last executing test programs: 6m20.619283427s ago: executing program 0 (id=10802): mkdir(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000002380)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@data_journal}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@block_validity}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) 6m20.450962944s ago: executing program 0 (id=10805): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 6m19.89017417s ago: executing program 0 (id=10809): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x8}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xe}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 6m19.627825916s ago: executing program 0 (id=10812): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200e0"], 0x50}}, 0x4004) 6m19.377376622s ago: executing program 0 (id=10815): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@usrquota}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 6m18.957329634s ago: executing program 0 (id=10817): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth0_to_batadv\x00', 'gre0\x00'}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x18}}}, @common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000e80)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x28, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @private1}}}}}}, 0x0) 6m3.922431192s ago: executing program 32 (id=10817): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth0_to_batadv\x00', 'gre0\x00'}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x18}}}, @common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000e80)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x28, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @private1}}}}}}, 0x0) 5m51.220518047s ago: executing program 1 (id=11198): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x98, 0x8, 0xfa04, 0x0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x10000000, {0x0, 0x74020000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0xff, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x178, 0x1c0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@string={{0xc0}, {0xd, 0xd, 'kmp\x00', "922b3384397bb0e7fa9e22e0dca74c4274c3302baeb09ffa293601534dad055a3af88e55b7c9dc8448ac99cabf777114a3518800ec7386e19b7f814d054281c73128f603a542534d57e95e97c091bdfcfc7a852c61e4831ab5711a4696cb27976e54345ca17954e3c3f1bb6fed74df59897a03004834174d518d92c6d9f82f3a", 0x23, 0x1, {0xff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 5m50.246431884s ago: executing program 1 (id=11205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000480)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x19, 0xc}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x5, 0x1, 0x0, @broadcast, @remote}, @address_request={0x11, 0x0, 0x0, 0xfffffffc}}}, 0x26) 5m50.058613053s ago: executing program 1 (id=11206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000003a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="2d70696473202b63707520b6ab6a86e8"], 0xb) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m48.902041319s ago: executing program 1 (id=11217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4e22, 0xff0f}, 0xf0ffffff}}, 0x4c}}, 0x0) r1 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x1, 0xffff, 0x0, 0xf002}, {0xffffffff, 0x0, 0x0, 0x1}]}) 5m48.519130247s ago: executing program 1 (id=11221): keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '\x00', 0x20, 0x4}, 0x2e, 0x0) 5m46.178757852s ago: executing program 1 (id=11233): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}}, @redirect={0x5, 0x2, 0x0, @remote, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x67, 0x7f2, 0x48, 0x1, 0xf, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, "b2f6fc43e5721dcc"}}}}}, 0x0) 5m46.053111635s ago: executing program 33 (id=11233): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}}, @redirect={0x5, 0x2, 0x0, @remote, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x67, 0x7f2, 0x48, 0x1, 0xf, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, "b2f6fc43e5721dcc"}}}}}, 0x0) 2.227359366s ago: executing program 4 (id=16524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@nolazytime}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='console\x00', r4}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.720074997s ago: executing program 5 (id=16530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff020000000000000000000000000001"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d6b1a36ef281df8df5f624425f6a243af10e42f19d46e0bb2f999f7cf3900a4292082a5d8249def296cc5dd42fccfa9e0dbd8bf29c4263f7d69ed4716fbb1fe548ff3bde1c8131ec7b76ac9a2", @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x0, 0x6, 0x9, 0x7fffffff}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000049000921299d7000fbdbdf250a", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='objagg_obj_root_destroy\x00', r0, 0x0, 0xa0000}, 0x18) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0xb0) 1.424255607s ago: executing program 2 (id=16532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000003c0)=0xc) sched_getparam(r2, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = syz_open_dev$sg(0x0, 0x0, 0x8401) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x101, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r6], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x34, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4f8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.382452781s ago: executing program 2 (id=16533): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.328138887s ago: executing program 4 (id=16535): open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) 1.308575809s ago: executing program 5 (id=16536): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@nolazytime}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c61) 1.271743432s ago: executing program 2 (id=16537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xb, &(0x7f0000001080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) 1.221270627s ago: executing program 4 (id=16538): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000003c0)=0xf3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511", 0x41, 0x0, &(0x7f0000000540)={0xc9, 0xf8, r1, 0x1, 0x80, 0x6, @local}, 0x14) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x8, 0x1) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @multicast2, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) 1.161428394s ago: executing program 5 (id=16539): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e592", 0x65}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x285}], 0x1}}], 0x3, 0x2090) 1.155866664s ago: executing program 4 (id=16541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000000290000012", 0x2d}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000000000000c000000180001801400020076657468315f746f5f626174616476000c000380080003802dd60000cbf8b9c4e621eb2157be794ead53109d5aab11cae8519eb5d955d6813c2337291f154ba6a68f67aa33c1e38480d2de9592c13e237220a10c39f965587431d02506fa4024033d2bf18f6f2e0473108c812974e32ac8470eedbdb0b0e25f46dea0858d7bc9f38e6333439cdd78ef9596222ec24ce7c7861d40d7a9fb4ab312a119cc2c3f216fe37cb889580b8de24c8a"], 0x38}}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.111828968s ago: executing program 6 (id=16543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000003800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r1, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)='=', 0x1}, {0x0}], 0x2}}], 0x1, 0x10014) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000003060103007cc60000000000010000080900020073797a3200000000"], 0x20}}, 0x24004015) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0xe]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000b00)={0xc, 0x8000, 0x0, 'queue1\x00', 0x7fff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x650, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0x614, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_ACT={0x608, 0x7, [@m_skbedit={0x100, 0x18, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fffffff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xb9, 0x6, "ae7618fac8bef194e7d52d5104403c4e5d31577fc03f50185949080aaa1dc98f84f317f7940367cd55990b3c58f90b82c31d145e7c1bca149bce90dd0f3f5c6da78194b3ebd9a324aa39d2f81d442d6ec9d850f09c5906450150aee2722d5a7b50ec68bc0ace566e23da3bfefd52596e1fb6997677e38b9afc641d9cecc55b09059dcc97d8b8617cf00a5d61b0a8eedd40e119683b156242d9f8ade7de54542e11d4a49c4fd3aab3aaf9079d65ea1a3e807d47a242"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x504, 0xb, 0x0, 0x0, {{0xb}, {0x440, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x27}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x99}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10000, 0x6, 0x9, 0xffffffff, 0xa, 0x1, 0x6, 0xc1f7, 0x2, 0x7fffffff, 0x10000009, 0x100, 0x8, 0x92, 0x8b, 0xe, 0xca, 0x1, 0xc, 0x9, 0x23, 0xfff, 0xfa38, 0x7, 0x5, 0x5, 0x7f, 0xf3, 0xfc, 0x8, 0x9, 0x4, 0x10001, 0x2, 0x7, 0x8, 0x14000000, 0x3, 0xd, 0xae, 0x0, 0x6, 0x5, 0x7, 0xffffffff, 0x58, 0x0, 0x4, 0x5, 0x0, 0x9, 0x5, 0x3, 0x63c1e834, 0xff, 0x3, 0x3, 0x7e, 0x8, 0xf7, 0x2, 0xd, 0x400, 0xffffff7f, 0x8, 0x9b5f, 0x4, 0x2, 0x80, 0x8001, 0x2, 0x6, 0x3, 0x5, 0xffff, 0x101, 0x6, 0x3, 0x52, 0xfffff001, 0xe, 0x6, 0x9, 0x41, 0x7, 0x8a, 0x6, 0x8, 0x0, 0x1000, 0x41, 0x0, 0x7, 0x5, 0x3, 0x100, 0x7ff, 0x100, 0x1, 0x3, 0x8, 0x0, 0x6, 0x4, 0x1, 0x9, 0x7, 0x3, 0x2, 0x1, 0x6, 0x100, 0x10, 0x4a85edd5, 0x64, 0x1, 0x1, 0x5, 0x1, 0x1, 0x5, 0x2, 0x800, 0x9, 0xfc2, 0x2, 0x8, 0x2, 0x5, 0x9, 0x9000, 0x6, 0x3622, 0x512, 0x81, 0x8, 0xbd, 0x1, 0xc, 0xd, 0xfffffffb, 0x400, 0x3, 0x4500005d, 0x9, 0x9, 0x5, 0x1c600000, 0xfff, 0x5, 0x2, 0x8, 0x4f, 0x2, 0xc1, 0x7ff, 0x0, 0xfffffffa, 0x2, 0x1, 0x2, 0x7, 0x3, 0x0, 0xb, 0x8, 0x7, 0xffffffff, 0x5, 0x8, 0x800, 0x1000, 0x400, 0x5c, 0x4, 0x1, 0x3, 0x1, 0x381c, 0x42d, 0xfffffff7, 0xfff, 0x0, 0x4, 0x6, 0x7, 0x1, 0xf, 0x80000001, 0x9, 0x80000001, 0x1, 0x1, 0x32d1, 0x8000, 0xffb, 0xbde10000, 0x7, 0xe7, 0x60c, 0xe, 0x5, 0x1, 0x3, 0x8, 0x9, 0x343, 0x8, 0xffffffff, 0xa, 0xf, 0x4, 0x7f, 0x0, 0x0, 0x400, 0x2, 0x8, 0x6, 0x7, 0xd, 0x7, 0x8, 0x5, 0x25a6, 0x726, 0x3, 0x2b, 0x7fffffff, 0x4, 0x9b, 0x10000, 0x1ff, 0x40, 0x400, 0x3, 0x9, 0x6, 0x2, 0xfffffffe, 0x5, 0x2, 0x73, 0x3, 0x81, 0x0, 0x800, 0x9, 0x401, 0x4d0, 0x1, 0x8, 0x1, 0x7, 0x401]}]]}, {0x9a, 0x6, "c0478b4ac12177a57e59fcc0b7147b619b7e273c9363a9994785d22032c57b3c06e39d2222c908bcc83d71527657e704d4c0df792d7ee6e7ffd5c8f38dc351c63ea42791cf56d2067dd9ac1da6d357a05ebcb2dd65c9109c401db1ca89d64f1f21eff72fa247b9c47b9f51c41291a8b851c558ac08d0c12d43498a488f50fb43d5abd3701bab2e431610db7cd8ba52206394dc30935e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x91}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000800)=""/106, 0x6a}, {&(0x7f0000000cc0)=""/85, 0x55}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000bc0)=""/201, 0xc9}, 0x3}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_io_uring_setup(0x508f, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.027305877s ago: executing program 5 (id=16544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0x6, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setregid(0xffffffffffffffff, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.003653949s ago: executing program 6 (id=16545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff020000000000000000000000000001"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d6b1a36ef281df8df5f624425f6a243af10e42f19d46e0bb2f999f7cf3900a4292082a5d8249def296cc5dd42fccfa9e0dbd8bf29c4263f7d69ed4716fbb1fe548ff3bde1c8131ec7b76ac9a2", @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x0, 0x6, 0x9, 0x7fffffff}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000049000921299d7000fbdbdf250a", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='objagg_obj_root_destroy\x00', r0, 0x0, 0xa0000}, 0x18) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0xb0) 997.70128ms ago: executing program 4 (id=16546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@nolazytime}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='console\x00', r4}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) dup2(r7, r7) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 760.327044ms ago: executing program 2 (id=16547): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[0x0]) 648.784835ms ago: executing program 2 (id=16548): syz_usb_connect(0x1, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ce859b08402040b13675010203010902120001090340f20904010800ff4e4205958ef53d32c42520ec9367b4097562ff68d1454a84756368bdec917096d00343c5cfacd87ad19c842752425296f4dab8fb5d181cacfc8deb221db613c069e9c41c418116869f6cad8d62d1"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142800006c07010033d43afffe8000000000"], 0x340a) 490.118681ms ago: executing program 3 (id=16549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 470.141843ms ago: executing program 6 (id=16550): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000003c0)=0xf3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511", 0x41, 0x0, &(0x7f0000000540)={0xc9, 0xf8, r1, 0x1, 0x80, 0x6, @local}, 0x14) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x8, 0x1) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @multicast2, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) 441.531186ms ago: executing program 3 (id=16551): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@nolazytime}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x8000c61) 364.162974ms ago: executing program 3 (id=16552): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000003c0)=0xf3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511", 0x41, 0x0, &(0x7f0000000540)={0xc9, 0xf8, r1, 0x1, 0x80, 0x6, @local}, 0x14) write$nci(0xffffffffffffffff, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x8, 0x1) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @multicast2, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) 363.163874ms ago: executing program 6 (id=16553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0x23}], 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x10, 0x43b53}}, {0x0, 0x0, 0xfd, 0x4, @time={0x8, 0x8}, {0x9, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0x8b, [0x0, 0xffffffffffffffff, 0x9, 0x29, 0xffffffff, 0x1], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)=""/139}, &(0x7f00000001c0)=0x78) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0xd1, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r5, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x69) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000002b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 348.792685ms ago: executing program 3 (id=16554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) flock(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) 313.511709ms ago: executing program 6 (id=16555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@nolazytime}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 159.938764ms ago: executing program 3 (id=16556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./control\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@test_dummy_encryption}, {@journal_checksum}, {@noauto_da_alloc}, {@grpquota}, {@nodelalloc}, {@resgid={'resgid', 0x3d, r2}}, {@noblock_validity}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) 