last executing test programs: 2.936492412s ago: executing program 1 (id=5736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, &(0x7f0000000080)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0xffffffffffffffff) 2.914737753s ago: executing program 1 (id=5739): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}}, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48050) 2.492054511s ago: executing program 1 (id=5748): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) 2.399258913s ago: executing program 1 (id=5751): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000021) fcntl$setsig(r0, 0xa, 0x11) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) 2.344813744s ago: executing program 1 (id=5755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2.269437555s ago: executing program 1 (id=5759): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}}, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48050) 1.98996942s ago: executing program 2 (id=5768): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000021) fcntl$setsig(r0, 0xa, 0x11) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}, 0x1, 0x0, 0x0, 0x48001}, 0x4040804) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0x0, 0x0) connect$pppoe(r5, &(0x7f00000003c0)={0x18, 0x0, {0x0, @local, 'batadv_slave_1\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000080)={0x4, 0x4690, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000003b08c02367030abaaa000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.837556434s ago: executing program 3 (id=5773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001640)=@generic={0x0, r0}, 0x18) 1.783464545s ago: executing program 3 (id=5774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10) syz_pidfd_open(r1, 0x0) 1.758416855s ago: executing program 3 (id=5775): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1.576799269s ago: executing program 3 (id=5777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0xffffffffffffffff) 1.550399229s ago: executing program 3 (id=5778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000001740)='./bus\x00', 0x4a) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) syz_io_uring_setup(0x110, &(0x7f00000002c0)={0x0, 0xb358, 0x0, 0x210000, 0x3e}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3056, 0xe13e, 0x1, 0x0, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003140)=[{0x1, 0x1, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)=""/251, 0xfb}], &(0x7f0000000500)=[0xfffffffffffffffd, 0x101, 0x0, 0x9681]}, {0x8, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)=""/225, 0xe1}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000001200)=""/251, 0xfb}, {&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000000640)=""/119, 0x77}, {&(0x7f0000000800)=""/135, 0x87}, {&(0x7f0000000980)=""/55, 0x37}], &(0x7f0000001300)=[0x400]}, {0x3, 0x1, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/28, 0x1c}, {&(0x7f0000001380)=""/191, 0xbf}, {&(0x7f0000001440)=""/216, 0xd8}], &(0x7f0000001580)=[0x3]}, {0x6, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/96, 0x60}, {&(0x7f0000001640)=""/35, 0x23}, {&(0x7f0000001680)=""/169, 0xa9}, {0x0}, {&(0x7f0000001780)=""/171, 0xab}, {&(0x7f0000001840)}], &(0x7f0000001900)=[0x9, 0xff, 0x8000000000000000, 0x100000001, 0x6, 0xf]}, {0x5, 0x1, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001940)=""/64, 0x40}, {&(0x7f0000001980)}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/148, 0x94}, {&(0x7f0000001ac0)=""/89, 0x59}], &(0x7f0000001bc0)=[0x8001, 0xffffffff, 0x8, 0x5, 0x8001, 0x3, 0x9]}, {0x5, 0x1, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001c00)=""/238, 0xee}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/255, 0xff}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000004440)=""/4096, 0x1000}], &(0x7f0000001e80)=[0xfffffffffffffff7, 0x4, 0x80000000]}, {0x2, 0x1, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)=""/86, 0x56}, {&(0x7f0000003000)=""/94, 0x5e}], &(0x7f00000030c0)=[0x9, 0x1ff000000000000, 0x6, 0xffffffffffffffff, 0x80, 0x8, 0x6, 0x4f3, 0x9]}], 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='sched_switch\x00', r10}, 0x18) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.160828517s ago: executing program 2 (id=5779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1.03048932s ago: executing program 2 (id=5780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) 997.87622ms ago: executing program 2 (id=5781): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603"], 0x0) 855.617903ms ago: executing program 2 (id=5785): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2422, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x4a90, 0x0, 0x0, 0x0, 