266][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 191.768389][T13811] siw: device registration error -23 [ 191.906625][T13815] loop4: detected capacity change from 0 to 1024 [ 191.914992][T13815] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 191.925946][T13815] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 191.938543][T13815] JBD2: no valid journal superblock found [ 191.944344][T13815] EXT4-fs (loop4): Could not load journal inode [ 191.983154][T13815] lo speed is unknown, defaulting to 1000 [ 192.419838][T13820] loop5: detected capacity change from 0 to 7 [ 192.431522][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.439469][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.447345][ T3553] loop5: unable to read partition table [ 192.465840][T13820] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.474215][T13820] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.482103][T13820] loop5: unable to read partition table [ 192.488375][T13820] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 192.488375][T13820] ) failed (rc=-5) [ 192.527351][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.527606][T13822] loop3: detected capacity change from 0 to 1024 [ 192.537187][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.549731][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.562498][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.570422][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.580897][T13827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2335'. [ 192.590360][T13822] EXT4-fs: Ignoring removed bh option [ 192.619505][T13822] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.644485][T13822] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.656039][T13822] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 192.677884][T13834] loop0: detected capacity change from 0 to 512 [ 192.681981][T13822] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2334: lblock 2 mapped to illegal pblock 2 (length 1) [ 192.686925][T13834] EXT4-fs: dax option not supported [ 192.710653][T13822] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2334: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.747488][T13822] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2334: Failed to acquire dquot type 0 [ 192.759092][T13822] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 192.769795][T13822] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2334: mark_inode_dirty error [ 192.782981][T13822] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 192.797574][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'. [ 192.799012][T13839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2339'. [ 192.820570][T13839] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 192.850998][T13822] EXT4-fs (loop3): 1 orphan inode deleted [ 192.857351][T13822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.870168][ T142] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.904351][ T142] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 192.956723][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.972824][ T3321] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 192.992107][ T3321] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 193.009151][ T3321] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 193.061709][ T3401] Process accounting resumed [ 193.234586][T13862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2346'. [ 193.273658][T13864] loop1: detected capacity change from 0 to 512 [ 193.280363][T13864] EXT4-fs: dax option not supported [ 193.308953][T13866] loop5: detected capacity change from 0 to 7 [ 193.327428][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.335638][ T3553] loop5: unable to read partition table [ 193.347689][T13866] loop5: unable to read partition table [ 193.353317][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'. [ 193.381416][T13866] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 193.381416][T13866] ) failed (rc=-5) [ 193.411371][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2349'. [ 193.516406][T13875] loop4: detected capacity change from 0 to 512 [ 193.538929][T13875] EXT4-fs: dax option not supported [ 193.590176][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'. [ 193.600156][ T3395] Process accounting resumed [ 193.678157][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'. [ 193.725772][T13871] loop1: detected capacity change from 0 to 32768 [ 193.802399][T13871] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 193.821870][T13871] loop1: p1 start 460800 is beyond EOD, truncated [ 193.828337][T13871] loop1: p2 size 83886080 extends beyond EOD, truncated [ 193.894141][T13871] loop1: p5 start 460800 is beyond EOD, truncated [ 193.895209][T13893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2357'. [ 193.900673][T13871] loop1: p6 size 83886080 extends beyond EOD, truncated [ 193.937374][ T3003] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 193.942794][ T3003] loop1: p1 start 460800 is beyond EOD, truncated [ 193.949247][ T3003] loop1: p2 size 83886080 extends beyond EOD, truncated [ 193.967829][ T3003] loop1: p5 start 460800 is beyond EOD, truncated [ 193.974311][ T3003] loop1: p6 size 83886080 extends beyond EOD, truncated [ 194.040415][T13897] tipc: Enabling of bearer rejected, failed to enable media [ 194.183697][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'. [ 194.189745][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 194.204088][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 194.215774][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 194.216389][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 194.254560][T13913] loop0: detected capacity change from 0 to 1024 [ 194.273360][T13915] loop5: detected capacity change from 0 to 7 [ 194.284972][T13913] EXT4-fs: Ignoring removed bh option [ 194.291470][T13913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.291959][T13917] loop5: unable to read partition table [ 194.300489][T13913] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.338843][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 194.351158][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 194.363610][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 194.385191][T13915] loop5: unable to read partition table [ 194.390998][T13915] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 194.390998][T13915] ) failed (rc=-5) [ 194.392831][ T3658] udevd[3658]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 194.413600][T13913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 194.460864][T13913] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2365: lblock 2 mapped to illegal pblock 2 (length 1) [ 194.492412][T13913] __quota_error: 169 callbacks suppressed [ 194.492436][T13913] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 194.534060][T13923] loop1: detected capacity change from 0 to 1024 [ 194.540728][T13923] EXT4-fs: Ignoring removed bh option [ 194.543449][T13913] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2365: lblock 0 mapped to illegal pblock 48 (length 1) [ 194.603444][T13926] siw: device registration error -23 [ 194.612534][T13913] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 194.621350][T13913] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2365: Failed to acquire dquot type 0 [ 194.696358][ T29] audit: type=1326 audit(1763598918.352:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 194.721778][T13913] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 194.745094][T13913] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2365: mark_inode_dirty error [ 194.748448][T13923] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.772031][T13913] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 194.775163][ T29] audit: type=1326 audit(1763598918.382:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 194.801664][ T3395] Process accounting resumed [ 194.805799][ T29] audit: type=1326 audit(1763598918.382:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 194.810665][T13913] EXT4-fs (loop0): 1 orphan inode deleted [ 194.833890][ T29] audit: type=1326 audit(1763598918.382:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 194.861614][ T142] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.863109][ T29] audit: type=1326 audit(1763598918.382:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad491f749 code=0x7ffc0000 [ 194.911967][ T142] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 