154.883154ms ago: executing program 6 (id=16557): socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) rmdir(&(0x7f0000000100)='./control\x00') 120.960208ms ago: executing program 5 (id=16558): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[0x0]) 101.39581ms ago: executing program 4 (id=16559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) flock(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) 29.353177ms ago: executing program 3 (id=16560): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 11.877319ms ago: executing program 5 (id=16561): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 0s ago: executing program 2 (id=16562): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00250000000000003c0012800b000100697036746e6c00002c00"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) kernel console output (not intermixed with test programs): 2808][T19756] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1214.933825][T19756] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.15874: bg 0: block 104: invalid block bitmap [ 1214.946761][T19755] 1{X功: renamed from 30{X功 (while UP) [ 1214.964871][T19756] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1214.979840][T19756] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.15874: invalid indirect mapped block 1 (level 1) [ 1214.981198][T19755] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1214.993698][T19758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19758 comm=syz.2.15876 [ 1215.021707][T19758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19758 comm=syz.2.15876 [ 1215.023769][T19756] EXT4-fs (loop4): 1 truncate cleaned up [ 1215.043522][T19756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.082410][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.108643][T19766] netlink: 'syz.4.15880': attribute type 10 has an invalid length. [ 1215.123543][T19766] bond0: (slave dummy0): Releasing backup interface [ 1215.134703][T19766] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1215.144082][T19766] team0: Failed to send options change via netlink (err -105) [ 1215.151785][T19766] team0: Port device dummy0 added [ 1215.159719][T19766] netlink: 'syz.4.15880': attribute type 10 has an invalid length. [ 1215.168528][T19766] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1215.196026][T19766] team0: Failed to send options change via netlink (err -105) [ 1215.203842][T19766] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1215.217883][T19776] loop4: detected capacity change from 0 to 1024 [ 1215.228564][T19766] team0: Port device dummy0 removed [ 1215.236653][T19766] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1215.255182][T19776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.278048][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.296219][T19784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15887'. [ 1215.479708][T19795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.488263][T19795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.847051][T19800] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=19800 comm=syz.5.15894 [ 1215.860701][T19800] netlink: 232 bytes leftover after parsing attributes in process `syz.5.15894'. [ 1216.094803][T19808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1216.211593][T19821] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15903'. [ 1216.268045][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15906'. [ 1216.288289][T19829] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=19829 comm=syz.4.15907 [ 1216.320197][T19829] netlink: 232 bytes leftover after parsing attributes in process `syz.4.15907'. [ 1216.402769][T19837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.420840][T19837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.423146][T19838] rdma_rxe: rxe_newlink: failed to add lo [ 1216.538825][T19847] rdma_rxe: rxe_newlink: failed to add lo [ 1216.824529][T19851] 1{X功: renamed from 30{X功 (while UP) [ 1216.831971][T19851] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1216.848289][T19851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19851 comm=syz.3.15915 [ 1216.860932][T19851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19851 comm=syz.3.15915 [ 1217.215129][T19867] 0{X功: renamed from 31{X功 (while UP) [ 1217.223348][T19867] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1217.243443][T19867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19867 comm=syz.5.15923 [ 1217.256175][T19867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19867 comm=syz.5.15923 [ 1217.279800][T19867] loop5: detected capacity change from 0 to 512 [ 1217.288081][T19867] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1217.309192][T19867] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.15923: bg 0: block 104: invalid block bitmap [ 1217.323230][T19867] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1217.332218][T19867] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.15923: invalid indirect mapped block 1 (level 1) [ 1217.345864][T19867] EXT4-fs (loop5): 1 truncate cleaned up [ 1217.352126][T19867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.428087][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.651084][T19882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.660612][T19882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.668543][T19881] 1{X功: renamed from 30{X功 (while UP) [ 1217.680979][T19881] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1217.725111][T19886] loop6: detected capacity change from 0 to 512 [ 1217.740336][T19886] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1217.765039][T19886] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.15927: bg 0: block 104: invalid block bitmap [ 1217.778240][T19886] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1217.787617][T19886] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15927: invalid indirect mapped block 1 (level 1) [ 1217.802134][T19886] EXT4-fs (loop6): 1 truncate cleaned up [ 1217.808778][T19891] rdma_rxe: rxe_newlink: failed to add lo [ 1217.815113][T19886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.849813][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.889032][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 1217.889046][ T29] audit: type=1326 audit(1732.327:82428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.4.15925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1217.928319][ T29] audit: type=1326 audit(1732.337:82429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.4.15925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1217.951394][ T29] audit: type=1326 audit(1732.337:82430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.4.15925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1217.974682][ T29] audit: type=1326 audit(1732.347:82431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.4.15925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1218.007734][T19900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.016976][T19900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.411561][T19906] netlink: 'syz.2.15936': attribute type 10 has an invalid length. [ 1218.422181][T19906] bond0: (slave dummy0): Releasing backup interface [ 1218.432801][T19906] team0: Failed to send options change via netlink (err -105) [ 1218.440444][T19906] team0: Port device dummy0 added [ 1218.452574][T19906] netlink: 'syz.2.15936': attribute type 10 has an invalid length. [ 1218.461976][T19906] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1218.473168][T19906] team0: Failed to send options change via netlink (err -105) [ 1218.480989][T19906] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1218.490307][T19906] team0: Port device dummy0 removed [ 1218.500812][T19906] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1218.678084][T19918] __nla_validate_parse: 5 callbacks suppressed [ 1218.678097][T19918] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15941'. [ 1218.707607][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/617.tmp-b7:4' failed: Read-only file system [ 1218.803513][T19922] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15940'. [ 1218.975996][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/617.tmp-b7:4' failed: Read-only file system [ 1219.000304][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-diskseq/621.tmp-b7:6' failed: Read-only file system [ 1219.035241][T19926] syzkaller0: entered promiscuous mode [ 1219.040736][T19926] syzkaller0: entered allmulticast mode [ 1219.170751][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/621.tmp-b7:6' failed: Read-only file system [ 1219.189979][T19930] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15945'. [ 1219.214792][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/621.tmp-b7:6' failed: Read-only file system [ 1219.531188][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/619.tmp-b7:5' failed: Read-only file system [ 1219.592674][T19939] rdma_rxe: rxe_newlink: failed to add lo [ 1219.661562][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/619.tmp-b7:5' failed: Read-only file system [ 1219.747051][T19946] rdma_rxe: rxe_newlink: failed to add lo [ 1219.806506][ T29] audit: type=1326 audit(1734.247:82432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.4.15943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1219.829801][ T29] audit: type=1326 audit(1734.247:82433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.4.15943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1219.853643][ T29] audit: type=1326 audit(1734.277:82434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.4.15943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1219.876833][ T29] audit: type=1326 audit(1734.277:82435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.4.15943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1219.900001][ T29] audit: type=1326 audit(1734.277:82436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.4.15943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790d0df6c9 code=0x7ffc0000 [ 1219.926390][T19951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.935093][T19951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.976564][T14669] udevd[14669]: symlink '../../loop4' '/dev/disk/by-diskseq/617.tmp-b7:4' failed: Read-only file system [ 1219.990375][T19953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.999433][T19953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.125116][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/621.tmp-b7:6' failed: Read-only file system [ 1220.254448][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/621.tmp-b7:6' failed: Read-only file system [ 1220.355034][T19967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1220.447281][T19970] netlink: 'syz.2.15958': attribute type 10 has an invalid length. [ 1220.464017][T19970] bond0: (slave dummy0): Releasing backup interface [ 1220.473738][T19970] team0: Failed to send options change via netlink (err -105) [ 1220.481258][T19970] team0: Port device dummy0 added [ 1220.488891][T19970] netlink: 'syz.2.15958': attribute type 10 has an invalid length. [ 1220.497569][T19970] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1220.514022][T19970] team0: Failed to send options change via netlink (err -105) [ 1220.526037][T19970] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1220.540327][T19968] Cannot find add_set index 0 as target [ 1220.546097][ T29] audit: type=1326 audit(1734.977:82437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.6.15957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9f1df6c9 code=0x7ffc0000 [ 1220.560583][T19970] team0: Port device dummy0 removed [ 1220.576221][T19975] rdma_rxe: rxe_newlink: failed to add lo [ 1220.593642][T19970] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1220.623008][T19979] netlink: 'syz.4.15960': attribute type 1 has an invalid length. [ 1220.656936][T19979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15960'. [ 1220.724740][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15964'. [ 1220.877453][T19999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15962'. [ 1221.239783][T20009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.249495][T20009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.259130][T20010] rdma_rxe: rxe_newlink: failed to add lo [ 1221.396974][T20001] Cannot find add_set index 0 as target [ 1221.473181][T20018] netlink: 'syz.3.15973': attribute type 10 has an invalid length. [ 1221.489617][T20018] bond0: (slave dummy0): Releasing backup interface [ 1221.513349][T20018] team0: Failed to send options change via netlink (err -105) [ 1221.520965][T20018] team0: Port device dummy0 added [ 1221.526603][T20019] netlink: 'syz.3.15973': attribute type 10 has an invalid length. [ 1221.537949][T20019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1221.562537][T20019] team0: Failed to send options change via netlink (err -105) [ 1221.570610][T20019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1221.581486][T20019] team0: Port device dummy0 removed [ 1221.586896][T20014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1221.600335][T20019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1221.673723][T20026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.682527][T20026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.847382][T20021] SET target dimension over the limit! [ 1222.072615][T20043] netlink: 5 bytes leftover after parsing attributes in process `syz.4.15983'. [ 1222.096457][T20043] 0{X功: renamed from 31{X功 (while UP) [ 1222.115481][T20043] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1222.135334][T20050] netlink: 'syz.3.15986': attribute type 10 has an invalid length. [ 1222.150687][T20050] bond0: (slave dummy0): Releasing backup interface [ 1222.157709][T20051] selinux_netlink_send: 3 callbacks suppressed [ 1222.157722][T20051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20051 comm=syz.4.15983 [ 1222.176676][T20051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20051 comm=syz.4.15983 [ 1222.192279][T20050] team0: Failed to send options change via netlink (err -105) [ 1222.196337][T20052] netlink: 'syz.3.15986': attribute type 10 has an invalid length. [ 1222.200038][T20050] team0: Port device dummy0 added [ 1222.215990][T20043] loop4: detected capacity change from 0 to 512 [ 1222.241696][T20052] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1222.274143][T20043] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1222.282859][T20052] team0: Failed to send options change via netlink (err -105) [ 1222.290414][T20052] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1222.290679][T20043] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.15983: bg 0: block 104: invalid block bitmap [ 1222.299286][T20052] team0: Port device dummy0 removed [ 1222.315040][T20043] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1222.319643][T20052] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1222.346349][T20043] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.15983: invalid indirect mapped block 1 (level 1) [ 1222.360067][T20043] EXT4-fs (loop4): 1 truncate cleaned up [ 1222.366462][T20043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1222.424488][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.764917][T20074] loop4: detected capacity