0xa47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5c6, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000002240)="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", 0x225, 0x4000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 730.472676ms ago: executing program 0 (id=5789): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000008, &(0x7f0000000200)={[{@grpid}, {@grpjquota}, {@nobarrier}]}, 0x1, 0x521, &(0x7f0000000b80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b004000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 683.211966ms ago: executing program 0 (id=5790): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000021) fcntl$setsig(r0, 0xa, 0x11) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}, 0x1, 0x0, 0x0, 0x48001}, 0x4040804) shutdown(r5, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000080)={0x4, 0x4690, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000003b08c02367030abaaa000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 606.403698ms ago: executing program 3 (id=5791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) 586.302168ms ago: executing program 0 (id=5794): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028010000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100"/139], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 504.08959ms ago: executing program 0 (id=5797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x40000132) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1e) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x609e495c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) sendfile(r3, r2, 0x0, 0x7ffff088) r5 = socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = socket(0xa, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r8, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7a}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x1, 0x7800, 0x9, 0x2, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x1a, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000002988d54c5fbc454bc407b3e7", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008500000066000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xb092, 0x48, &(0x7f00000004c0)=""/72, 0x40f00, 0x44, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x6, 0x6, 0x7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x1, 0xf, 0xc}, {0x0, 0x3, 0x2, 0x4}, {0x3, 0x1, 0x9, 0x4}, {0x3, 0x2, 0x1, 0x2}, {0x0, 0x4, 0xe, 0x1}, {0x1, 0x3, 0xd, 0x8}, {0x3, 0x3, 0x9, 0x6}, {0x1, 0x5, 0x6, 0x2}, {0x0, 0x3, 0x0, 0x9}, {0x1, 0x2, 0xe, 0x9}], 0x10, 0x6}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0x7}, {0x4, 0x1}, {0x10, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x54) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@ifindex=r10, 0x1, 0x1, 0x3, &(0x7f0000000700)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000b40), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="0500000000000000", @ANYRES32=r11, @ANYBLOB="cb348661213f9adca26c3c1be2784842fbebcc170ec26cba7cb1", @ANYRES32, @ANYBLOB, @ANYRES64=r12], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1f00000002000000", @ANYRES32=r1, @ANYBLOB="9fb9a16d811a43df59d12c4545e07f9851faa4c5698812000000000a5bf8a66520c868169bdcf92bcbd1ae51b509f3a87ef41c529f4f7070093d6ba430414f1180c68fa9a80cff5291a5e1f74fe331b47714125f847d12c09d7315bffd1ed7c0887345cfb2de1935ce285383", @ANYRES32, @ANYBLOB, @ANYRES64=r12], 0x20) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 400.545202ms ago: executing program 4 (id=5800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0xffffffffffffffff) 385.934772ms ago: executing program 0 (id=5801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, 0x0, 0x3) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0xc0) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 361.520673ms ago: executing program 4 (id=5802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x40000004, 0x0) 298.452494ms ago: executing program 4 (id=5803): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) openat$snapshot(0xffffffffffffff9c, 0x0, 0x84d03, 0x0) 237.846815ms ago: executing program 0 (id=5804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = memfd_secret(0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xe8f2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000c0c0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x6000) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000440)={0x38, 0x25, 0x16, 0xe, 0xb, 0x3ff, 0x1, 0xc9}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) 148.925057ms ago: executing program 4 (id=5805): syz_open_dev$sg(0x0, 0x0, 0x9840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000f00)='./file0\x00', 0x0) 129.626047ms ago: executing program 4 (id=5806): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028010000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100"/139], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 30.375299ms ago: executing program 2 (id=5807): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000"], 0x0) 0s ago: executing program 4 (id=5808): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) kernel console output (not intermixed with test programs): ? vfs_write+0x7e8/0x960 [ 246.652593][T16071] __secure_computing+0x82/0x150 [ 246.652621][T16071] syscall_trace_enter+0xcf/0x1e0 [ 246.652657][T16071] do_syscall_64+0xac/0x200 [ 246.652713][T16071] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 246.652740][T16071] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 246.652784][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.652866][T16071] RIP: 0033:0x7f89233beec9 [ 246.652888][T16071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.652910][T16071] RSP: 002b:00007f8921e27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000da [ 246.652930][T16071] RAX: ffffffffffffffda RBX: 00007f8923615fa0 RCX: 00007f89233beec9 [ 246.652943][T16071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.652966][T16071] RBP: 00007f8921e27090 R08: 0000000000000000 R09: 0000000000000000 [ 246.653029][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.653113][T16071] R13: 00007f8923616038 R14: 00007f8923615fa0 R15: 00007fff766c68a8 [ 246.653170][T16071] [ 247.502692][T16102] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.568339][T16102] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.635794][T16102] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.701700][T16102] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.841355][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.854227][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.870993][ T2835] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.892132][ T2835] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.079114][T16119] netlink: 'syz.4.4575': attribute type 10 has an invalid length. [ 248.087138][T16119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4575'. [ 248.482610][T16140] FAULT_INJECTION: forcing a failure. [ 248.482610][T16140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.495874][T16140] CPU: 0 UID: 0 PID: 16140 Comm: syz.1.4583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.495926][T16140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.495944][T16140] Call Trace: [ 248.495952][T16140] [ 248.495998][T16140] __dump_stack+0x1d/0x30 [ 248.496020][T16140] dump_stack_lvl+0xe8/0x140 [ 248.496039][T16140] dump_stack+0x15/0x1b [ 248.496055][T16140] should_fail_ex+0x265/0x280 [ 248.496148][T16140] should_fail+0xb/0x20 [ 248.496177][T16140] should_fail_usercopy+0x1a/0x20 [ 248.496211][T16140] _copy_to_user+0x20/0xa0 [ 248.496341][T16140] simple_read_from_buffer+0xb5/0x130 [ 248.496372][T16140] proc_fail_nth_read+0x10e/0x150 [ 248.496411][T16140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.496461][T16140] vfs_read+0x1a5/0x770 [ 248.496489][T16140] ? __rcu_read_unlock+0x4f/0x70 [ 248.496518][T16140] ? __fget_files+0x184/0x1c0 [ 248.496607][T16140] ksys_read+0xda/0x1a0 [ 248.496639][T16140] __x64_sys_read+0x40/0x50 [ 248.496670][T16140] x64_sys_call+0x27bc/0x2ff0 [ 248.496692][T16140] do_syscall_64+0xd2/0x200 [ 248.496786][T16140] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 248.496819][T16140] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 248.496924][T16140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.497066][T16140] RIP: 0033:0x7f89233bd8dc [ 248.497087][T16140] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.497128][T16140] RSP: 002b:00007f8921e27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.497154][T16140] RAX: ffffffffffffffda RBX: 00007f8923615fa0 RCX: 00007f89233bd8dc [ 248.497244][T16140] RDX: 000000000000000f RSI: 00007f8921e270a0 RDI: 0000000000000004 [ 248.497262][T16140] RBP: 00007f8921e27090 R08: 0000000000000000 R09: 0000000000000000 [ 248.497279][T16140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.497296][T16140] R13: 00007f8923616038 R14: 00007f8923615fa0 R15: 00007fff766c68a8 [ 248.497385][T16140] [ 248.995496][T16148] lo speed is unknown, defaulting to 1000 [ 249.001337][T16148] lo speed is unknown, defaulting to 1000 [ 249.007751][T16148] lo speed is unknown, defaulting to 1000 [ 249.015186][T16148] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.027359][T16148] lo speed is unknown, defaulting to 1000 [ 249.034007][T16148] lo speed is unknown, defaulting to 1000 [ 249.040771][T16148] lo speed is unknown, defaulting to 1000 [ 249.047283][T16148] lo speed is unknown, defaulting to 1000 [ 