194.912248][T13923] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.920454][ T142] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 194.954143][T13938] tipc: Enabling of bearer rejected, failed to enable media [ 194.982092][T13913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.068612][T13923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 195.098523][T13923] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2370: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.099105][ T29] audit: type=1326 audit(1763598918.752:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13911 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e00af749 code=0x7ffc0000 [ 195.131816][T13923] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 195.161417][T13923] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2370: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.189020][T13942] loop5: detected capacity change from 0 to 7 [ 195.197241][T13923] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2370: Failed to acquire dquot type 0 [ 195.197776][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.209370][T13942] loop5: unable to read partition table [ 195.223684][T13942] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 195.223684][T13942] ) failed (rc=-5) [ 195.266157][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 195.279223][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 195.289409][T13923] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 195.301009][T13923] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2370: mark_inode_dirty error [ 195.314024][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 195.325915][T13945] netlink: 'syz.4.2377': attribute type 9 has an invalid length. [ 195.342823][T13923] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 195.364396][T13947] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.371095][T13923] EXT4-fs (loop1): 1 orphan inode deleted [ 195.378616][T13923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.391730][ T3440] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.454413][ T3440] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 195.600345][T13954] loop3: detected capacity change from 0 to 512 [ 195.607682][T13954] EXT4-fs: dax option not supported [ 195.733446][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.753357][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 195.782859][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 195.799878][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 195.862111][T10851] usb 5-1: enqueue for inactive port 0 [ 195.868139][T10851] usb 5-1: enqueue for inactive port 0 [ 195.915126][T13951] net_ratelimit: 8 callbacks suppressed [ 195.915146][T13951] netlink: zone id is out of range [ 195.926085][T13951] netlink: zone id is out of range [ 195.952266][T10851] vhci_hcd: vhci_device speed not set [ 195.959980][T13951] netlink: zone id is out of range [ 195.970095][T13951] netlink: zone id is out of range [ 195.975343][T13951] netlink: zone id is out of range [ 195.980495][T13951] netlink: zone id is out of range [ 195.997094][T13951] netlink: zone id is out of range [ 196.002606][T13951] netlink: zone id is out of range [ 196.007984][T13951] netlink: zone id is out of range [ 196.013145][T13951] netlink: zone id is out of range [ 196.037027][T13968] tipc: Enabling of bearer rejected, failed to enable media [ 196.053076][T13970] vhci_hcd: invalid port number 96 [ 196.058222][T13970] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 196.115566][T13972] loop5: detected capacity change from 0 to 7 [ 196.124371][T13972] loop5: unable to read partition table [ 196.130105][T13972] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 196.130105][T13972] ) failed (rc=-5) [ 196.167107][T13974] loop4: detected capacity change from 0 to 512 [ 196.175323][T13974] EXT4-fs: dax option not supported [ 196.276938][T13986] loop5: detected capacity change from 0 to 7 [ 196.287934][ T3553] loop5: unable to read partition table [ 196.298789][T13986] loop5: unable to read partition table [ 196.305728][T13986] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 196.305728][T13986] ) failed (rc=-5) [ 196.399563][T13990] loop3: detected capacity change from 0 to 256 [ 196.415032][ T3421] Process accounting resumed [ 196.580587][T14005] loop2: detected capacity change from 0 to 1024 [ 196.587955][T14005] EXT4-fs: Ignoring removed bh option [ 196.594601][T14005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.605036][T14005] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.632752][T14005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 196.662602][T14005] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2399: lblock 2 mapped to illegal pblock 2 (length 1) [ 196.677403][T14005] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2399: lblock 0 mapped to illegal pblock 48 (length 1) [ 196.697996][T14005] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2399: Failed to acquire dquot type 0 [ 196.722918][T14005] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 196.771349][ T3401] Process accounting resumed [ 196.776469][T14005] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2399: mark_inode_dirty error [ 196.803618][T14005] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 196.813926][T14005] EXT4-fs (loop2): 1 orphan inode deleted [ 196.820163][T14005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.833183][ T2404] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 196.855398][ T2404] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 196.868705][T14015] loop1: detected capacity change from 0 to 512 [ 196.882182][T14015] EXT4-fs: dax option not supported [ 196.983177][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.993377][ T3319] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 197.007253][ T3319] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 197.017095][ T3319] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 197.140070][T14034] loop2: detected capacity change from 0 to 1024 [ 197.146858][T14034] EXT4-fs: Ignoring removed bh option [ 197.160587][T14034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.170951][T14034] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.190679][T14034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 197.218129][T14034] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2408: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.235074][T14034] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2408: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.249759][T14034] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2408: Failed to acquire dquot type 0 [ 197.261939][T14034] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 197.271459][T14034] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2408: mark_inode_dirty error [ 197.283096][T14034] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 197.293457][T14041] vhci_hcd: invalid port number 96 [ 197.298590][T14041] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 197.305929][T14034] EXT4-fs (loop2): 1 orphan inode deleted [ 197.313340][T14034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.327052][ T2404] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.343879][ T2404] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 197.474546][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.496377][ T3319] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 197.509456][T14040] loop4: detected capacity change from 0 to 32768 [ 197.516736][ T3319] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 197.526443][ T3319] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 197.538287][T14047] vhci_hcd: invalid port number 96 [ 197.543498][T14047] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 197.565549][T14040] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 197.565629][T14040] loop4: p1 start 460800 is beyond EOD, truncated [ 197.565653][T14040] loop4: p2 size 83886080 extends beyond EOD, truncated [ 197.567271][T14040] loop4: p5 start 460800 is beyond EOD, truncated [ 197.567289][T14040] loop4: p6 size 83886080 extends beyond EOD, truncated [ 197.698812][T14054] loop4: detected capacity change from 0 to 2048 [ 197.709262][T14050] tipc: Enabled bearer , priority 0 [ 197.724788][T14050] tipc: Disabling bearer [ 197.759599][ T3553] Alternate GPT is invalid, using primary GPT. [ 197.765999][ T3553] loop4: p2 p3 p7 [ 197.785257][T14054] Alternate GPT is invalid, using primary GPT. [ 197.791758][T14054] loop4: p2 p3 p7 [ 197.820893][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 197.832477][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 197.906907][T14063] __nla_validate_parse: 11 callbacks suppressed [ 197.906926][T14063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2418'. [ 197.923456][T14063] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 198.069364][T14078] loop5: detected capacity change from 0 to 7 [ 198.076115][T14078] buffer_io_error: 40 callbacks suppressed [ 198.076132][T14078] Buffer I/O error on dev loop5, logical block 0, async page read [ 198.091801][T14078] Buffer I/O error on dev loop5, logical block 0, async page read [ 198.093655][ T3421] Process accounting resumed [ 198.099646][T14078] loop5: unable to read partition table [ 198.104378][T14078] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 198.104378][T14078] ) failed (rc=-5) [ 198.105485][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 198.155047][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 198.174705][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 198.191152][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 198.206968][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 198.244958][T14085] loop1: detected capacity change from 0 to 256 [ 198.353955][T14082] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 198.360515][T14082] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.368041][T14082] vhci_hcd vhci_hcd.0: Device attached [ 198.383657][T14082] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 198.390284][T14082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.397899][T14082] vhci_hcd vhci_hcd.0: Device attached [ 198.404541][T14082] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.413215][T14082] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.427208][T14082] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 198.433835][T14082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.441603][T14082] vhci_hcd vhci_hcd.0: Device attached [ 198.449325][T14082] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 198.455960][T14082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.463660][T14082] vhci_hcd vhci_hcd.0: Device attached [ 198.473255][T14100] vhci_hcd: connection closed [ 198.473968][ T37] vhci_hcd: stop threads [ 198.474258][T14098] vhci_hcd: connection closed [ 198.478682][ T37] vhci_hcd: release socket [ 198.483212][T14096] vhci_hcd: connection closed [ 198.487635][ T37] vhci_hcd: disconnect device [ 198.501672][T14092] vhci_hcd: connection closed [ 198.508786][ T37] vhci_hcd: stop threads [ 198.517767][ T37] vhci_hcd: release socket [ 198.522269][ T37] vhci_hcd: disconnect device [ 198.527606][ T37] vhci_hcd: stop threads [ 198.531925][ T37] vhci_hcd: release socket [ 198.536336][ T37] vhci_hcd: disconnect device [ 198.541201][ T37] vhci_hcd: stop threads [ 198.545487][ T37] vhci_hcd: release socket [ 198.549919][ T37] vhci_hcd: disconnect device [ 198.652387][T14103] loop0: detected capacity change from 0 to 512 [ 198.659225][T14103] EXT4-fs: Ignoring removed orlov option [ 198.666096][T14103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.753875][T14103] EXT4-fs (loop0): orphan cleanup on readonly fs [ 198.761386][T14103] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2429: bg 0: block 248: padding at end of block bitmap is not set [ 198.776907][T14103] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2429: Failed to acquire dquot type 1 [ 198.789895][T14103] EXT4-fs (loop0): 1 truncate cleaned up [ 198.828179][T14108] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 198.834709][T14108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.842259][T14108] vhci_hcd vhci_hcd.0: Device attached [ 198.962952][ T3421] vhci_hcd: vhci_device speed not set [ 198.968033][T14103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.969898][T14107] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.995965][T14095] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 199.002556][T14095] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 199.010142][T14095] vhci_hcd vhci_hcd.0: Device attached [ 199.035572][T14095] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.081362][T14118] loop2: detected capacity change from 0 to 512 [ 199.088098][T14118] EXT4-fs: dax option not supported [ 199.094054][T14116] loop3: detected capacity change from 0 to 1024 [ 199.102227][T14095] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 199.108861][T14095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.109994][T14116] EXT4-fs: Ignoring removed bh option [ 199.116594][T14095] vhci_hcd vhci_hcd.0: Device attached [ 199.137969][T14116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.140825][ T3401] usb 3-2: new low-speed USB device number 7 using vhci_hcd [ 199.153436][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'. [ 199.155461][T14114] tipc: Enabling of bearer rejected, failed to enable media [ 199.163316][T14116] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.259396][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.261213][T14107] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 199.275038][T14107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.278845][T14116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 199.282761][T14107] vhci_hcd vhci_hcd.0: Device attached [ 199.299407][T14125] vhci_hcd: connection closed [ 199.299717][ T9853] vhci_hcd: stop threads [ 199.308775][ T9853] vhci_hcd: release socket [ 199.313262][ T9853] vhci_hcd: disconnect device [ 199.317152][T14119] vhci_hcd: connection closed [ 199.318864][T14116] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2433: lblock 2 mapped to illegal pblock 2 (length 1) [ 199.323638][ T3440] vhci_hcd: stop threads [ 199.323646][ T3440] vhci_hcd: release socket [ 199.323664][ T3440] vhci_hcd: disconnect device [ 199.323702][T14105] vhci_hcd: connection closed [ 199.338221][T14116] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2433: lblock 0 mapped to illegal pblock 48 (length 1) [ 199.346349][T14109] vhci_hcd: connection reset by peer [ 199.375413][T14116] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2433: Failed to acquire dquot type 0 [ 199.397974][ T9853] vhci_hcd: stop threads [ 199.402281][ T9853] vhci_hcd: release socket [ 199.402298][ T9853] vhci_hcd: disconnect device [ 199.411037][ T9853] vhci_hcd: stop threads [ 199.415838][ T9853] vhci_hcd: release socket [ 199.420283][ T9853] vhci_hcd: disconnect device [ 199.425425][T14116] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 199.434914][T14116] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2433: mark_inode_dirty error [ 199.446299][T14116] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 199.456677][T14116] EXT4-fs (loop3): 1 orphan inode deleted [ 199.464464][T14116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.477279][ T9853] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 199.492480][ T23] Process accounting resumed [ 199.495280][ T9853] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 0 [ 199.519206][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 199.519223][ T29] audit: type=1326 audit(1763598923.172:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.553416][ T29] audit: type=1326 audit(1763598923.212:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.576923][ T29] audit: type=1326 audit(1763598923.212:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.600468][ T29] audit: type=1326 audit(1763598923.212:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.646617][ T29] audit: type=1326 audit(1763598923.282:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.670158][ T29] audit: type=1326 audit(1763598923.282:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.693745][ T29] audit: type=1326 audit(1763598923.282:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.717282][ T29] audit: type=1326 audit(1763598923.282:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.740776][ T29] audit: type=1326 audit(1763598923.282:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.764414][ T29] audit: type=1326 audit(1763598923.282:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14115 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afd67f749 code=0x7ffc0000 [ 199.857282][T14149] loop0: detected capacity change from 0 to 1024 [ 