change from 0 to 512 [ 1222.789678][T20064] Cannot find add_set index 0 as target [ 1222.848867][T20077] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15988'. [ 1222.998372][T20074] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1223.009964][T20074] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1223.020170][T20074] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.15994: Corrupt directory, running e2fsck is recommended [ 1223.134701][T20074] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1223.144288][T20074] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.15994: corrupted in-inode xattr: invalid ea_ino [ 1223.172701][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 1223.172714][ T29] audit: type=1400 audit(1737.607:82529): avc: denied { create } for pid=20086 comm="syz.2.15998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1223.211703][T20074] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.15994: couldn't read orphan inode 15 (err -117) [ 1223.226302][T20074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1223.243676][ T29] audit: type=1400 audit(1737.687:82530): avc: denied { setopt } for pid=20073 comm="syz.4.15994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1223.322041][T20074] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1223.333549][T20074] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1223.343640][T20074] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.15994: Corrupt directory, running e2fsck is recommended [ 1223.348978][T20091] netlink: 5 bytes leftover after parsing attributes in process `syz.3.16000'. [ 1223.356655][ T29] audit: type=1400 audit(1737.757:82531): avc: denied { write } for pid=20073 comm="syz.4.15994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1223.374065][T20091] 0{X功: renamed from 31{X功 (while UP) [ 1223.399427][ T29] audit: type=1400 audit(1737.837:82532): avc: denied { bind } for pid=20073 comm="syz.4.15994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1223.418802][T20074] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.15994: path /200/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 1223.438879][ T29] audit: type=1400 audit(1737.837:82533): avc: denied { write } for pid=20073 comm="syz.4.15994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1223.440251][T20091] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1223.458249][T20074] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 64: comm syz.4.15994: path /200/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1223.536557][T20095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20095 comm=syz.3.16000 [ 1223.549232][T20095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20095 comm=syz.3.16000 [ 1223.568525][ T29] audit: type=1326 audit(1738.007:82534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20078 comm="syz.6.15996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9f1df6c9 code=0x7ffc0000 [ 1223.591753][ T29] audit: type=1326 audit(1738.007:82535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20078 comm="syz.6.15996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9f1df6c9 code=0x7ffc0000 [ 1223.615263][ T29] audit: type=1326 audit(1738.007:82536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20078 comm="syz.6.15996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3f9f1df6c9 code=0x7ffc0000 [ 1223.638450][ T29] audit: type=1326 audit(1738.007:82537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20078 comm="syz.6.15996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9f1df6c9 code=0x7ffc0000 [ 1223.661645][ T29] audit: type=1326 audit(1738.007:82538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20078 comm="syz.6.15996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9f1df6c9 code=0x7ffc0000 [ 1223.724473][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/621.tmp-b7:6' failed: Read-only file system [ 1223.742824][T20103] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16003'. [ 1223.761199][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.778837][T30050] udevd[30050]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1223.780835][T20105] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16004'. [ 1223.790753][T20101] netlink: 5 bytes leftover after parsing attributes in process `syz.6.16002'. [ 1223.820165][T20099] netlink: 'syz.5.16001': attribute type 10 has an invalid length. [ 1223.829632][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/624.tmp-b7:4' failed: Read-only file system [ 1223.843735][T20110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20110 comm=syz.6.16002 [ 1223.856516][T20110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20110 comm=syz.6.16002 [ 1223.858631][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/624.tmp-b7:4' failed: Read-only file system [ 1223.880799][T20099] bond0: (slave dummy0): Releasing backup interface [ 1223.891140][T20099] team0: Failed to send options change via netlink (err -105) [ 1223.898685][T20099] team0: Port device dummy0 added [ 1223.898833][T20112] netlink: 'syz.5.16001': attribute type 10 has an invalid length. [ 1223.911792][T20115] loop6: detected capacity change from 0 to 512 [ 1223.920824][T20101] 0{X功: renamed from 31{X功 (while UP) [ 1223.921222][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/625.tmp-b7:4' failed: Read-only file system [ 1223.939694][T20101] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1223.948154][T20099] loop5: detected capacity change from 0 to 1024 [ 1223.965852][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-diskseq/626.tmp-b7:6' failed: Read-only file system [ 1223.971241][T20112] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1223.986983][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1223.993506][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/625.tmp-b7:4' failed: Read-only file system [ 1224.016318][T20115] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1224.027467][T20112] team0: Failed to send options change via netlink (err -105) [ 1224.044970][T29224] udevd[29224]: symlink '../../loop5' '/dev/disk/by-diskseq/627.tmp-b7:5' failed: Read-only file system [ 1224.056652][T20112] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1224.068419][T29224] udevd[29224]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1224.080086][T20115] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.16002: bg 0: block 104: invalid block bitmap [ 1224.094634][T20112] team0: Port device dummy0 removed [ 1224.102563][T20112] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1224.111412][T20115] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1224.127567][T20099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.152048][T20115] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16002: invalid indirect mapped block 1 (level 1) [ 1224.178090][T20115] EXT4-fs (loop6): 1 truncate cleaned up [ 1224.246102][T20134] rdma_rxe: rxe_newlink: failed to add lo [ 1224.267165][T20115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.304860][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.328072][T20133] SET target dimension over the limit! [ 1224.773000][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.940583][T20158] FAULT_INJECTION: forcing a failure. [ 1224.940583][T20158] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.953299][T20158] CPU: 1 UID: 0 PID: 20158 Comm: syz.5.16016 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1224.953358][T20158] Tainted: [W]=WARN [ 1224.953364][T20158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1224.953375][T20158] Call Trace: [ 1224.953382][T20158] [ 1224.953389][T20158] __dump_stack+0x1d/0x30 [ 1224.953411][T20158] dump_stack_lvl+0xe8/0x140 [ 1224.953500][T20158] dump_stack+0x15/0x1b [ 1224.953521][T20158] should_fail_ex+0x265/0x280 [ 1224.953610][T20158] ? __se_sys_memfd_create+0x1cc/0x590 [ 1224.953635][T20158] should_failslab+0x8c/0xb0 [ 1224.953718][T20158] __kmalloc_cache_noprof+0x4c/0x4a0 [ 1224.953743][T20158] ? fput+0x8f/0xc0 [ 1224.953759][T20158] __se_sys_memfd_create+0x1cc/0x590 [ 1224.953845][T20158] __x64_sys_memfd_create+0x31/0x40 [ 1224.953869][T20158] x64_sys_call+0x2ac2/0x3000 [ 1224.953899][T20158] do_syscall_64+0xd2/0x200 [ 1224.953919][T20158] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1224.953971][T20158] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1224.953998][T20158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.954082][T20158] RIP: 0033:0x7f6cc314f6c9 [ 1224.954101][T20158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.954146][T20158] RSP: 002b:00007f6cc1baee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1224.954166][T20158] RAX: ffffffffffffffda RBX: 0000000000000537 RCX: 00007f6cc314f6c9 [ 1224.954184][T20158] RDX: 00007f6cc1baeef0 RSI: 0000000000000000 RDI: 00007f6cc31d2960 [ 1224.954215][T20158] RBP: 0000200000000600 R08: 00007f6cc1baebb7 R09: 00007f6cc1baee40 [ 1224.954283][T20158] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000580 [ 1224.954293][T20158] R13: 00007f6cc1baeef0 R14: 00007f6cc1baeeb0 R15: 00002000000005c0 [ 1224.954309][T20158] [ 1225.201380][T20160] netlink: 96 bytes leftover after parsing attributes in process `syz.5.16017'. [ 1225.314656][T20171] loop5: detected capacity change from 0 to 128 [ 1225.330037][T20172] rdma_rxe: rxe_newlink: failed to add lo [ 1225.513161][T20186] loop5: detected capacity change from 0 to 764 [ 1225.551503][T20187] rdma_rxe: rxe_newlink: failed to add lo [ 1226.183277][T20202] rdma_rxe: rxe_newlink: failed to add lo [ 1226.405462][T20215] FAULT_INJECTION: forcing a failure. [ 1226.405462][T20215] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1226.418826][T20215] CPU: 0 UID: 0 PID: 20215 Comm: syz.2.16036 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1226.418881][T20215] Tainted: [W]=WARN [ 1226.418888][T20215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1226.418898][T20215] Call Trace: [ 1226.418903][T20215] [ 1226.418910][T20215] __dump_stack+0x1d/0x30 [ 1226.418972][T20215] dump_stack_lvl+0xe8/0x140 [ 1226.419030][T20215] dump_stack+0x15/0x1b [ 1226.419044][T20215] should_fail_ex+0x265/0x280 [ 1226.419073][T20215] should_fail+0xb/0x20 [ 1226.419092][T20215] should_fail_usercopy+0x1a/0x20 [ 1226.419109][T20215] _copy_from_user+0x1c/0xb0 [ 1226.419199][T20215] __sys_bind+0x106/0x2a0 [ 1226.419312][T20215] __x64_sys_bind+0x3f/0x50 [ 1226.419335][T20215] x64_sys_call+0x2b72/0x3000 [ 1226.419412][T20215] do_syscall_64+0xd2/0x200 [ 1226.419434][T20215] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1226.419501][T20215] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1226.419584][T20215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.419603][T20215] RIP: 0033:0x7f75becbf6c9 [ 1226.419619][T20215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.419636][T20215] RSP: 002b:00007f75bd727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1226.419723][T20215] RAX: ffffffffffffffda RBX: 00007f75bef15fa0 RCX: 00007f75becbf6c9 [ 1226.419734][T20215] RDX: 0000000000000074 RSI: 0000200000000000 RDI: 0000000000000004 [ 1226.419744][T20215] RBP: 00007f75bd727090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.419755][T20215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.419770][T20215] R13: 00007f75bef16038 R14: 00007f75bef15fa0 R15: 00007ffd97e766d8 [ 1226.419785][T20215] [ 1226.619864][T20223] FAULT_INJECTION: forcing a failure. [ 1226.619864][T20223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.632917][T20223] CPU: 1 UID: 0 PID: 20223 Comm: syz.2.16039 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1226.632948][T20223] Tainted: [W]=WARN [ 1226.632956][T20223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1226.632968][T20223] Call Trace: [ 1226.632982][T20223] [ 1226.632989][T20223] __dump_stack+0x1d/0x30 [ 1226.633010][T20223] dump_stack_lvl+0xe8/0x140 [ 1226.633031][T20223] dump_stack+0x15/0x1b [ 1226.633049][T20223] should_fail_ex+0x265/0x280 [ 1226.633126][T20223] should_fail+0xb/0x20 [ 1226.633142][T20223] should_fail_usercopy+0x1a/0x20 [ 1226.633163][T20223] _copy_from_user+0x1c/0xb0 [ 1226.633188][T20223] ___sys_sendmsg+0xc1/0x1d0 [ 1226.633255][T20223] __x64_sys_sendmsg+0xd4/0x160 [ 1226.633278][T20223] x64_sys_call+0x191e/0x3000 [ 1226.633325][T20223] do_syscall_64+0xd2/0x200 [ 1226.633398][T20223] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1226.633426][T20223] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1226.633458][T20223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.633532][T20223] RIP: 0033:0x7f75becbf6c9 [ 1226.633548][T20223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.633608][T20223] RSP: 002b:00007f75bd727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1226.633628][T20223] RAX: ffffffffffffffda RBX: 00007f75bef15fa0 RCX: 00007f75becbf6c9 [ 1226.633643][T20223] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1226.633655][T20223] RBP: 00007f75bd727090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.633667][T20223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.633680][T20223] R13: 00007f75bef16038 R14: 00007f75bef15fa0 R15: 00007ffd97e766d8 [ 1226.633698][T20223] [ 1226.646332][T20225] netlink: 5 bytes leftover after parsing attributes in process `syz.6.16038'. [ 1226.698350][T20228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20228 comm=syz.6.16038 [ 1226.755492][T20225] 1{X功: renamed from 30{X功 (while UP) [ 1226.758614][T20228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20228 comm=syz.6.16038 [ 1226.787557][T20231] rdma_rxe: rxe_newlink: failed to add lo [ 1226.799349][T20232] loop6: detected capacity change from 0 to 512 [ 1226.866717][T20232] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1226.879154][T20225] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1226.902203][T20230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16041'. [ 1226.913914][T20230] ip6tnl2: entered promiscuous mode [ 1226.915459][T20232] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.16038: bg 0: block 104: invalid block bitmap [ 1226.934829][T20232] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1226.943672][T20232] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16038: invalid indirect mapped block 1 (level 1) [ 1226.957551][T20232] EXT4-fs (loop6): 1 truncate cleaned up [ 1226.963661][T20232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.004982][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.036271][T20244] netlink: 'syz.5.16045': attribute type 1 has an invalid length. [ 1227.063185][T20244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1227.083704][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16045'. [ 1227.125621][T20244] bond5 (unregistering): Released all slaves [ 1227.196002][T20259] netlink: 'syz.5.16049': attribute type 10 has an invalid length. [ 1227.215977][T20259] bond0: (slave dummy0): Releasing backup interface [ 1227.225492][T20259] team0: Failed to send options change via netlink (err -105) [ 1227.232957][T20259] team0: Port device dummy0 added [ 1227.253236][T20259] netlink: 'syz.5.16049': attribute type 10 has an invalid length. [ 1227.264805][T20259] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1227.392383][T20270] loop5: detected capacity change from 0 to 1024 [ 1227.405412][T20266] netlink: 5 bytes leftover after parsing attributes in process `syz.4.16053'. [ 1227.430650][T20259] team0: Failed to send options change via netlink (err -105) [ 1227.465858][T20268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16054'. [ 1227.478477][T20259] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1227.487720][T20259] team0: Port device dummy0 removed [ 1227.506366][T20259] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1227.538486][T20270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.635228][T20281] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20281 comm=syz.4.16053 [ 1227.647968][T20281] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20281 comm=syz.4.16053 [ 1227.669672][T20281] loop4: detected capacity change from 0 to 512 [ 1227.679705][T20281] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1227.717125][T20281] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.16053: bg 0: block 104: invalid block bitmap [ 1227.733795][T20281] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1227.742816][T20281] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.16053: invalid indirect mapped block 1 (level 1) [ 1227.756773][T20281] EXT4-fs (loop4): 1 truncate cleaned up [ 1227.763186][T20281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.801451][T20266] 1{X功: renamed from 30{X功 (while UP) [ 1227.810264][T20266] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1227.828349][T20268] ip6tnl3: entered promiscuous mode [ 1227.835719][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.856995][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.925312][T20294] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16058'. [ 1227.957822][T20298] syz.3.16062: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1227.972567][T20298] CPU: 1 UID: 0 PID: 20298 Comm: syz.3.16062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1227.972657][T20298] Tainted: [W]=WARN [ 1227.972663][T20298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1227.972674][T20298] Call Trace: [ 1227.972679][T20298] [ 1227.972713][T20298] __dump_stack+0x1d/0x30 [ 1227.972735][T20298] dump_stack_lvl+0xe8/0x140 [ 1227.972754][T20298] dump_stack+0x15/0x1b [ 1227.972834][T20298] warn_alloc+0x12b/0x1a0 [ 1227.972916][T20298] ? __rcu_read_unlock+0x4f/0x70 [ 1227.972939][T20298] __vmalloc_node_range_noprof+0x9d/0xed0 [ 1227.972966][T20298] ? __futex_wait+0x1fa/0x260 [ 1227.972987][T20298] ? __pfx_futex_wake_mark+0x10/0x10 [ 1227.973010][T20298] ? __rcu_read_unlock+0x4f/0x70 [ 1227.973037][T20298] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1227.973095][T20298] ? should_fail_ex+0x30/0x280 [ 1227.973170][T20298] ? xskq_create+0x36/0xe0 [ 1227.973196][T20298] vmalloc_user_noprof+0x7d/0xb0 [ 1227.973369][T20298] ? xskq_create+0x80/0xe0 [ 1227.973427][T20298] xskq_create+0x80/0xe0 [ 1227.973526][T20298] xsk_init_queue+0x95/0xf0 [ 1227.973546][T20298] xsk_setsockopt+0x3f5/0x640 [ 1227.973569][T20298] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1227.973595][T20298] __sys_setsockopt+0x184/0x200 [ 1227.973661][T20298] __x64_sys_setsockopt+0x64/0x80 [ 1227.973750][T20298] x64_sys_call+0x20ec/0x3000 [ 1227.973771][T20298] do_syscall_64+0xd2/0x200 [ 1227.973804][T20298] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1227.973833][T20298] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1227.973865][T20298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.973936][T20298] RIP: 0033:0x7fa3d8c2f6c9 [ 1227.974008][T20298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1227.974024][T20298] RSP: 002b:00007fa3d768f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1227.974040][T20298] RAX: ffffffffffffffda RBX: 00007fa3d8e85fa0 RCX: 00007fa3d8c2f6c9 [ 1227.974052][T20298] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1227.974145][T20298] RBP: 00007fa3d8cb1f91 R08: 0000000000000004 R09: 0000000000000000 [ 1227.974196][T20298] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.974208][T20298] R13: 00007fa3d8e86038 R14: 00007fa3d8e85fa0 R15: 00007ffed50f7908 [ 1227.974225][T20298] [ 1228.202243][T20298] Mem-Info: [ 1228.205375][T20298] active_anon:14048 inactive_anon:5 isolated_anon:0 [ 1228.205375][T20298] active_file:13904 inactive_file:16631 isolated_file:0 [ 1228.205375][T20298] unevictable:16368 dirty:279 writeback:9 [ 1228.205375][T20298] slab_reclaimable:3841 slab_unreclaimable:18931 [ 1228.205375][T20298] mapped:36459 shmem:5996 pagetables:1686 [ 1228.205375][T20298] sec_pagetables:0 bounce:0 [ 1228.205375][T20298] kernel_misc_reclaimable:0 [ 1228.205375][T20298] free:1818865 free_pcp:20790 free_cma:0 [ 1228.250976][T20298] Node 0 active_anon:56076kB inactive_anon:20kB active_file:55616kB inactive_file:66524kB unevictable:65472kB isolated(anon):0kB isolated(file):0kB mapped:145836kB dirty:1116kB writeback:36kB shmem:23984kB kernel_stack:4304kB pagetables:6628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1228.278972][T20298] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.308715][T20298] lowmem_reserve[]: 0 2881 7859 7859 [ 1228.314216][T20298] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 1228.345918][T20298] lowmem_reserve[]: 0 0 4978 4978 [ 1228.351155][T20298] Node 0 Normal free:4312996kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56192kB inactive_anon:20kB active_file:55616kB inactive_file:66524kB unevictable:65472kB writepending:1268kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:79500kB local_pcp:16208kB free_cma:0kB [ 1228.384690][T20298] lowmem_reserve[]: 0 0 0 0 [ 1228.389226][T20298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1228.402024][T20298] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 1228.418261][T20298] Node 0 Normal: 1242*4kB (UME) 549*8kB (UME) 939*16kB (UME) 1000*32kB (UME) 763*64kB (UME) 326*128kB (ME) 128*256kB (UM) 53*512kB (M) 192*1024kB (UM) 121*2048kB (UME) 894*4096kB (UM) = 4313088kB [ 1228.420433][T20310] rdma_rxe: rxe_newlink: failed to add lo [ 1228.437646][T20298] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1228.452678][T20298] 52887 total pagecache pages [ 1228.457437][T20298] 19 pages in swap cache [ 1228.461717][T20298] Free swap = 120844kB [ 1228.466017][T20298] Total swap = 124996kB [ 1228.466027][T20298] 2097051 pages RAM [ 1228.466034][T20298] 0 pages HighMem/MovableOnly [ 1228.466040][T20298] 81087 pages reserved [ 1228.629258][T20316] ip6tnl2: entered promiscuous mode [ 1228.752212][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/639.tmp-b7:4' failed: Read-only file system [ 1228.822186][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-diskseq/635.tmp-b7:6' failed: Read-only file system [ 1228.856726][T20329] loop6: detected capacity change from 0 to 1024 [ 1228.865356][T20329] EXT4-fs: Ignoring removed orlov option [ 1228.878430][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/640.tmp-b7:6' failed: Read-only file system [ 1228.890078][T20329] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1228.901820][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1228.936210][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/639.tmp-b7:4' failed: Read-only file system [ 1228.966631][T20333] __nla_validate_parse: 3 callbacks suppressed [ 1228.966648][T20333] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.16075'. [ 1228.985951][T20329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1228.998649][T20333] netlink: zone id is out of range [ 1229.003756][T20333] netlink: zone id is out of range [ 1229.012781][T20329] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #12: block 7: comm syz.6.16073: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1229.032786][T20333] netlink: zone id is out of range [ 1229.037973][T20333] netlink: zone id is out of range [ 1229.043744][T20333] netlink: zone id is out of range [ 1229.049408][T20333] netlink: zone id is out of range [ 1229.052753][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1229.052765][ T29] audit: type=1400 audit(1743.487:82601): avc: denied { bind } for pid=20337 comm="syz.2.16076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1229.062719][T20333] netlink: set zone limit has 8 unknown bytes [ 1229.079771][ T29] audit: type=1400 audit(1743.487:82602): avc: denied { name_bind } for pid=20337 comm="syz.2.16076" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1229.079861][ T29] audit: type=1400 audit(1743.487:82603): avc: denied { node_bind } for pid=20337 comm="syz.2.16076" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1229.151191][T20340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16077'. [ 1229.181082][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/639.tmp-b7:4' failed: Read-only file system [ 1229.215164][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/639.tmp-b7:4' failed: Read-only file system [ 1229.257090][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/638.tmp-b7:5' failed: Read-only file system [ 1229.290863][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/638.tmp-b7:5' failed: Read-only file system [ 1229.346657][T20350] netlink: 'syz.5.16081': attribute type 10 has an invalid length. [ 1229.384470][T20350] bond0: (slave dummy0): Releasing backup interface [ 1229.416339][T20355] netlink: 'syz.5.16081': attribute type 10 has an invalid length. [ 1229.434769][T20350] team0: Failed to send options change via netlink (err -105) [ 1229.442346][T20350] team0: Port device dummy0 added [ 1229.456873][T20355] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1229.498392][T20355] team0: Failed to send options change via netlink (err -105) [ 1229.518147][T20355] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1229.527640][T20355] team0: Port device dummy0 removed [ 1229.537981][T20355] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1229.651753][T20361] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16083'. [ 1229.665729][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/639.tmp-b7:4' failed: Read-only file system [ 1229.699367][ T29] audit: type=1400 audit(1744.127:82604): avc: denied { mount } for pid=20362 comm="syz.5.16082" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1229.745421][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.768504][T20365] lo speed is unknown, defaulting to 1000 [ 1229.869233][ T29] audit: type=1400 audit(1744.307:82605): avc: denied { write } for pid=20373 comm="syz.6.16087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1229.888635][ T29] audit: type=1400 audit(1744.307:82606): avc: denied { bpf } for pid=20373 comm="syz.6.16087" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1229.909051][ T29] audit: type=1400 audit(1744.307:82607): avc: denied { prog_load } for pid=20373 comm="syz.6.16087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1229.927831][ T29] audit: type=1400 audit(1744.307:82608): avc: denied { perfmon } for pid=20373 comm="syz.6.16087" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1229.950490][T20372] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16086'. [ 1229.959886][ T29] audit: type=1400 audit(1744.377:82609): avc: denied { recv } for pid=20366 comm="syz.4.16086" saddr=10.128.0.163 src=30036 daddr=10.128.0.237 dest=57950 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1229.985093][ T29] audit: type=1400 audit(1744.377:82610): avc: denied { prog_run } for pid=20366 comm="syz.4.16086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1230.074510][T20387] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16091'. [ 1230.113499][T20391] netlink: 'syz.6.16093': attribute type 10 has an invalid length. [ 1230.142454][T20391] bond0: (slave dummy0): Releasing backup interface [ 1230.142655][T20394] rdma_rxe: rxe_newlink: failed to add lo [ 1230.157922][T20391] team0: Port device dummy0 added [ 1230.165359][T20391] netlink: 'syz.6.16093': attribute type 10 has an invalid length. [ 1230.181761][T20391] team0: Port device dummy0 removed [ 1230.188359][T20391] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1230.328731][T20401] netlink: 96 bytes leftover after parsing attributes in process `syz.6.16096'. [ 1230.762004][T20421] FAULT_INJECTION: forcing a failure. [ 1230.762004][T20421] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.774659][T20421] CPU: 1 UID: 0 PID: 20421 Comm: syz.4.16104 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1230.774688][T20421] Tainted: [W]=WARN [ 1230.774693][T20421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1230.774702][T20421] Call Trace: [ 1230.774708][T20421] [ 1230.774713][T20421] __dump_stack+0x1d/0x30 [ 1230.774732][T20421] dump_stack_lvl+0xe8/0x140 [ 1230.774748][T20421] dump_stack+0x15/0x1b [ 1230.774765][T20421] should_fail_ex+0x265/0x280 [ 1230.774797][T20421] should_failslab+0x8c/0xb0 [ 1230.774823][T20421] kmem_cache_alloc_noprof+0x50/0x480 [ 1230.774848][T20421] ? vm_area_dup+0x33/0x2c0 [ 1230.774872][T20421] vm_area_dup+0x33/0x2c0 [ 1230.774894][T20421] __split_vma+0xe9/0x650 [ 1230.774918][T20421] ? mas_find+0x5d5/0x700 [ 1230.774940][T20421] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 1230.774966][T20421] mmap_region+0x52b/0x1620 [ 1230.774985][T20421] ? __rcu_read_unlock+0x4f/0x70 [ 1230.775005][T20421] ? mntput_no_expire+0x6f/0x440 [ 1230.775039][T20421] do_mmap+0x9b3/0xbe0 [ 1230.775060][T20421] vm_mmap_pgoff+0x17a/0x2e0 [ 1230.775096][T20421] ksys_mmap_pgoff+0xc2/0x310 [ 1230.775110][T20421] ? __x64_sys_mmap+0x49/0x70 [ 1230.775129][T20421] x64_sys_call+0x14a3/0x3000 [ 1230.775146][T20421] do_syscall_64+0xd2/0x200 [ 1230.775163][T20421] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1230.775189][T20421] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1230.775220][T20421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.775241][T20421] RIP: 0033:0x7f790d0df6c9 [ 1230.775253][T20421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1230.775267][T20421] RSP: 002b:00007f790bb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1230.775282][T20421] RAX: ffffffffffffffda RBX: 00007f790d335fa0 RCX: 00007f790d0df6c9 [ 1230.775292][T20421] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000 [ 1230.775302][T20421] RBP: 00007f790bb47090 R08: ffffffffffffffff R09: 0000000000000000 [ 1230.775313][T20421] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1230.775326][T20421] R13: 00007f790d336038 R14: 00007f790d335fa0 R15: 00007ffde53f4d58 [ 1230.775344][T20421] [ 1231.040434][T20432] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16106'. [ 1231.101105][T20434] lo speed is unknown, defaulting to 1000 [ 1231.111193][T20438] SET target dimension over the limit! [ 1231.171706][T20444] rdma_rxe: rxe_newlink: failed to add lo [ 1231.260200][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16112'. [ 1231.394510][T20453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.16113'. [ 1231.502509][T20453] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.541247][T20461] syzkaller0: entered promiscuous mode [ 1231.546751][T20461] syzkaller0: entered allmulticast mode [ 1231.558226][T20453] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.624272][T20453] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.656842][T20464] loop6: detected capacity change from 0 to 1024 [ 1231.663705][T20464] EXT4-fs: Ignoring removed orlov option [ 1231.684658][T20464] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1231.718003][T20464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1231.733512][T20464] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #12: block 7: comm syz.6.16117: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1231.760865][T20453] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.832903][ T58] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.846109][ T58] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.867407][ T58] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.886284][ T58] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.924535][T20469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16118'. [ 1232.334377][T20508] netlink: 'syz.4.16136': attribute type 10 has an invalid length. [ 1232.348238][T20508] bond0: (slave dummy0): Releasing backup interface [ 1232.357450][T20508] team0: Port device dummy0 added [ 1232.364975][T20508] netlink: 'syz.4.16136': attribute type 10 has an invalid length. [ 1232.375671][T20508] team0: Port device dummy0 removed [ 1232.386763][T20508] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1232.400017][T20508] loop4: detected capacity change from 0 to 1024 [ 1232.415090][T20508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.437293][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.491929][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.574056][T20527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.583103][T20527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.769758][T20537] netlink: 'syz.4.16148': attribute type 10 has an invalid length. [ 1232.783228][T20537] bond0: (slave dummy0): Releasing backup interface [ 1232.791919][T20537] team0: Port device dummy0 added [ 1232.798375][T20537] netlink: 'syz.4.16148': attribute type 10 has an invalid length. [ 1232.812418][T20537] team0: Port device dummy0 removed [ 1232.822856][T20537] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1232.838937][T20537] loop4: detected capacity change from 0 to 1024 [ 1232.855501][T20537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.876695][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.941212][T20545] loop5: detected capacity change from 0 to 1024 [ 1232.955941][T20545] EXT4-fs: Ignoring removed orlov option [ 1232.975879][T20545] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1232.995588][T20545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1233.015811][T20545] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.16151: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1233.018493][T20558] ip6tnl1: entered promiscuous mode [ 1233.090865][T20565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=20565 comm=syz.4.16159 [ 1233.108441][T20567] netlink: 'syz.3.16160': attribute type 10 has an invalid length. [ 1233.129509][T20567] bond0: (slave dummy0): Releasing backup interface [ 1233.138742][T20567] team0: Port device dummy0 added [ 1233.148261][T20567] netlink: 'syz.3.16160': attribute type 10 has an invalid length. [ 1233.165627][T20567] team0: Port device dummy0 removed [ 1233.179571][T20567] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1233.287335][T20590] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=20590 comm=syz.6.16171 [ 1233.319124][T20003] kernel read not supported for file task/624/net/icmp (pid: 20003 comm: kworker/1:0) [ 1233.379271][T20605] FAULT_INJECTION: forcing a failure. [ 1233.379271][T20605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.392526][T20605] CPU: 1 UID: 0 PID: 20605 Comm: syz.4.16178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1233.392559][T20605] Tainted: [W]=WARN [ 1233.392565][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1233.392578][T20605] Call Trace: [ 1233.392585][T20605] [ 1233.392591][T20605] __dump_stack+0x1d/0x30 [ 1233.392614][T20605] dump_stack_lvl+0xe8/0x140 [ 1233.392692][T20605] dump_stack+0x15/0x1b [ 1233.392709][T20605] should_fail_ex+0x265/0x280 [ 1233.392742][T20605] should_fail+0xb/0x20 [ 1233.392756][T20605] should_fail_usercopy+0x1a/0x20 [ 1233.392795][T20605] _copy_to_user+0x20/0xa0 [ 1233.392821][T20605] simple_read_from_buffer+0xb5/0x130 [ 1233.392884][T20605] proc_fail_nth_read+0x10e/0x150 [ 1233.392913][T20605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1233.392968][T20605] vfs_read+0x1a8/0x770 [ 1233.392989][T20605] ? __rcu_read_unlock+0x4f/0x70 [ 1233.393032][T20605] ? __fget_files+0x184/0x1c0 [ 1233.393057][T20605] ? do_arch_prctl_64+0x1c2/0x420 [ 1233.393121][T20605] ksys_read+0xda/0x1a0 [ 1233.393145][T20605] __x64_sys_read+0x40/0x50 [ 1233.393192][T20605] x64_sys_call+0x27c0/0x3000 [ 1233.393214][T20605] do_syscall_64+0xd2/0x200 [ 1233.393236][T20605] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1233.393334][T20605] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1233.393416][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.393458][T20605] RIP: 0033:0x7f790d0de0dc [ 1233.393473][T20605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1233.393491][T20605] RSP: 002b:00007f790bb47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1233.393510][T20605] RAX: ffffffffffffffda RBX: 00007f790d335fa0 RCX: 00007f790d0de0dc [ 1233.393524][T20605] RDX: 000000000000000f RSI: 00007f790bb470a0 RDI: 0000000000000003 [ 1233.393537][T20605] RBP: 00007f790bb47090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.393567][T20605] R10: 0000000000005001 R11: 0000000000000246 R12: 0000000000000001 [ 1233.393578][T20605] R13: 00007f790d336038 R14: 00007f790d335fa0 R15: 00007ffde53f4d58 [ 1233.393593][T20605] [ 1233.622922][T20613] 0{X功: renamed from 31{X功 (while UP) [ 1233.630770][T20613] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1233.648526][T20613] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20613 comm=syz.4.16181 [ 1233.661252][T20613] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20613 comm=syz.4.16181 [ 1233.676860][T20613] loop4: detected capacity change from 0 to 512 [ 1233.693998][T20613] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1233.709451][T20613] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.16181: bg 0: block 104: invalid block bitmap [ 1233.725718][T20613] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1233.735059][T20613] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.16181: invalid indirect mapped block 1 (level 1) [ 1233.748755][T20613] EXT4-fs (loop4): 1 truncate cleaned up [ 1233.754826][T20613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.775189][T20629] FAULT_INJECTION: forcing a failure. [ 1233.775189][T20629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.788296][T20629] CPU: 1 UID: 0 PID: 20629 Comm: syz.3.16188 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1233.788322][T20629] Tainted: [W]=WARN [ 1233.788329][T20629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1233.788340][T20629] Call Trace: [ 1233.788346][T20629] [ 1233.788353][T20629] __dump_stack+0x1d/0x30 [ 1233.788374][T20629] dump_stack_lvl+0xe8/0x140 [ 1233.788457][T20629] dump_stack+0x15/0x1b [ 1233.788474][T20629] should_fail_ex+0x265/0x280 [ 1233.788507][T20629] should_fail+0xb/0x20 [ 1233.788600][T20629] should_fail_usercopy+0x1a/0x20 [ 1233.788621][T20629] _copy_from_user+0x1c/0xb0 [ 1233.788720][T20629] do_seccomp+0x118/0xa40 [ 1233.788747][T20629] prctl_set_seccomp+0x4c/0x70 [ 1233.788768][T20629] __se_sys_prctl+0x24e/0x12e0 [ 1233.788910][T20629] __x64_sys_prctl+0x67/0x80 [ 1233.788957][T20629] x64_sys_call+0x20cf/0x3000 [ 1233.788975][T20629] do_syscall_64+0xd2/0x200 [ 1233.789108][T20629] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1233.789244][T20629] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1233.789272][T20629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.789304][T20629] RIP: 0033:0x7fa3d8c2f6c9 [ 1233.789319][T20629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.789338][T20629] RSP: 002b:00007fa3d768f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1233.789397][T20629] RAX: ffffffffffffffda RBX: 00007fa3d8e85fa0 RCX: 00007fa3d8c2f6c9 [ 1233.789407][T20629] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 1233.789419][T20629] RBP: 00007fa3d768f090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.789429][T20629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.789443][T20629] R13: 00007fa3d8e86038 R14: 00007fa3d8e85fa0 R15: 00007ffed50f7908 [ 1233.789463][T20629] [ 1233.821141][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.829164][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 1234.003020][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.018487][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1234.033763][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/648.tmp-b7:5' failed: Read-only file system [ 1234.043514][T14669] udevd[14669]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1234.051709][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/648.tmp-b7:5' failed: Read-only file system [ 1234.071014][T14669] udevd[14669]: symlink '../../loop4' '/dev/disk/by-diskseq/649.tmp-b7:4' failed: Read-only file system [ 1234.090922][T14669] udevd[14669]: symlink '../../loop4' '/dev/disk/by-diskseq/649.tmp-b7:4' failed: Read-only file system [ 1234.092236][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/650.tmp-b7:5' failed: Read-only file system [ 1234.102077][ T29] kauditd_printk_skb: 679 callbacks suppressed [ 1234.102089][ T29] audit: type=1400 audit(1748.527:83290): avc: denied { setopt } for pid=20644 comm="syz.5.16194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1234.138818][ T29] audit: type=1400 audit(1748.527:83291): avc: denied { ioctl } for pid=20644 comm="syz.5.16194" path="socket:[161417]" dev="sockfs" ino=161417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1234.157014][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/651.tmp-b7:4' failed: Read-only file system [ 1234.163730][ T29] audit: type=1400 audit(1748.527:83292): avc: denied { write } for pid=20644 comm="syz.5.16194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1234.212639][ T29] audit: type=1400 audit(1748.647:83293): avc: denied { write } for pid=20644 comm="syz.5.16194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1234.232194][ T29] audit: type=1400 audit(1748.647:83294): avc: denied { bpf } for pid=20644 comm="syz.5.16194" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1234.268138][ T29] audit: type=1400 audit(1748.707:83295): avc: denied { recv } for pid=20642 comm="syz.4.16195" saddr=10.128.0.163 src=30036 daddr=10.128.0.237 dest=57950 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1234.300370][T20651] __nla_validate_parse: 14 callbacks suppressed [ 1234.300382][T20651] netlink: 44 bytes leftover after parsing attributes in process `syz.5.16196'. [ 1234.318449][ T29] audit: type=1400 audit(1748.737:83296): avc: denied { read write } for pid=14320 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1234.322788][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/650.tmp-b7:5' failed: Read-only file system [ 1234.342270][ T29] audit: type=1400 audit(1748.737:83297): avc: denied { open } for pid=14320 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1234.342344][ T29] audit: type=1400 audit(1748.737:83298): avc: denied { ioctl } for pid=14320 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1234.365444][ T29] audit: type=1400 audit(1748.797:83299): avc: denied { create } for pid=20652 comm="syz.5.16197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1234.609000][T20668] netlink: 5 bytes leftover after parsing attributes in process `syz.5.16202'. [ 1234.618222][T20668] 1{X功: renamed from 30{X功 (while UP) [ 1234.628117][T20668] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1234.645296][T20668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20668 comm=syz.5.16202 [ 1234.657999][T20668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20668 comm=syz.5.16202 [ 1234.680814][T20674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16204'. [ 1234.680916][T20672] loop4: detected capacity change from 0 to 1024 [ 1234.700737][T20675] loop5: detected capacity change from 0 to 512 [ 1234.707825][T20675] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1234.719235][T20672] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1234.729457][T20675] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.16202: bg 0: block 104: invalid block bitmap [ 1234.751109][T20675] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1234.762110][T20675] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.16202: invalid indirect mapped block 1 (level 1) [ 1234.778304][T20680] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16207'. [ 1234.795678][T20672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.808951][T20675] EXT4-fs (loop5): 1 truncate cleaned up [ 1234.818237][T20675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.848601][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16209'. [ 1234.853247][T20672] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.16205: missing EA_INODE flag [ 1234.866607][T20688] netlink: 5 bytes leftover after parsing attributes in process `syz.6.16210'. [ 1234.872071][T20672] EXT4-fs (loop4): Remounting filesystem read-only [ 1234.881330][T20688] 0{X功: renamed from 31{X功 (while UP) [ 1234.893437][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.910174][T20688] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1234.952788][T20688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20688 comm=syz.6.16210 [ 1234.965611][T20688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20688 comm=syz.6.16210 [ 1234.982734][T20688] loop6: detected capacity change from 0 to 512 [ 1234.993185][T20688] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1235.022158][T20688] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.16210: bg 0: block 104: invalid block bitmap [ 1235.036504][T20688] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1235.047326][T20688] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16210: invalid indirect mapped block 1 (level 1) [ 1235.061147][T20688] EXT4-fs (loop6): 1 truncate cleaned up [ 1235.067199][T20688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1235.091689][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.554207][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.600040][T20718] netlink: 'syz.4.16221': attribute type 10 has an invalid length. [ 1235.616421][T20719] netlink: 5 bytes leftover after parsing attributes in process `syz.6.16222'. [ 1235.629975][T20719] 1{X功: renamed from 30{X功 (while UP) [ 1235.642853][T20719] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1235.663768][T20719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20719 comm=syz.6.16222 [ 1235.676543][T20719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20719 comm=syz.6.16222 [ 1235.698177][T20719] loop6: detected capacity change from 0 to 512 [ 1235.705824][T20719] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1235.721661][T20719] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.16222: bg 0: block 104: invalid block bitmap [ 1235.734954][T20719] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1235.743825][T20719] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16222: invalid indirect mapped block 1 (level 1) [ 1235.757458][T20719] EXT4-fs (loop6): 1 truncate cleaned up [ 1235.763523][T20719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1235.801719][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.921703][T20731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16227'. [ 