249.053877][T16148] lo speed is unknown, defaulting to 1000 [ 249.133727][T16150] netlink: 'syz.4.4587': attribute type 10 has an invalid length. [ 249.141680][T16150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4587'. [ 249.315781][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4588'. [ 249.358661][T16158] bridge0: port 3(gretap0) entered blocking state [ 249.365907][T16158] bridge0: port 3(gretap0) entered disabled state [ 249.376594][T16157] loop4: detected capacity change from 0 to 512 [ 249.389539][T16158] gretap0: entered allmulticast mode [ 249.396357][T16158] gretap0: entered promiscuous mode [ 249.402211][T16158] bridge0: port 3(gretap0) entered blocking state [ 249.409009][T16158] bridge0: port 3(gretap0) entered forwarding state [ 249.415644][T16157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.433986][T16152] gretap0: left allmulticast mode [ 249.439308][T16152] gretap0: left promiscuous mode [ 249.444557][T16152] bridge0: port 3(gretap0) entered disabled state [ 249.457365][T16157] EXT4-fs (loop4): 1 orphan inode deleted [ 249.465639][T16152] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4588'. [ 249.478440][T14773] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 249.490787][T16157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.521741][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.615967][T16177] netlink: 'syz.0.4596': attribute type 1 has an invalid length. [ 249.624663][T16177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4596'. [ 249.926468][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 249.926490][ T29] audit: type=1326 audit(6411.422:18145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16193 comm="syz.4.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e0eec9 code=0x7ffc0000 [ 249.975763][T16180] random: crng reseeded on system resumption [ 249.999160][ T29] audit: type=1326 audit(6411.464:18146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16193 comm="syz.4.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7d21e0eec9 code=0x7ffc0000 [ 250.022857][ T29] audit: type=1326 audit(6411.464:18147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16193 comm="syz.4.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e0eec9 code=0x7ffc0000 [ 250.106335][T16202] FAULT_INJECTION: forcing a failure. [ 250.106335][T16202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.119915][T16202] CPU: 0 UID: 0 PID: 16202 Comm: syz.4.4606 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.120013][T16202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.120033][T16202] Call Trace: [ 250.120041][T16202] [ 250.120053][T16202] __dump_stack+0x1d/0x30 [ 250.120081][T16202] dump_stack_lvl+0xe8/0x140 [ 250.120108][T16202] dump_stack+0x15/0x1b [ 250.120132][T16202] should_fail_ex+0x265/0x280 [ 250.120195][T16202] should_fail+0xb/0x20 [ 250.120224][T16202] should_fail_usercopy+0x1a/0x20 [ 250.120259][T16202] _copy_from_user+0x1c/0xb0 [ 250.120319][T16202] sg_new_write+0x71a/0x890 [ 250.120371][T16202] ? do_vfs_ioctl+0x866/0xe10 [ 250.120408][T16202] sg_ioctl+0xb81/0x1360 [ 250.120438][T16202] ? __pfx_sg_ioctl+0x10/0x10 [ 250.120463][T16202] __se_sys_ioctl+0xce/0x140 [ 250.120490][T16202] __x64_sys_ioctl+0x43/0x50 [ 250.120513][T16202] x64_sys_call+0x1816/0x2ff0 [ 250.120587][T16202] do_syscall_64+0xd2/0x200 [ 250.120663][T16202] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 250.120688][T16202] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 250.120723][T16202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.120753][T16202] RIP: 0033:0x7f7d21e0eec9 [ 250.120816][T16202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.120840][T16202] RSP: 002b:00007f7d20877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.120866][T16202] RAX: ffffffffffffffda RBX: 00007f7d22065fa0 RCX: 00007f7d21e0eec9 [ 250.120884][T16202] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000003 [ 250.120964][T16202] RBP: 00007f7d20877090 R08: 0000000000000000 R09: 0000000000000000 [ 250.120981][T16202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.120998][T16202] R13: 00007f7d22066038 R14: 00007f7d22065fa0 R15: 00007fffac74a548 [ 250.121026][T16202] [ 250.371106][ T29] audit: type=1326 audit(6411.874:18148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.1.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 250.394747][ T29] audit: type=1326 audit(6411.874:18149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.1.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 250.418596][ T29] audit: type=1326 audit(6411.874:18150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.1.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 250.442376][ T29] audit: type=1326 audit(6411.874:18151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.1.