199.868281][T14149] EXT4-fs: Ignoring removed bh option [ 199.874676][T14149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.884248][T14149] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.894685][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.895352][ T23] Process accounting resumed [ 199.909481][ T3321] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 199.915196][T14149] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 199.924968][ T3321] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 199.940160][ T3321] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 199.952609][T14149] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2441: lblock 2 mapped to illegal pblock 2 (length 1) [ 199.971924][T14149] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2441: lblock 0 mapped to illegal pblock 48 (length 1) [ 200.016171][T14149] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2441: Failed to acquire dquot type 0 [ 200.051655][T14149] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 200.061987][T14149] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2441: mark_inode_dirty error [ 200.083698][T14149] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 200.096461][T14149] EXT4-fs (loop0): 1 orphan inode deleted [ 200.103277][T14149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.115871][ T37] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 200.131216][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 200.177956][T14161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2445'. [ 200.296976][T14171] loop5: detected capacity change from 0 to 7 [ 200.303816][T14171] Buffer I/O error on dev loop5, logical block 0, async page read [ 200.320350][T14171] Buffer I/O error on dev loop5, logical block 0, async page read [ 200.328282][T14171] loop5: unable to read partition table [ 200.346027][T14171] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 200.346027][T14171] ) failed (rc=-5) [ 200.360441][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 200.403356][T14179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2454'. [ 200.429858][T14179] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 200.460405][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.493363][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 200.526609][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 200.544370][T14177] tipc: Enabled bearer , priority 0 [ 200.552803][T14177] tipc: Disabling bearer [ 200.563279][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 200.667674][ T23] Process accounting resumed [ 200.788987][T10851] Process accounting resumed [ 200.957044][T14206] tipc: Enabled bearer , priority 0 [ 200.966124][T14206] tipc: Disabling bearer [ 201.049036][ T23] Process accounting resumed [ 201.080654][T14226] loop5: detected capacity change from 0 to 7 [ 201.098522][T14226] loop5: unable to read partition table [ 201.112938][T14226] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 201.112938][T14226] ) failed (rc=-5) [ 201.128253][T10851] Process accounting resumed [ 201.191925][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2468'. [ 201.282379][T14238] loop0: detected capacity change from 0 to 128 [ 201.292593][T14238] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 201.343656][T14238] syzkaller0: entered promiscuous mode [ 201.349185][T14238] syzkaller0: entered allmulticast mode [ 201.365136][T14240] siw: device registration error -23 [ 201.670588][T14257] loop4: detected capacity change from 0 to 1024 [ 201.679488][T14257] EXT4-fs: Ignoring removed bh option [ 201.688551][T14257] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.698227][T14257] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.709815][T14257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 201.716751][T14259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2481'. [ 201.724971][T14257] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2480: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.741022][T14257] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2480: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.742085][T14259] syz!: rxe_newlink: already configured on team_slave_0 [ 201.755794][T14257] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2480: Failed to acquire dquot type 0 [ 201.773813][T14257] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 201.783768][T14257] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2480: mark_inode_dirty error [ 201.795243][T14257] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 201.806850][T14257] EXT4-fs (loop4): 1 orphan inode deleted [ 201.813584][T14257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.831908][ T2404] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.870662][ T2404] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 201.934295][T14266] loop3: detected capacity change from 0 to 1024 [ 201.944719][T14266] EXT4-fs: Ignoring removed bh option [ 201.962342][T14266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.985007][T14266] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.006400][T14266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 202.017396][T14266] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2483: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.040359][T14270] netlink: 'syz.1.2484': attribute type 9 has an invalid length. [ 202.072276][T14266] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2483: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.087073][T14266] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2483: Failed to acquire dquot type 0 [ 202.099027][T14266] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 202.109167][T14266] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2483: mark_inode_dirty error [ 202.120675][T14266] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 202.131496][T14266] EXT4-fs (loop3): 1 orphan inode deleted [ 202.131894][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.137928][T14266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.158937][ T2404] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.177881][ T2404] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 202.197280][T14270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2484'. [ 202.271859][ T3323] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 202.349425][ T3323] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 202.359172][ T3323] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 202.375128][ T9] Process accounting resumed [ 202.400931][T14275] loop4: detected capacity change from 0 to 128 [ 202.411054][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.421225][T14275] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 202.430471][ T3321] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 202.451284][ T3321] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 202.469617][ T3321] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 202.497394][T14275] syzkaller0: entered promiscuous mode [ 202.502957][T14275] syzkaller0: entered allmulticast mode [ 202.921449][T14280] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2486'. [ 202.961752][T14280] net_ratelimit: 1 callbacks suppressed [ 202.961767][T14280] netlink: zone id is out of range [ 202.972614][T14280] netlink: zone id is out of range [ 202.981667][T14280] netlink: zone id is out of range [ 202.986895][T14280] netlink: zone id is out of range [ 202.992138][T14280] netlink: zone id is out of range [ 202.997269][T14280] netlink: zone id is out of range [ 203.045143][T14280] netlink: zone id is out of range [ 203.050315][T14280] netlink: zone id is out of range [ 203.060836][T14280] netlink: zone id is out of range [ 203.066098][T14280] netlink: zone id is out of range [ 203.085083][T14293] loop5: detected capacity change from 0 to 7 [ 203.092013][ T3553] buffer_io_error: 11 callbacks suppressed [ 203.092026][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.109762][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.117637][ T3553] loop5: unable to read partition table [ 203.124885][T14293] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.132819][T14293] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.140661][T14293] loop5: unable to read partition table [ 203.148127][T14293] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 203.148127][T14293] ) failed (rc=-5) [ 