1236.026577][T20747] netlink: 232 bytes leftover after parsing attributes in process `syz.6.16234'. [ 1236.094317][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16228'. [ 1236.602031][T20749] Cannot find add_set index 0 as target [ 1236.680283][T20769] tipc: Enabled bearer , priority 10 [ 1236.880042][T20784] netlink: 'syz.5.16245': attribute type 10 has an invalid length. [ 1236.924063][T20784] bond0: (slave dummy0): Releasing backup interface [ 1236.933611][T20779] netlink: 'syz.5.16245': attribute type 10 has an invalid length. [ 1236.953549][T20784] team0: Port device dummy0 added [ 1237.056442][T20784] loop5: detected capacity change from 0 to 1024 [ 1237.189723][T20784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1237.400832][T20779] team0: Port device dummy0 removed [ 1237.414266][T20779] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1237.474256][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.527257][T20817] rdma_rxe: rxe_newlink: failed to add lo [ 1237.567916][T20825] netlink: 'syz.5.16260': attribute type 10 has an invalid length. [ 1237.794129][ T4785] tipc: Node number set to 2754624947 [ 1237.867063][T20837] 1{X功: renamed from 30{X功 (while UP) [ 1237.874699][T20837] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1238.047152][T20848] tipc: Started in network mode [ 1238.052072][T20848] tipc: Node identity , cluster identity 4711 [ 1238.058196][T20848] tipc: Failed to obtain node identity [ 1238.063657][T20848] tipc: Enabling of bearer rejected, failed to enable media [ 1238.433095][T20853] Cannot find add_set index 0 as target [ 1239.013861][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/661.tmp-b7:5' failed: Read-only file system [ 1239.162249][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 1239.162346][ T29] audit: type=1400 audit(1753.597:83745): avc: denied { write } for pid=20879 comm="syz.5.16280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1239.190009][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/661.tmp-b7:5' failed: Read-only file system [ 1239.235177][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-diskseq/659.tmp-b7:6' failed: Read-only file system [ 1239.269446][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/661.tmp-b7:5' failed: Read-only file system [ 1239.281444][ T29] audit: type=1400 audit(1753.657:83746): avc: denied { create } for pid=20879 comm="syz.5.16280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1239.300795][ T29] audit: type=1400 audit(1753.657:83747): avc: denied { setopt } for pid=20879 comm="syz.5.16280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1239.320014][ T29] audit: type=1400 audit(1753.657:83748): avc: denied { prog_load } for pid=20879 comm="syz.5.16280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1239.338989][ T29] audit: type=1400 audit(1753.657:83749): avc: denied { bpf } for pid=20879 comm="syz.5.16280" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1239.359268][ T29] audit: type=1400 audit(1753.657:83750): avc: denied { perfmon } for pid=20879 comm="syz.5.16280" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1239.379974][ T29] audit: type=1400 audit(1753.657:83751): avc: denied { prog_run } for pid=20879 comm="syz.5.16280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1239.398670][ T29] audit: type=1400 audit(1753.697:83752): avc: denied { create } for pid=20881 comm="syz.6.16281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1239.417955][ T29] audit: type=1400 audit(1753.697:83753): avc: denied { create } for pid=20883 comm="syz.5.16282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1239.437129][ T29] audit: type=1400 audit(1753.697:83754): avc: denied { setopt } for pid=20883 comm="syz.5.16282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1239.462070][T20888] rdma_rxe: rxe_newlink: failed to add lo [ 1239.522670][T20894] rdma_rxe: rxe_newlink: failed to add lo [ 1239.701577][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/659.tmp-b7:6' failed: Read-only file system [ 1239.797616][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/659.tmp-b7:6' failed: Read-only file system [ 1240.321183][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/661.tmp-b7:5' failed: Read-only file system [ 1240.706027][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/659.tmp-b7:6' failed: Read-only file system [ 1240.718823][T20917] __nla_validate_parse: 11 callbacks suppressed [ 1240.718837][T20917] netlink: 48 bytes leftover after parsing attributes in process `syz.6.16293'. [ 1240.825475][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/659.tmp-b7:6' failed: Read-only file system [ 1240.846086][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/659.tmp-b7:6' failed: Read-only file system [ 1240.979124][T20939] rdma_rxe: rxe_newlink: failed to add lo [ 1241.029728][T20911] SET target dimension over the limit! [ 1241.169244][T20955] netlink: 'syz.2.16306': attribute type 10 has an invalid length. [ 1241.203770][T20957] netlink: 'syz.2.16307': attribute type 10 has an invalid length. [ 1241.856575][T20984] netlink: 5 bytes leftover after parsing attributes in process `syz.4.16317'. [ 1241.865786][T20984] 1{X功: renamed from 30{X功 (while UP) [ 1241.873648][T20984] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1241.891726][T20984] selinux_netlink_send: 5 callbacks suppressed [ 1241.891739][T20984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20984 comm=syz.4.16317 [ 1241.910577][T20984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20984 comm=syz.4.16317 [ 1241.926627][T20984] loop4: detected capacity change from 0 to 512 [ 1241.933549][T20984] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1241.944201][T20984] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.16317: bg 0: block 104: invalid block bitmap [ 1241.968788][T20984] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1241.978111][T20984] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.16317: invalid indirect mapped block 1 (level 1) [ 1241.992013][T20984] EXT4-fs (loop4): 1 truncate cleaned up [ 1241.999206][T20984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.045124][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.075725][T20989] netlink: 'syz.4.16318': attribute type 10 has an invalid length. [ 1242.106855][T20991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.117199][T20991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.353414][T21002] loop6: detected capacity change from 0 to 512 [ 1242.365248][T21002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1242.411102][T21006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.421889][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.490286][T21010] loop6: detected capacity change from 0 to 1024 [ 1242.502008][T21010] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1242.517492][T21006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.544974][T21010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.576615][T21006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.625069][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.643778][T21006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.664711][T21020] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16329'. [ 1242.673756][T21020] bridge: RTM_NEWNEIGH with invalid ether address [ 1242.715178][ T7811] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.744897][ T7811] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.781044][ T7811] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.800563][ T7811] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.146310][T21039] Cannot find add_set index 0 as target [ 1243.220316][T21049] loop6: detected capacity change from 0 to 1024 [ 1243.229774][T21049] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1243.245175][T21049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.303222][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.423176][T21061] rdma_rxe: rxe_newlink: failed to add lo [ 1243.809931][T21073] netlink: 'syz.2.16348': attribute type 10 has an invalid length. [ 1243.843513][T21075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16349'. [ 1243.859481][T21077] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16350'. [ 1244.137617][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/663.tmp-b7:4' failed: Read-only file system [ 1244.194100][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 1244.194114][ T29] audit: type=1400 audit(1758.637:84172): avc: denied { create } for pid=21094 comm="syz.4.16357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1244.230482][ T29] audit: type=1400 audit(1758.637:84173): avc: denied { connect } for pid=21094 comm="syz.4.16357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1244.291520][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16357'. [ 1244.296638][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/661.tmp-b7:5' failed: Read-only file system [ 1244.300545][T21097] netlink: 348 bytes leftover after parsing attributes in process `syz.4.16357'. [ 1244.320775][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16357'. [ 1244.329797][T21097] netlink: 348 bytes leftover after parsing attributes in process `syz.4.16357'. [ 1244.347481][ T29] audit: type=1400 audit(1758.787:84174): avc: denied { create } for pid=21094 comm="syz.4.16357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.369814][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16357'. [ 1244.399659][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/661.tmp-b7:5' failed: Read-only file system [ 1244.403941][ T29] audit: type=1400 audit(1758.827:84175): avc: denied { connect } for pid=21094 comm="syz.4.16357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.443553][T21108] loop6: detected capacity change from 0 to 512 [ 1244.468527][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-diskseq/669.tmp-b7:6' failed: Read-only file system [ 1244.480599][T21108] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1244.492952][T21112] rdma_rxe: rxe_newlink: failed to add lo [ 1244.496743][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1244.513953][T21108] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1244.549258][T21108] EXT4-fs (loop6): mount failed [ 1244.560171][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/670.tmp-b7:6' failed: Read-only file system [ 1244.660948][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1244.705522][T30050] udevd[30050]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1244.723973][ T29] audit: type=1400 audit(1759.037:84176): avc: denied { write } for pid=21107 comm="syz.6.16362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1244.743830][ T29] audit: type=1400 audit(1759.037:84177): avc: denied { nlmsg_write } for pid=21107 comm="syz.6.16362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1244.772097][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/670.tmp-b7:6' failed: Read-only file system [ 1244.791445][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/670.tmp-b7:6' failed: Read-only file system [ 1244.814389][ T29] audit: type=1400 audit(1759.257:84178): avc: denied { setopt } for pid=21120 comm="syz.3.16365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1244.849038][ T29] audit: type=1400 audit(1759.277:84179): avc: denied { write } for pid=21120 comm="syz.3.16365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1244.879621][ T29] audit: type=1326 audit(1759.317:84180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21122 comm="syz.3.16366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1244.926662][T21128] loop6: detected capacity change from 0 to 1024 [ 1244.940044][T21128] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1244.962858][T21128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.005204][T21128] syz_tun: refused to change device tx_queue_len [ 1245.108355][T21128] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.16368: missing EA_INODE flag [ 1245.126772][T21128] EXT4-fs (loop6): Remounting filesystem read-only [ 1245.580228][T21147] netlink: 'syz.2.16372': attribute type 10 has an invalid length. [ 1245.797430][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.513796][T21185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21185 comm=syz.5.16390 [ 1246.526721][T21185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21185 comm=syz.5.16390 [ 1246.542486][T21185] loop5: detected capacity change from 0 to 512 [ 1246.553195][T21185] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1246.564350][T21185] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.16390: bg 0: block 104: invalid block bitmap [ 1246.577076][T21185] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1246.585994][T21185] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.16390: invalid indirect mapped block 1 (level 1) [ 1246.590352][T21190] netlink: 'syz.2.16391': attribute type 10 has an invalid length. [ 1246.600016][T21185] EXT4-fs (loop5): 1 truncate cleaned up [ 1246.613247][T21185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.640395][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.746018][T21205] loop5: detected capacity change from 0 to 1024 [ 1246.754467][T21205] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1246.774810][T21205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.781442][T21208] rdma_rxe: rxe_newlink: failed to add lo [ 1246.846302][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.342644][T21228] netlink: 'syz.3.16403': attribute type 10 has an invalid length. [ 1247.737549][T21243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1248.124993][T21247] loop5: detected capacity change from 0 to 1024 [ 1248.132002][T21247] EXT4-fs: test_dummy_encryption option not supported [ 1248.193767][T21247] loop5: detected capacity change from 0 to 2048 [ 1248.201605][T21255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21255 comm=syz.6.16412 [ 1248.214388][T21255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21255 comm=syz.6.16412 [ 1248.231214][T21255] loop6: detected capacity change from 0 to 512 [ 1248.240940][T21255] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1248.257381][T21247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.279805][T21255] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.16412: bg 0: block 104: invalid block bitmap [ 1248.285163][T21247] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1248.306664][T21247] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1248.319025][T21247] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1248.319025][T21247] [ 1248.328924][T21247] EXT4-fs (loop5): Total free blocks count 0 [ 1248.329693][T21255] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1248.335261][T21247] EXT4-fs (loop5): Free/Dirty block details [ 1248.344907][T21265] loop4: detected capacity change from 0 to 1024 [ 1248.349774][T21247] EXT4-fs (loop5): free_blocks=4096 [ 1248.361165][T21247] EXT4-fs (loop5): dirty_blocks=32 [ 1248.366321][T21247] EXT4-fs (loop5): Block reservation details [ 1248.368791][T21255] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16412: invalid indirect mapped block 1 (level 1) [ 1248.372283][T21247] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 