203.162536][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.170491][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.198222][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.209574][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.217800][ T3553] Buffer I/O error on dev loop5, logical block 0, async page read [ 203.243459][T14286] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2489'. [ 203.436905][T14300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2495'. [ 203.448435][T14300] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 203.463877][T14296] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 203.470427][T14296] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.477922][T14296] vhci_hcd vhci_hcd.0: Device attached [ 203.513319][T14306] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 203.519951][T14306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.527491][T14306] vhci_hcd vhci_hcd.0: Device attached [ 203.554445][T14312] siw: device registration error -23 [ 203.580146][T14296] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.615769][T14306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.661609][T10851] vhci_hcd: vhci_device speed not set [ 203.674002][T14296] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 203.680646][T14296] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.688473][T14296] vhci_hcd vhci_hcd.0: Device attached [ 203.855259][T14327] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.867797][T14327] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 203.873557][T10851] usb 5-1: new full-speed USB device number 10 using vhci_hcd [ 203.892080][T14327] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 203.897735][T14296] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 203.906041][T14296] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.913721][T14296] vhci_hcd vhci_hcd.0: Device attached [ 203.927178][T14324] vhci_hcd: connection closed [ 203.927613][T14310] vhci_hcd: connection closed [ 203.937712][T14304] vhci_hcd: connection reset by peer [ 203.948331][T14328] loop3: detected capacity change from 0 to 512 [ 203.951048][T14320] vhci_hcd: connection closed [ 203.959167][T14328] EXT4-fs: dax option not supported [ 203.969318][ T3440] vhci_hcd: stop threads [ 203.973708][ T3440] vhci_hcd: release socket [ 203.978134][ T3440] vhci_hcd: disconnect device [ 204.049765][ T3440] vhci_hcd: stop threads [ 204.054163][ T3440] vhci_hcd: release socket [ 204.058640][ T3440] vhci_hcd: disconnect device [ 204.079243][ T3440] vhci_hcd: stop threads [ 204.083571][ T3440] vhci_hcd: release socket [ 204.088109][ T3440] vhci_hcd: disconnect device [ 204.093174][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2501'. [ 204.101932][ T3440] vhci_hcd: stop threads [ 204.106386][ T3440] vhci_hcd: release socket [ 204.110817][ T3440] vhci_hcd: disconnect device [ 204.181939][ T3401] usb 3-2: enqueue for inactive port 1 [ 204.187557][ T3401] usb 3-2: enqueue for inactive port 1 [ 204.194828][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2503'. [ 204.311607][ T3401] vhci_hcd: vhci_device speed not set [ 204.405407][T14340] loop4: detected capacity change from 0 to 32768 [ 204.472152][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'. [ 204.505223][T14340] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 204.510683][T14340] loop4: p1 start 460800 is beyond EOD, truncated [ 204.517223][T14340] loop4: p2 size 83886080 extends beyond EOD, truncated [ 204.538619][T14340] loop4: p5 start 460800 is beyond EOD, truncated [ 204.545207][T14340] loop4: p6 size 83886080 extends beyond EOD, truncated [ 204.633812][T14322] Process accounting resumed [ 204.712823][T14352] loop0: detected capacity change from 0 to 1024 [ 204.739533][ T23] Process accounting resumed [ 204.748517][T14352] EXT4-fs: Ignoring removed bh option [ 204.773538][ T3003] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 204.779316][ T3003] loop4: p1 start 460800 is beyond EOD, truncated [ 204.785870][ T3003] loop4: p2 size 83886080 extends beyond EOD, truncated [ 204.795410][T14352] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.806345][ T3003] loop4: p5 start 460800 is beyond EOD, truncated [ 204.812837][ T3003] loop4: p6 size 83886080 extends beyond EOD, truncated [ 204.813112][T14352] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 204.835932][T14358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2508'. [ 204.855502][T14352] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 204.872414][T14352] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2507: lblock 2 mapped to illegal pblock 2 (length 1) [ 204.906621][T14352] __quota_error: 239 callbacks suppressed [ 204.906636][T14352] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 204.909236][T14364] netlink: 'syz.1.2512': attribute type 13 has an invalid length. [ 204.930595][T14352] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2507: lblock 0 mapped to illegal pblock 48 (length 1) [ 204.944795][T14364] gretap0: refused to change device tx_queue_len [ 204.952964][T14352] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 204.961878][T14352] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2507: Failed to acquire dquot type 0 [ 204.984247][T14352] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 204.993915][T14352] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2507: mark_inode_dirty error [ 205.035062][T14352] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 205.045723][T14352] EXT4-fs (loop0): 1 orphan inode deleted [ 205.052311][T14352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.065034][ T3440] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.103894][T14370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'. [ 205.104028][ T3440] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 205.121313][ T3440] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 205.134408][T14370] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 205.194850][ T29] audit: type=1326 audit(1763598928.852:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e00af749 code=0x7ffc0000 [ 205.218416][ T29] audit: type=1326 audit(1763598928.852:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e00af749 code=0x7ffc0000 [ 205.254795][ T3658] udevd[3658]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 205.254825][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 205.266126][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 205.296237][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 205.323837][ T29] audit: type=1326 audit(1763598928.902:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa4e00af749 code=0x7ffc0000 [ 205.347286][ T29] audit: type=1326 audit(1763598928.902:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e00af749 code=0x7ffc0000 [ 205.370817][ T29] audit: type=1326 audit(1763598928.902:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e00af749 code=0x7ffc0000 [ 205.394452][ T29] audit: type=1326 audit(1763598928.902:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4e00af749 code=0x7ffc0000 [ 205.417930][ T29] audit: type=1326 audit(1763598928.902:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e00af749 code=0x7ffc0000 [ 205.462299][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.492372][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 205.505392][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 205.514994][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 205.598518][T14373] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2515'. [ 205.637886][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'. [ 205.793183][T14387] loop3: detected capacity change from 0 to 512 [ 205.819046][T14387] EXT4-fs: dax option not supported [ 205.846153][ T9] Process accounting resumed [ 205.848086][T14390] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.863191][T14390] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 205.902240][T14390] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 206.029327][T14384] loop2: detected capacity change from 0 to 32768 [ 206.082010][ T3553] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 206.087408][ T3553] loop2: p1 start 460800 is beyond EOD, truncated [ 206.087489][T14414] netlink: 'syz.4.2529': attribute type 9 has an invalid length. [ 206.093893][ T3553] loop2: p2 size 83886080 extends beyond EOD, truncated [ 206.116725][ T3553] loop2: p5 start 460800 is beyond EOD, truncated [ 206.123265][ T3553] loop2: p6 size 83886080 extends beyond EOD, truncated [ 206.147824][T14384] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 206.153277][T14384] loop2: p1 start 460800 is beyond EOD, truncated [ 206.159735][T14384] loop2: p2 size 83886080 extends beyond EOD, truncated [ 206.181784][T14384] loop2: p5 start 460800 is beyond EOD, truncated [ 206.188313][T14384] loop2: p6 size 83886080 extends beyond EOD, truncated [ 206.292735][T14426] loop4: detected capacity change from 0 to 128 [ 206.310390][T14419] tipc: Enabled bearer , priority 0 [ 206.331812][T14426] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 206.335763][T14419] tipc: Disabling bearer [ 206.362569][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 206.373666][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 206.391232][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 206.402312][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 206.438546][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 206.452893][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 206.474752][T14426] syzkaller0: entered promiscuous mode [ 206.480256][T14426] syzkaller0: entered allmulticast mode [ 206.572111][T14439] loop5: detected capacity change from 0 to 7 [ 206.585450][T14439] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.604579][T14439] loop5: unable to read partition table [ 206.620955][T14439] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 206.620955][T14439] ) failed (rc=-5) [ 206.639802][T14443] netlink: 'syz.2.2538': attribute type 9 has an invalid length. [ 206.803156][T14461] loop5: detected capacity change from 0 to 7 [ 206.809771][T14461] loop5: unable to read partition table [ 206.815802][T14461] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 206.815802][T14461] ) failed (rc=-5) [ 206.972936][ T9] Process accounting resumed [ 206.984258][ T23] Process accounting resumed [ 207.005094][T14470] loop4: detected capacity change from 0 to 1024 [ 207.021933][T14470] EXT4-fs: Ignoring removed bh option [ 207.042264][T14470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.064345][T14470] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 207.091525][T14470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 207.109390][T14470] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2550: lblock 2 mapped to illegal pblock 2 (length 1) [ 207.152834][T14470] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2550: lblock 0 mapped to illegal pblock 48 (length 1) [ 207.224127][T14470] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2550: Failed to acquire dquot type 0 [ 207.239044][T14470] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 207.299011][T14470] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2550: mark_inode_dirty error [ 207.318652][T14470] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 207.329338][T14470] EXT4-fs (loop4): 1 orphan inode deleted [ 207.335854][T14470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.391990][ T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 207.407933][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 207.519165][T14479] loop0: detected capacity change from 0 to 128 [ 207.530471][T14479] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 207.573271][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.582937][ T3323] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 207.583770][T14479] syzkaller0: entered promiscuous mode [ 207.601315][T14479] syzkaller0: entered allmulticast mode [ 207.609909][ T3323] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 207.619597][ T3323] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 207.688187][T14481] tipc: Enabled bearer , priority 0 [ 207.700365][T14484] loop4: detected capacity change from 0 to 1024 [ 207.709186][T14484] EXT4-fs: Ignoring removed bh option [ 207.722111][T14484] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.730939][T14484] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 207.731994][T14481] tipc: Disabling bearer [ 207.747686][T14484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 207.788524][T14484] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2553: lblock 2 mapped to illegal pblock 2 (length 1) [ 207.817552][T14484] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2553: lblock 0 mapped to illegal pblock 48 (length 1) [ 207.822459][T14489] loop1: detected capacity change from 0 to 1024 [ 207.857383][T14484] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2553: Failed to acquire dquot type 0 [ 207.862222][T14489] EXT4-fs: Ignoring removed bh option [ 207.881968][T14489] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.892313][T14484] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 207.901178][T14489] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 207.932714][T14497] siw: device registration error -23 [ 207.951775][T14484] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2553: mark_inode_dirty error [ 207.957192][T14499] loop5: detected capacity change from 0 to 7 [ 207.969570][T14489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 207.978825][T14499] loop5: unable to read partition table [ 207.979130][T14489] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2554: lblock 2 mapped to illegal pblock 2 (length 1) [ 207.984589][T14499] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 207.984589][T14499] ) failed (rc=-5) [ 208.024264][T14484] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 208.045714][T14484] EXT4-fs (loop4): 1 orphan inode deleted [ 208.054669][T14484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.067511][ T3440] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 208.067708][T14489] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2554: lblock 0 mapped to illegal pblock 48 (length 1) [ 208.100504][T14489] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2554: Failed to acquire dquot type 0 [ 208.101680][ T3440] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 208.124266][T14489] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 208.142377][T14489] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2554: mark_inode_dirty error [ 208.159446][T14489] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 208.171041][T14489] EXT4-fs (loop1): 1 orphan inode deleted [ 208.177620][T14489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.201862][ T3440] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 208.219716][ T3440] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 208.263651][ T9] Process accounting resumed [ 208.287458][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.302510][ T3323] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 208.316295][ T3323] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 208.326454][ T3323] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 208.364452][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.378078][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 208.391723][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 208.401818][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 208.446696][ T3421] Process accounting resumed [ 208.533550][ T3401] Process accounting resumed [ 208.678425][T14526] __nla_validate_parse: 11 callbacks suppressed [ 208.678520][T14526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2565'. [ 208.699406][T14526] loop1: detected capacity change from 0 to 512 [ 208.706240][T14526] EXT4-fs: Ignoring removed orlov option [ 208.766132][T14526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.776691][T14526] EXT4-fs (loop1): orphan cleanup on readonly fs [ 208.784390][T14526] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2565: bg 0: block 248: padding at end of block bitmap is not set [ 208.799664][T14526] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2565: Failed to acquire dquot type 1 [ 208.813416][T14526] EXT4-fs (loop1): 1 truncate cleaned up [ 208.820552][T14526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.906788][T10851] usb 5-1: enqueue for inactive port 0 [ 208.949690][T10851] usb 5-1: enqueue for inactive port 0 [ 209.104521][T10851] vhci_hcd: vhci_device speed not set [ 209.136156][T14537] netlink: 'syz.2.2569': attribute type 13 has an invalid length. [ 209.163712][T14537] gretap0: refused to change device tx_queue_len [ 209.172613][T14537] net_ratelimit: 33 callbacks suppressed [ 209.172630][T14537] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.245623][T14542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2571'. [ 