1248.392971][T21265] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1248.439965][T21255] EXT4-fs (loop6): 1 truncate cleaned up [ 1248.453897][T21265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.466765][ T7811] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 1248.467455][T21255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.547203][T21276] rdma_rxe: rxe_newlink: failed to add lo [ 1248.581964][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.598594][T21281] rdma_rxe: rxe_newlink: failed to add lo [ 1248.606784][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.700209][T21267] vlan2: entered allmulticast mode [ 1248.705390][T21267] bridge_slave_0: entered allmulticast mode [ 1248.822308][T21291] __nla_validate_parse: 5 callbacks suppressed [ 1248.822323][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16421'. [ 1248.846794][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16421'. [ 1248.898592][T21297] loop4: detected capacity change from 0 to 1024 [ 1248.905373][T21297] EXT4-fs: test_dummy_encryption option not supported [ 1248.933617][T21297] loop4: detected capacity change from 0 to 2048 [ 1248.956367][T21297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.981495][T21297] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1248.996387][T21297] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1249.008592][T21297] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1249.008592][T21297] [ 1249.018307][T21297] EXT4-fs (loop4): Total free blocks count 0 [ 1249.024288][T21297] EXT4-fs (loop4): Free/Dirty block details [ 1249.030166][T21297] EXT4-fs (loop4): free_blocks=4096 [ 1249.035433][T21297] EXT4-fs (loop4): dirty_blocks=32 [ 1249.040536][T21297] EXT4-fs (loop4): Block reservation details [ 1249.046535][T21297] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1249.065739][ T7811] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 1249.163546][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/684.tmp-b7:6' failed: Read-only file system [ 1249.175995][T21310] FAULT_INJECTION: forcing a failure. [ 1249.175995][T21310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.189046][T21310] CPU: 1 UID: 0 PID: 21310 Comm: syz.6.16429 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1249.189072][T21310] Tainted: [W]=WARN [ 1249.189134][T21310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1249.189141][T21310] Call Trace: [ 1249.189145][T21310] [ 1249.189149][T21310] __dump_stack+0x1d/0x30 [ 1249.189163][T21310] dump_stack_lvl+0xe8/0x140 [ 1249.189214][T21310] dump_stack+0x15/0x1b [ 1249.189224][T21310] should_fail_ex+0x265/0x280 [ 1249.189241][T21310] should_fail+0xb/0x20 [ 1249.189304][T21310] should_fail_usercopy+0x1a/0x20 [ 1249.189316][T21310] _copy_from_user+0x1c/0xb0 [ 1249.189349][T21310] __sys_connect+0xd0/0x2b0 [ 1249.189367][T21310] __x64_sys_connect+0x3f/0x50 [ 1249.189382][T21310] x64_sys_call+0x2c0c/0x3000 [ 1249.189394][T21310] do_syscall_64+0xd2/0x200 [ 1249.189456][T21310] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1249.189471][T21310] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1249.189488][T21310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.189547][T21310] RIP: 0033:0x7f3f9f1df6c9 [ 1249.189556][T21310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.189629][T21310] RSP: 002b:00007f3f9dc47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1249.189642][T21310] RAX: ffffffffffffffda RBX: 00007f3f9f435fa0 RCX: 00007f3f9f1df6c9 [ 1249.189649][T21310] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000006 [ 1249.189656][T21310] RBP: 00007f3f9dc47090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.189663][T21310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.189669][T21310] R13: 00007f3f9f436038 R14: 00007f3f9f435fa0 R15: 00007ffc75d5a0b8 [ 1249.189724][T21310] [ 1249.393161][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/683.tmp-b7:5' failed: Read-only file system [ 1249.409644][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-diskseq/684.tmp-b7:6' failed: Read-only file system [ 1249.422152][ T29] kauditd_printk_skb: 710 callbacks suppressed [ 1249.422166][ T29] audit: type=1400 audit(1763.867:84891): avc: denied { setopt } for pid=21311 comm="syz.5.16430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1249.474955][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/684.tmp-b7:6' failed: Read-only file system [ 1249.490311][ T29] audit: type=1326 audit(1763.897:84892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.500500][T14669] udevd[14669]: symlink '../../loop5' '/dev/disk/by-diskseq/683.tmp-b7:5' failed: Read-only file system [ 1249.513603][ T29] audit: type=1326 audit(1763.897:84893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.547718][ T29] audit: type=1326 audit(1763.897:84894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.570885][ T29] audit: type=1326 audit(1763.907:84895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.594156][ T29] audit: type=1326 audit(1763.907:84896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.617358][ T29] audit: type=1326 audit(1763.907:84897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.640581][ T29] audit: type=1326 audit(1763.907:84898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.663744][ T29] audit: type=1326 audit(1763.907:84899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.667351][T30050] udevd[30050]: symlink '../../loop6' '/dev/disk/by-diskseq/684.tmp-b7:6' failed: Read-only file system [ 1249.687035][ T29] audit: type=1326 audit(1763.907:84900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.16433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3d8c2f6c9 code=0x7ffc0000 [ 1249.741091][T14669] udevd[14669]: symlink '../../loop5' '/dev/disk/by-diskseq/683.tmp-b7:5' failed: Read-only file system [ 1249.772471][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/683.tmp-b7:5' failed: Read-only file system [ 1249.790902][T21335] rdma_rxe: rxe_newlink: failed to add lo [ 1249.989669][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/689.tmp-b7:4' failed: Read-only file system [ 1250.006049][T21355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16445'. [ 1250.069234][T21362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.128143][T21362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.187360][T21362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.271298][T21362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.339181][ T7811] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.361123][ T7811] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.383946][ T7811] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.400217][ T7811] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.442101][T30050] udevd[30050]: symlink '../../loop4' '/dev/disk/by-diskseq/689.tmp-b7:4' failed: Read-only file system [ 1250.458574][T21373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16451'. [ 1250.550181][T21382] ip6gretap0: entered promiscuous mode [ 1250.554702][T21384] FAULT_INJECTION: forcing a failure. [ 1250.554702][T21384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.566084][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16456'. [ 1250.568716][T21384] CPU: 0 UID: 0 PID: 21384 Comm: syz.2.16457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1250.568811][T21384] Tainted: [W]=WARN [ 1250.568897][T21384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1250.568909][T21384] Call Trace: [ 1250.568915][T21384] [ 1250.568923][T21384] __dump_stack+0x1d/0x30 [ 1250.568998][T21384] dump_stack_lvl+0xe8/0x140 [ 1250.569018][T21384] dump_stack+0x15/0x1b [ 1250.569079][T21384] should_fail_ex+0x265/0x280 [ 1250.569111][T21384] should_fail+0xb/0x20 [ 1250.569127][T21384] should_fail_usercopy+0x1a/0x20 [ 1250.569148][T21384] _copy_from_user+0x1c/0xb0 [ 1250.569170][T21384] ___sys_sendmsg+0xc1/0x1d0 [ 1250.569241][T21384] __sys_sendmmsg+0x178/0x300 [ 1250.569270][T21384] __x64_sys_sendmmsg+0x57/0x70 [ 1250.569302][T21384] x64_sys_call+0x1c4a/0x3000 [ 1250.569358][T21384] do_syscall_64+0xd2/0x200 [ 1250.569402][T21384] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1250.569429][T21384] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1250.569540][T21384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.569610][T21384] RIP: 0033:0x7f75becbf6c9 [ 1250.569624][T21384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.569642][T21384] RSP: 002b:00007f75bd727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1250.569699][T21384] RAX: ffffffffffffffda RBX: 00007f75bef15fa0 RCX: 00007f75becbf6c9 [ 1250.569712][T21384] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1250.569724][T21384] RBP: 00007f75bd727090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.569736][T21384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.569748][T21384] R13: 00007f75bef16038 R14: 00007f75bef15fa0 R15: 00007ffd97e766d8 [ 1250.569766][T21384] [ 1250.813627][T21399] FAULT_INJECTION: forcing a failure. [ 1250.813627][T21399] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.826423][T21399] CPU: 0 UID: 0 PID: 21399 Comm: syz.2.16463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1250.826454][T21399] Tainted: [W]=WARN [ 1250.826466][T21399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1250.826553][T21399] Call Trace: [ 1250.826559][T21399] [ 1250.826566][T21399] __dump_stack+0x1d/0x30 [ 1250.826652][T21399] dump_stack_lvl+0xe8/0x140 [ 1250.826673][T21399] dump_stack+0x15/0x1b [ 1250.826691][T21399] should_fail_ex+0x265/0x280 [ 1250.826725][T21399] should_failslab+0x8c/0xb0 [ 1250.826809][T21399] kmem_cache_alloc_noprof+0x50/0x480 [ 1250.826883][T21399] ? audit_log_start+0x342/0x720 [ 1250.826906][T21399] audit_log_start+0x342/0x720 [ 1250.826926][T21399] ? kstrtouint+0x76/0xc0 [ 1250.826955][T21399] audit_seccomp+0x48/0x100 [ 1250.826983][T21399] ? __seccomp_filter+0x82d/0x1250 [ 1250.827005][T21399] __seccomp_filter+0x83e/0x1250 [ 1250.827089][T21399] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1250.827118][T21399] ? vfs_write+0x7e8/0x960 [ 1250.827194][T21399] __secure_computing+0x82/0x150 [ 1250.827220][T21399] syscall_trace_enter+0xcf/0x1e0 [ 1250.827245][T21399] do_syscall_64+0xac/0x200 [ 1250.827263][T21399] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1250.827343][T21399] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1250.827374][T21399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.827471][T21399] RIP: 0033:0x7f75becbf6c9 [ 1250.827487][T21399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.827552][T21399] RSP: 002b:00007f75bd727038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 1250.827569][T21399] RAX: ffffffffffffffda RBX: 00007f75bef15fa0 RCX: 00007f75becbf6c9 [ 1250.827583][T21399] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 1250.827596][T21399] RBP: 00007f75bd727090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.827609][T21399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.827661][T21399] R13: 00007f75bef16038 R14: 00007f75bef15fa0 R15: 00007ffd97e766d8 [ 1250.827692][T21399] [ 1251.044464][T21401] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16464'. [ 1251.067692][T21403] rdma_rxe: rxe_newlink: failed to add lo [ 1251.067819][T21399] lo speed is unknown, defaulting to 1000 [ 1251.112352][T21407] loop5: detected capacity change from 0 to 1024 [ 1251.135267][T21407] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1251.156723][T21407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1251.201311][T21417] netlink: 'syz.2.16467': attribute type 10 has an invalid length. [ 1251.263426][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.334144][T21431] rdma_rxe: rxe_newlink: failed to add lo [ 1251.356328][T21433] bridge0: entered allmulticast mode [ 1251.361825][T21433] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21433 comm=syz.5.16473 [ 1252.143351][T21443] FAULT_INJECTION: forcing a failure. [ 1252.143351][T21443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.156497][T21443] CPU: 0 UID: 0 PID: 21443 Comm: syz.2.16476 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1252.156564][T21443] Tainted: [W]=WARN [ 1252.156570][T21443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1252.156633][T21443] Call Trace: [ 1252.156639][T21443] [ 1252.156646][T21443] __dump_stack+0x1d/0x30 [ 1252.156668][T21443] dump_stack_lvl+0xe8/0x140 [ 1252.156708][T21443] dump_stack+0x15/0x1b [ 1252.156727][T21443] should_fail_ex+0x265/0x280 [ 1252.156807][T21443] should_fail+0xb/0x20 [ 1252.156820][T21443] should_fail_usercopy+0x1a/0x20 [ 1252.156840][T21443] _copy_from_user+0x1c/0xb0 [ 1252.156863][T21443] __sys_bpf+0x183/0x7c0 [ 1252.156889][T21443] __x64_sys_bpf+0x41/0x50 [ 1252.156996][T21443] x64_sys_call+0x2aee/0x3000 [ 1252.157018][T21443] do_syscall_64+0xd2/0x200 [ 1252.157036][T21443] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1252.157137][T21443] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1252.157192][T21443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.157209][T21443] RIP: 0033:0x7f75becbf6c9 [ 1252.157222][T21443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.157367][T21443] RSP: 002b:00007f75bd727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1252.157388][T21443] RAX: ffffffffffffffda RBX: 00007f75bef15fa0 RCX: 00007f75becbf6c9 [ 1252.157401][T21443] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1252.157414][T21443] RBP: 00007f75bd727090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.157427][T21443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.157440][T21443] R13: 00007f75bef16038 R14: 00007f75bef15fa0 R15: 00007ffd97e766d8 [ 1252.157460][T21443] [ 1252.499413][T21458] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16482'. [ 1252.582200][T21459] lo speed is unknown, defaulting to 1000 [ 1252.812877][T21461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16483'. [ 1252.865073][T21462] warn_alloc: 11 callbacks suppressed [ 1252.865085][T21462] syz.5.16483: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1252.885143][T21462] CPU: 0 UID: 0 PID: 21462 Comm: syz.5.16483 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1252.885181][T21462] Tainted: [W]=WARN [ 1252.885188][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1252.885202][T21462] Call Trace: [ 1252.885209][T21462] [ 1252.885218][T21462] __dump_stack+0x1d/0x30 [ 1252.885263][T21462] dump_stack_lvl+0xe8/0x140 [ 1252.885356][T21462] dump_stack+0x15/0x1b [ 1252.885454][T21462] warn_alloc+0x12b/0x1a0 [ 1252.885492][T21462] ? hash+0x1e0/0x230 [ 1252.885515][T21462] __vmalloc_node_range_noprof+0x9d/0xed0 [ 1252.885548][T21462] ? __rcu_read_unlock+0x4f/0x70 [ 1252.885613][T21462] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 1252.885641][T21462] ? __rcu_read_unlock+0x4f/0x70 [ 1252.885661][T21462] ? perf_cgroup_switch+0x10c/0x480 [ 1252.885686][T21462] ? bpf_trace_run4+0x134/0x1d0 [ 1252.885742][T21462] ? should_fail_ex+0x30/0x280 [ 1252.885770][T21462] ? xskq_create+0x36/0xe0 [ 1252.885790][T21462] vmalloc_user_noprof+0x7d/0xb0 [ 1252.885837][T21462] ? xskq_create+0x80/0xe0 [ 1252.885855][T21462] xskq_create+0x80/0xe0 [ 1252.885875][T21462] xsk_init_queue+0x95/0xf0 [ 1252.885938][T21462] xsk_setsockopt+0x3f5/0x640 [ 1252.885961][T21462] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1252.886016][T21462] __sys_setsockopt+0x184/0x200 [ 