209.250721][T14540] netlink: 'syz.0.2570': attribute type 9 has an invalid length. [ 209.263546][T14542] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 209.272946][T14540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2570'. [ 209.329056][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.341081][T14546] siw: device registration error -23 [ 209.370159][T14550] loop5: detected capacity change from 0 to 7 [ 209.387746][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 209.411824][T14550] buffer_io_error: 20 callbacks suppressed [ 209.411837][T14550] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.452698][T14550] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.460576][T14550] loop5: unable to read partition table [ 209.481617][T14550] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 209.481617][T14550] ) failed (rc=-5) [ 209.482827][ T3523] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.507470][ T3523] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.515681][T14552] tipc: Enabled bearer , priority 0 [ 209.524024][ T3523] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.534170][ T3523] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.543416][ T3523] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.546615][T14552] tipc: Disabling bearer [ 209.666653][T14554] loop2: detected capacity change from 0 to 32768 [ 209.692228][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2575'. [ 209.726845][T14576] netlink: 'syz.4.2583': attribute type 13 has an invalid length. [ 209.736277][T14554] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 209.741580][T14576] gretap0: refused to change device tx_queue_len [ 209.748330][T14554] loop2: p1 start 460800 is beyond EOD, truncated [ 209.748627][T14576] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.754817][T14554] loop2: p2 size 83886080 extends beyond EOD, truncated [ 209.763122][T14554] loop2: p5 start 460800 is beyond EOD, truncated [ 209.783971][T14554] loop2: p6 size 83886080 extends beyond EOD, truncated [ 209.960070][T14583] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 210.009025][T14584] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2584'. [ 210.024737][T14584] loop4: detected capacity change from 0 to 512 [ 210.031926][T14584] EXT4-fs: Ignoring removed orlov option [ 210.041589][T14584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.123518][T14584] EXT4-fs (loop4): orphan cleanup on readonly fs [ 210.130918][T14584] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2584: bg 0: block 248: padding at end of block bitmap is not set [ 210.147706][T14584] __quota_error: 319 callbacks suppressed [ 210.147718][T14584] Quota error (device loop4): write_blk: dquota write failed [ 210.160919][T14584] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 210.170891][T14584] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2584: Failed to acquire dquot type 1 [ 210.186384][T14584] EXT4-fs (loop4): 1 truncate cleaned up [ 210.382351][T14584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.424177][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 210.434109][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 210.443272][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 210.454390][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 210.474058][ T3401] Process accounting resumed [ 210.480407][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 210.491729][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 210.504136][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 210.514485][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 210.666766][T14602] tipc: Enabled bearer , priority 0 [ 210.687792][T14602] tipc: Disabling bearer [ 210.695862][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.721943][T11204] Process accounting resumed [ 210.738236][T14612] loop5: detected capacity change from 0 to 7 [ 210.761961][T14612] Buffer I/O error on dev loop5, logical block 0, async page read [ 210.782801][T14612] Buffer I/O error on dev loop5, logical block 0, async page read [ 210.790670][T14612] loop5: unable to read partition table [ 210.796804][T14612] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 210.796804][T14612] ) failed (rc=-5) [ 210.815057][ T3523] Buffer I/O error on dev loop5, logical block 0, async page read [ 210.851205][T14617] netlink: 'syz.1.2597': attribute type 13 has an invalid length. [ 210.861534][T14617] gretap0: refused to change device tx_queue_len [ 210.868674][T14617] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 210.942183][T14622] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 211.004276][T14628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2602'. [ 211.057124][T14633] netlink: 'syz.3.2601': attribute type 9 has an invalid length. [ 211.075205][T14633] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2601'. [ 211.287154][T14641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2606'. [ 211.303101][T14641] loop1: detected capacity change from 0 to 512 [ 211.309994][T14641] EXT4-fs: Ignoring removed orlov option [ 211.342736][T14642] tipc: Enabled bearer , priority 0 [ 211.352238][T14642] tipc: Disabling bearer [ 211.403583][T14641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.432043][T14635] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 211.438673][T14635] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.446226][T14635] vhci_hcd vhci_hcd.0: Device attached [ 211.462505][T14641] EXT4-fs (loop1): orphan cleanup on readonly fs [ 211.470705][T14641] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2606: bg 0: block 248: padding at end of block bitmap is not set [ 211.485496][T14641] Quota error (device loop1): write_blk: dquota write failed [ 211.492986][T14641] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 211.503045][T14641] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2606: Failed to acquire dquot type 1 [ 211.521784][T14641] EXT4-fs (loop1): 1 truncate cleaned up [ 211.529321][T14641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.631915][ T3421] vhci_hcd: vhci_device speed not set [ 211.646852][T14646] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 211.653485][T14646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.661008][T14646] vhci_hcd vhci_hcd.0: Device attached [ 211.730834][ T3421] usb 9-1: new full-speed USB device number 5 using vhci_hcd [ 211.806513][T14635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 211.817881][T14650] loop0: detected capacity change from 0 to 256 [ 211.882702][T14635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 211.889248][ T29] audit: type=1400 audit(1763598935.542:6174): avc: denied { remount } for pid=14649 comm="syz.0.2608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 211.911437][T14635] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15) [ 211.918066][T14635] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 211.925720][T14635] vhci_hcd vhci_hcd.0: Device attached [ 211.981000][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.004281][T14646] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 212.010926][T14646] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.018604][T14646] vhci_hcd vhci_hcd.0: Device attached [ 212.039899][ T29] audit: type=1400 audit(1763598935.692:6175): avc: denied { setopt } for pid=14661 comm="syz.2.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.116369][T14656] vhci_hcd: connection closed [ 212.116695][T14651] vhci_hcd: connection closed [ 212.119325][ T29] audit: type=1400 audit(1763598935.712:6176): avc: denied { write } for pid=14661 comm="syz.2.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.146261][T14647] vhci_hcd: connection closed [ 212.146573][ T2404] vhci_hcd: stop threads [ 212.146582][ T2404] vhci_hcd: release socket [ 212.146595][ T2404] vhci_hcd: disconnect device [ 212.146632][ T2404] vhci_hcd: stop threads [ 212.146640][ T2404] vhci_hcd: release socket [ 212.146651][ T2404] vhci_hcd: disconnect device [ 212.146728][T14643] vhci_hcd: connection reset by peer [ 212.146926][ T2404] vhci_hcd: stop threads [ 212.146934][ T2404] vhci_hcd: release socket [ 212.146991][ T2404] vhci_hcd: disconnect device [ 212.159748][ T2404] vhci_hcd: stop threads [ 212.210075][ T2404] vhci_hcd: release socket [ 212.214549][ T2404] vhci_hcd: disconnect device [ 212.240187][ T29] audit: type=1400 audit(1763598935.892:6177): avc: denied { write } for pid=14671 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.260245][ T29] audit: type=1400 audit(1763598935.912:6178): avc: denied { connect } for pid=14671 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.280023][ T29] audit: type=1400 audit(1763598935.912:6179): avc: denied { name_connect } for pid=14671 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 212.374714][T14676] loop5: detected capacity change from 0 to 7 [ 212.381842][ T3553] loop5: unable to read partition table [ 212.391378][T14676] loop5: unable to read partition table [ 212.398479][T14676] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 212.398479][T14676] ) failed (rc=-5) [ 212.465310][T14682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2615'. [ 212.481199][T14682] loop3: detected capacity change from 0 to 512 [ 212.488057][T14682] EXT4-fs: Ignoring removed orlov option [ 212.494378][T14682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.552154][T14682] EXT4-fs (loop3): orphan cleanup on readonly fs [ 212.559432][T14682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2615: bg 0: block 248: padding at end of block bitmap is not set [ 212.574891][T14682] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2615: Failed to acquire dquot type 1 [ 212.587471][T14682] EXT4-fs (loop3): 1 truncate cleaned up [ 212.750553][T14692] dummy0: Caught tx_queue_len zero misconfig [ 212.814444][T14682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.870038][T14694] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.955462][T14706] loop2: detected capacity change from 0 to 1024 [ 212.982061][T14706] EXT4-fs: Ignoring removed bh option [ 212.999383][T14706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.025096][T14712] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 213.067542][T14706] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.093678][T14706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 213.117008][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.131296][T14706] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2627: lblock 2 mapped to illegal pblock 2 (length 1) [ 213.165980][T14720] loop4: detected capacity change from 0 to 512 [ 213.182895][T14722] loop5: detected capacity change from 0 to 7 [ 213.190403][T14720] EXT4-fs: dax option not supported [ 213.210734][T14706] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2627: lblock 0 mapped to illegal pblock 48 (length 1) [ 213.237681][T14722] loop5: unable to read partition table [ 213.243792][T14706] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2627: Failed to acquire dquot type 0 [ 213.264676][T14722] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 213.264676][T14722] ) failed (rc=-5) [ 213.281752][T14715] netlink: zone id is out of range [ 213.286959][T14715] netlink: zone id is out of range [ 213.292302][T14706] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 213.310814][T14715] netlink: zone id is out of range [ 213.329058][T14715] netlink: zone id is out of range [ 213.334318][T14715] netlink: zone id is out of range [ 213.339489][T14715] netlink: zone id is out of range [ 213.351715][T14706] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2627: mark_inode_dirty error [ 213.385053][T14715] netlink: zone id is out of range [ 213.392504][T14706] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 213.433914][T14706] EXT4-fs (loop2): 1 orphan inode deleted [ 213.449784][T14706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.463393][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.465189][T11204] Process accounting resumed [ 213.482442][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 213.494741][T14747] netlink: 'syz.1.2641': attribute type 9 has an invalid length. [ 213.556501][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.573901][ T3319] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 213.605680][ T3319] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 213.629858][ T3319] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 213.652680][T14755] loop0: detected capacity change from 0 to 1024 [ 213.659505][T14755] ext2: Bad value for 'max_dir_size_kb' [ 213.716725][T14763] SELinux: Context is not valid (left unmapped). [ 213.824242][T14761] tipc: Enabled bearer , priority 0 [ 213.843275][T14761] tipc: Disabling bearer [ 214.109133][T14778] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 214.115681][T14778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 214.123156][T14778] vhci_hcd vhci_hcd.0: Device attached [ 214.130625][T14778] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 214.137199][T14778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.144773][T14778] vhci_hcd vhci_hcd.0: Device attached [ 214.150809][T14778] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 214.159356][T14778] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 214.168433][T14778] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 214.175077][T14778] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 214.182781][T14778] vhci_hcd vhci_hcd.0: Device attached [ 214.193400][T14778] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(17) [ 214.200039][T14778] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 214.207673][T14778] vhci_hcd vhci_hcd.0: Device attached [ 214.215039][T14785] vhci_hcd: connection closed [ 214.215054][T14783] vhci_hcd: connection closed [ 214.215149][T14785] ================================================================== [ 214.215187][T14785] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 214.215223][T14785] [ 214.215231][T14785] write to 0xffffffff88e5fa80 of 29 bytes by task 14783 on cpu 1: [ 214.215253][T14785] vsnprintf+0x2ce/0x890 [ 214.215293][T14785] vscnprintf+0x41/0x90 [ 214.215325][T14785] printk_sprint+0x30/0x2d0 [ 214.215344][T14781] vhci_hcd: connection closed [ 214.215353][T14785] vprintk_store+0x599/0x860 [ 214.215379][T14785] vprintk_emit+0x10d/0x580 [ 214.215400][T14785] vprintk_default+0x26/0x30 [ 214.215422][T14785] vprintk+0x1d/0x30 [ 214.215450][T14785] _printk+0x79/0xa0 [ 214.215489][T14785] vhci_rx_loop+0x4ab/0x5f0 [ 214.215513][T14785] kthread+0x489/0x510 [ 214.215540][T14779] vhci_hcd: connection closed [ 214.215542][T14785] ret_from_fork+0x122/0x1b0 [ 214.215570][T14785] ret_from_fork_asm+0x1a/0x30 [ 214.215592][T14785] [ 214.215598][T14785] read to 0xffffffff88e5fa80 of 8 bytes by task 14785 on cpu 0: [ 214.215617][T14785] data_push_tail+0xfd/0x420 [ 214.215640][T14785] data_alloc+0xfb/0x2e0 [ 214.215662][T14785] prb_reserve+0x807/0xaf0 [ 214.215679][T14785] vprintk_store+0x56d/0x860 [ 214.215699][T14785] vprintk_emit+0x10d/0x580 [ 214.215727][T14785] vprintk_default+0x26/0x30 [ 214.215754][T14785] vprintk+0x1d/0x30 [ 214.215785][T14785] _printk+0x79/0xa0 [ 214.215811][T14785] vhci_rx_loop+0x4ab/0x5f0 [ 214.215828][T14785] kthread+0x489/0x510 [ 214.215854][T14785] ret_from_fork+0x122/0x1b0 [ 214.215878][T14785] ret_from_fork_asm+0x1a/0x30 [ 214.215905][T14785] [ 214.215911][T14785] value changed: 0x00000000fffff09d -> 0x6463685f69636876 [ 214.215926][T14785] [ 214.215932][T14785] Reported by Kernel Concurrency Sanitizer on: [ 214.215958][T14785] CPU: 0 UID: 0 PID: 14785 Comm: vhci_rx Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.215991][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.216005][T14785] ================================================================== [ 214.271922][ T2404] vhci_hcd: stop threads [ 214.425934][ T2404] vhci_hcd: release socket [ 214.430443][ T2404] vhci_hcd: disconnect device [ 214.435259][T11204] vhci_hcd: vhci_device speed not set [ 214.441260][ T2404] vhci_hcd: stop threads [ 214.445563][ T2404] vhci_hcd: release socket [ 214.449985][ T2404] vhci_hcd: disconnect device [ 214.455109][ T2404] vhci_hcd: stop threads [ 214.459359][ T2404] vhci_hcd: release socket [ 214.463817][ T2404] vhci_hcd: disconnect device [ 214.468650][ T2404] vhci_hcd: stop threads [ 214.472956][ T2404] vhci_hcd: release socket [ 214.477443][ T2404] vhci_hcd: disconnect device [ 214.491602][T11204] usb 7-1: new full-speed USB device number 6 using vhci_hcd [ 214.499132][T11204] usb 7-1: enqueue for inactive port 0 [ 214.505046][T11204] usb 7-1: enqueue for inactive port 0 [ 214.510616][T11204] usb 7-1: enqueue for inactive port 0 [ 214.581623][T11204] vhci_hcd: vhci_device speed not set [ 216.821676][ T3421] usb 9-1: enqueue for inactive port 0 [ 216.827233][ T3421] usb 9-1: enqueue for inactive port 0 [ 216.901617][ T3421] vhci_hcd: vhci_device speed not set