1252.886045][T21462] __x64_sys_setsockopt+0x64/0x80 [ 1252.886117][T21462] x64_sys_call+0x20ec/0x3000 [ 1252.886141][T21462] do_syscall_64+0xd2/0x200 [ 1252.886163][T21462] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1252.886219][T21462] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1252.886248][T21462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.886270][T21462] RIP: 0033:0x7f6cc314f6c9 [ 1252.886287][T21462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.886376][T21462] RSP: 002b:00007f6cc1b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1252.886396][T21462] RAX: ffffffffffffffda RBX: 00007f6cc33a6090 RCX: 00007f6cc314f6c9 [ 1252.886407][T21462] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1252.886478][T21462] RBP: 00007f6cc31d1f91 R08: 0000000000000004 R09: 0000000000000000 [ 1252.886489][T21462] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.886500][T21462] R13: 00007f6cc33a6128 R14: 00007f6cc33a6090 R15: 00007fff51624108 [ 1252.886516][T21462] [ 1252.886522][T21462] Mem-Info: [ 1253.123110][T21462] active_anon:11240 inactive_anon:6 isolated_anon:0 [ 1253.123110][T21462] active_file:14339 inactive_file:16595 isolated_file:0 [ 1253.123110][T21462] unevictable:16368 dirty:526 writeback:21 [ 1253.123110][T21462] slab_reclaimable:3860 slab_unreclaimable:19350 [ 1253.123110][T21462] mapped:33066 shmem:3117 pagetables:1803 [ 1253.123110][T21462] sec_pagetables:0 bounce:0 [ 1253.123110][T21462] kernel_misc_reclaimable:0 [ 1253.123110][T21462] free:1808258 free_pcp:33233 free_cma:0 [ 1253.139674][T21470] rdma_rxe: rxe_newlink: failed to add lo [ 1253.168776][T21462] Node 0 active_anon:45076kB inactive_anon:24kB active_file:57356kB inactive_file:66380kB unevictable:65472kB isolated(anon):0kB isolated(file):0kB mapped:132264kB dirty:2104kB writeback:84kB shmem:12468kB kernel_stack:4448kB pagetables:7212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1253.202460][T21462] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1253.232187][T21462] lowmem_reserve[]: 0 2881 7859 7859 [ 1253.237576][T21462] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 1253.268865][T21462] lowmem_reserve[]: 0 0 4978 4978 [ 1253.274031][T21462] Node 0 Normal free:4271048kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45076kB inactive_anon:24kB active_file:57356kB inactive_file:66380kB unevictable:65472kB writepending:2188kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:128884kB local_pcp:85036kB free_cma:0kB [ 1253.274142][T21462] lowmem_reserve[]: 0 0 0 0 [ 1253.274168][T21462] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1253.324937][T21462] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 1253.341091][T21462] Node 0 Normal: 1805*4kB (UM) 943*8kB (UME) 1537*16kB (UME) 1030*32kB (UME) 794*64kB (UME) 363*128kB (UME) 161*256kB (UM) 80*512kB (UM) 131*1024kB (UM) 109*2048kB (UME) 894*4096kB (UM) = 4270972kB [ 1253.360736][T21462] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1253.370024][T21462] 50404 total pagecache pages [ 1253.374693][T21462] 19 pages in swap cache [ 1253.378979][T21462] Free swap = 120840kB [ 1253.383114][T21462] Total swap = 124996kB [ 1253.387262][T21462] 2097051 pages RAM [ 1253.391038][T21462] 0 pages HighMem/MovableOnly [ 1253.395760][T21462] 81087 pages reserved [ 1253.450928][T21481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.491574][T21481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.697921][T21487] Cannot find add_set index 0 as target [ 1253.831310][T21499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16495'. [ 1254.382748][T21522] SET target dimension over the limit! [ 1254.455597][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/691.tmp-b7:5' failed: Read-only file system [ 1254.470910][T21532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16507'. [ 1254.497998][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 1254.498013][ T29] audit: type=1400 audit(1768.937:85466): avc: denied { name_bind } for pid=21533 comm="syz.2.16508" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1254.510839][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/691.tmp-b7:5' failed: Read-only file system [ 1254.542091][T21536] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16509'. [ 1254.564418][T21537] rdma_rxe: rxe_newlink: failed to add lo [ 1254.565829][ T29] audit: type=1400 audit(1768.997:85467): avc: denied { create } for pid=21533 comm="syz.2.16508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1254.580356][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/691.tmp-b7:5' failed: Read-only file system [ 1254.589356][ T29] audit: type=1400 audit(1768.997:85468): avc: denied { create } for pid=21533 comm="syz.2.16508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1254.619527][ T29] audit: type=1400 audit(1768.997:85469): avc: denied { read write } for pid=21533 comm="syz.2.16508" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1254.643465][ T29] audit: type=1400 audit(1768.997:85470): avc: denied { open } for pid=21533 comm="syz.2.16508" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1254.643493][ T29] audit: type=1400 audit(1769.007:85471): avc: denied { create } for pid=21533 comm="syz.2.16508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1254.643517][ T29] audit: type=1400 audit(1769.007:85472): avc: denied { write } for pid=21533 comm="syz.2.16508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1254.697260][T21542] loop5: detected capacity change from 0 to 1024 [ 1254.697962][T21542] EXT4-fs: test_dummy_encryption option not supported [ 1254.708503][T21542] loop5: detected capacity change from 0 to 2048 [ 1254.733731][ T29] audit: type=1400 audit(1769.047:85473): avc: denied { module_request } for pid=21533 comm="syz.2.16508" kmod="net-pf-2-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1254.733825][ T29] audit: type=1400 audit(1769.057:85474): avc: denied { ioctl } for pid=21533 comm="syz.2.16508" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1254.734093][ T29] audit: type=1326 audit(1769.127:85475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21541 comm="syz.5.16510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc314f6c9 code=0x7ffc0000 [ 1254.735579][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/692.tmp-b7:5' failed: Read-only file system [ 1254.768012][T21542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.779911][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1254.811510][T21542] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, [ 1254.858075][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/692.tmp-b7:5' failed: Read-only file system [ 1254.861390][T21542] block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1254.874561][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1254.924156][T14669] udevd[14669]: symlink '../../loop6' '/dev/disk/by-diskseq/684.tmp-b7:6' failed: Read-only file system [ 1254.935875][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.946055][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-diskseq/692.tmp-b7:5' failed: Read-only file system [ 1254.989465][T30050] udevd[30050]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1255.030749][T21561] loop6: detected capacity change from 0 to 1024 [ 1255.038812][T21561] EXT4-fs: Ignoring removed orlov option [ 1255.051650][T21561] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1255.074858][T21565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16518'. [ 1255.091272][T21561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.117678][T21569] loop5: detected capacity change from 0 to 2048 [ 1255.127633][T21561] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #12: block 7: comm syz.6.16516: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1255.157003][T21569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1255.241749][T21581] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16521'. [ 1255.271150][T21581] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16521'. [ 1255.299999][T21569] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1255.317245][T21569] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 780 with error 28 [ 1255.329642][T21569] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1255.329642][T21569] [ 1255.339396][T21569] EXT4-fs (loop5): Total free blocks count 0 [ 1255.345392][T21569] EXT4-fs (loop5): Free/Dirty block details [ 1255.351268][T21569] EXT4-fs (loop5): free_blocks=2415919104 [ 1255.357006][T21569] EXT4-fs (loop5): dirty_blocks=784 [ 1255.362194][T21569] EXT4-fs (loop5): Block reservation details [ 1255.368263][T21569] EXT4-fs (loop5): i_reserved_data_blocks=49 [ 1255.376091][T21585] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #12: comm syz.5.16519: corrupted in-inode xattr: e_value size too large [ 1255.449698][T21589] loop4: detected capacity change from 0 to 1024 [ 1255.468285][T21589] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1255.516275][T21589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1255.538839][ T58] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 1255.568778][T21589] syz_tun: refused to change device tx_queue_len [ 1255.663069][T21589] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.16524: missing EA_INODE flag [ 1255.703312][T21596] netlink: 44 bytes leftover after parsing attributes in process `syz.5.16526'. [ 1255.728387][T21589] EXT4-fs (loop4): Remounting filesystem read-only [ 1255.865249][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.956428][T21607] netlink: 44 bytes leftover after parsing attributes in process `syz.5.16530'. [ 1255.987247][T21607] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.037822][T21607] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.078219][T21607] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.130410][T21607] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.186472][ T7811] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.211563][ T7811] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.241078][ T7811] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.281267][ T7811] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.283408][T21614] netlink: 'syz.2.16533': attribute type 1 has an invalid length. [ 1256.297290][T21614] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16533'. [ 1256.326151][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.364599][T21620] rdma_rxe: rxe_newlink: failed to add lo [ 1256.371632][T21618] loop5: detected capacity change from 0 to 1024 [ 1256.408835][T21618] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1256.441724][T21618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1256.501009][T14320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.532947][T21637] netlink: 'syz.4.16541': attribute type 10 has an invalid length. [ 1256.551659][T21637] loop4: detected capacity change from 0 to 1024 [ 1256.588794][T21637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1256.593407][T21641] netlink: 'syz.6.16543': attribute type 1 has an invalid length. [ 1256.608740][T21641] netlink: 224 bytes leftover after parsing attributes in process `syz.6.16543'. [ 1256.658560][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.689674][T21651] loop4: detected capacity change from 0 to 1024 [ 1256.699405][T21651] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1256.744377][T21653] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.781455][T21651] syz_tun: refused to change device tx_queue_len [ 1256.824894][T21653] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.870156][T21651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.16546: missing EA_INODE flag [ 1256.886308][T21651] EXT4-fs (loop4): Remounting filesystem read-only [ 1256.935038][T21653] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.015573][T21653] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.016605][T21662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.036328][T21662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.107766][ T7811] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.133344][ T7811] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.150775][ T7811] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.191356][ T7811] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.361121][T21679] loop6: detected capacity change from 0 to 1024 [ 1257.378432][T21679] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1257.407705][T21679] EXT4-fs mount: 1 callbacks suppressed [ 1257.407719][T21679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1257.501389][T14618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.562310][T17185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.635408][T21690] loop4: detected capacity change from 0 to 2048 [ 1257.644628][ T3004] ================================================================== [ 1257.652712][ T3004] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 1257.659913][ T3004] [ 1257.662219][ T3004] write to 0xffff8881071f3630 of 8 bytes by task 30050 on cpu 1: [ 1257.669918][ T3004] dentry_unlink_inode+0x65/0x260 [ 1257.674927][ T3004] d_delete+0x164/0x180 [ 1257.679065][ T3004] d_delete_notify+0x32/0x100 [ 1257.683725][ T3004] vfs_unlink+0x30b/0x420 [ 1257.688040][ T3004] do_unlinkat+0x24e/0x480 [ 1257.692450][ T3004] __x64_sys_unlink+0x2e/0x40 [ 1257.697125][ T3004] x64_sys_call+0x2dcf/0x3000 [ 1257.701792][ T3004] do_syscall_64+0xd2/0x200 [ 1257.706284][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.712178][ T3004] [ 1257.714485][ T3004] read to 0xffff8881071f3630 of 8 bytes by task 3004 on cpu 0: [ 1257.722005][ T3004] step_into+0x122/0x7f0 [ 1257.726241][ T3004] walk_component+0x162/0x220 [ 1257.730907][ T3004] path_lookupat+0xfe/0x2a0 [ 1257.735417][ T3004] filename_lookup+0x147/0x340 [ 1257.740182][ T3004] do_readlinkat+0x7d/0x320 [ 1257.744668][ T3004] __x64_sys_readlink+0x47/0x60 [ 1257.749501][ T3004] x64_sys_call+0x28de/0x3000 [ 1257.754159][ T3004] do_syscall_64+0xd2/0x200 [ 1257.758648][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.764523][ T3004] [ 1257.766823][ T3004] value changed: 0xffff88810c353d88 -> 0x0000000000000000 [ 1257.773905][ T3004] [ 1257.776211][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 1257.782340][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1257.793179][ T3004] Tainted: [W]=WARN [ 1257.796960][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1257.806994][ T3004] ================================================================== [ 1257.818619][T21692] netlink: 'syz.3.16560': attribute type 1 has an invalid length. [ 1257.856584][T21690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1257.939664][T21690] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1257.954664][T21690] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1257.967150][T21690] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1257.967150][T21690] [ 1257.976794][T21690] EXT4-fs (loop4): Total free blocks count 0 [ 1257.982846][T21690] EXT4-fs (loop4): Free/Dirty block details [ 1257.988747][T21690] EXT4-fs (loop4): free_blocks=2415919104 [ 1257.994489][T21690] EXT4-fs (loop4): dirty_blocks=2080 [ 1257.999765][T21690] EXT4-fs (loop4): Block reservation details [ 1258.005768][T21690] EXT4-fs (loop4): i_reserved_data_blocks=130 [ 1258.066523][ T7110] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 28 with error 28