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 250.466121][ T29] audit: type=1326 audit(6411.874:18152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.1.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89233bef03 code=0x7ffc0000 [ 250.489632][ T29] audit: type=1326 audit(6411.874:18153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.1.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89233bd97f code=0x7ffc0000 [ 250.513406][ T29] audit: type=1326 audit(6411.874:18154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.1.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f89233bef57 code=0x7ffc0000 [ 250.568112][T16210] netlink: 'syz.4.4609': attribute type 10 has an invalid length. [ 250.576236][T16210] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4609'. [ 250.784826][T16212] random: crng reseeded on system resumption [ 250.839217][T16229] bridge: RTM_NEWNEIGH with invalid ether address [ 251.008249][T16229] loop4: detected capacity change from 0 to 512 [ 251.038613][T16229] ext4: Unknown parameter 'obj_user' [ 251.138746][T16243] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.235089][T16243] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.261359][T16249] netlink: 'syz.0.4623': attribute type 10 has an invalid length. [ 251.270086][T16249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4623'. [ 251.291057][T16249] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 251.330171][T16243] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.387980][T16243] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.449189][T16253] block device autoloading is deprecated and will be removed. [ 251.463748][T16258] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.475782][T16256] blktrace: Concurrent blktraces are not allowed on loop8 [ 251.520771][T16258] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.549321][T16258] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.607137][T16258] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.680913][ T162] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.689586][ T162] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.708187][ T162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.720864][T16261] random: crng reseeded on system resumption [ 251.727096][ T162] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.812046][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4634'. [ 251.832017][T16277] netlink: 'syz.0.4635': attribute type 10 has an invalid length. [ 251.833405][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 251.840093][T16277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4635'. [ 251.879872][ T162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.889071][T16277] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 251.909415][ T2835] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.926621][ T162] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.938920][ T162] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.982288][T16286] blktrace: Concurrent blktraces are not allowed on loop4 [ 252.037049][T16284] block device autoloading is deprecated and will be removed. [ 252.086748][T16297] bridge1: entered promiscuous mode [ 252.140986][T16297] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.211769][T16297] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.212071][T16308] loop0: detected capacity change from 0 to 1024 [ 252.231694][T16308] EXT4-fs: Ignoring removed oldalloc option [ 252.238076][T16308] EXT4-fs: Ignoring removed orlov option [ 252.255926][T16308] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 252.276858][T16297] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.312308][T16319] netlink: 'syz.3.4647': attribute type 10 has an invalid length. [ 252.321539][T16308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.367270][T16325] loop4: detected capacity change from 0 to 512 [ 252.368245][T16297] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.374551][T16325] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 252.399662][T16325] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 252.431589][T16308] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4643: Allocating blocks 497-513 which overlap fs metadata [ 252.454381][T16325] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.4652: corrupted inode contents [ 252.467115][T16325] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.4652: mark_inode_dirty error [ 252.483101][T16325] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4652: invalid indirect mapped block 1 (level 1) [ 252.529027][ T2835] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.540067][ T2835] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.548499][ T2835] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.552178][T16325] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.4652: corrupted inode contents [ 252.556991][ T2835] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.600766][T16325] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 252.609844][T16325] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.4652: corrupted inode contents [ 252.662075][T16325] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.4652: mark_inode_dirty error [ 252.706202][T16349] netlink: 'syz.2.4661': attribute type 10 has an invalid length. [ 252.715179][T16325] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 252.730891][T16325] EXT4-fs (loop4): 1 truncate cleaned up [ 252.765374][T16325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.980672][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.164551][T16354] random: crng reseeded on system resumption [ 253.285136][T16368] random: crng reseeded on system resumption [ 253.436235][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.567997][T16403] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.609841][T16407] netlink: 'syz.1.4682': attribute type 1 has an invalid length. [ 253.618415][T16407] __nla_validate_parse: 4 callbacks suppressed [ 253.618434][T16407] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4682'. [ 253.677530][T16403] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.787264][T16403] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.860782][T16403] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.867792][T16410] random: crng reseeded on system resumption [ 253.912991][T16419] FAULT_INJECTION: forcing a failure. [ 253.912991][T16419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.926662][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.4.4686 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.926690][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.926763][T16419] Call Trace: [ 253.926773][T16419] [ 253.926791][T16419] __dump_stack+0x1d/0x30 [ 253.926820][T16419] dump_stack_lvl+0xe8/0x140 [ 253.926845][T16419] dump_stack+0x15/0x1b [ 253.926879][T16419] should_fail_ex+0x265/0x280 [ 253.926905][T16419] should_fail+0xb/0x20 [ 253.926997][T16419] should_fail_usercopy+0x1a/0x20 [ 253.927023][T16419] strncpy_from_user+0x25/0x230 [ 253.927060][T16419] ? __seccomp_filter+0x69d/0x10d0 [ 253.927090][T16419] __x64_sys_lgetxattr+0xa5/0x140 [ 253.927193][T16419] x64_sys_call+0x2fa4/0x2ff0 [ 253.927220][T16419] do_syscall_64+0xd2/0x200 [ 253.927302][T16419] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.927334][T16419] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 253.927373][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.927405][T16419] RIP: 0033:0x7f7d21e0eec9 [ 253.927422][T16419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.927474][T16419] RSP: 002b:00007f7d20877038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 253.927498][T16419] RAX: ffffffffffffffda RBX: 00007f7d22065fa0 RCX: 00007f7d21e0eec9 [ 253.927515][T16419] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 253.927531][T16419] RBP: 00007f7d20877090 R08: 0000000000000000 R09: 0000000000000000 [ 253.927548][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.927565][T16419] R13: 00007f7d22066038 R14: 00007f7d22065fa0 R15: 00007fffac74a548 [ 253.927591][T16419] [ 254.205587][T16425] FAULT_INJECTION: forcing a failure. [ 254.205587][T16425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.219312][T16425] CPU: 0 UID: 0 PID: 16425 Comm: syz.2.4687 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.219377][T16425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.219392][T16425] Call Trace: [ 254.219401][T16425] [ 254.219412][T16425] __dump_stack+0x1d/0x30 [ 254.219438][T16425] dump_stack_lvl+0xe8/0x140 [ 254.219464][T16425] dump_stack+0x15/0x1b [ 254.219486][T16425] should_fail_ex+0x265/0x280 [ 254.219565][T16425] should_fail+0xb/0x20 [ 254.219619][T16425] should_fail_usercopy+0x1a/0x20 [ 254.219647][T16425] _copy_to_iter+0xd2/0xe70 [ 254.219684][T16425] ? try_charge_memcg+0x200/0x9e0 [ 254.219717][T16425] ? xas_load+0x413/0x430 [ 254.219771][T16425] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 254.219800][T16425] __skb_datagram_iter+0xc6/0x690 [ 254.219827][T16425] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 254.219896][T16425] ? __account_obj_stock+0x211/0x350 [ 254.219929][T16425] skb_copy_datagram_iter+0x3d/0x110 [ 254.219986][T16425] tcp_recvmsg_locked+0xa68/0x1fd0 [ 254.220029][T16425] ? xa_load+0xb1/0xe0 [ 254.220143][T16425] ? avc_has_perm_noaudit+0x1b1/0x200 [ 254.220219][T16425] ? __rcu_read_unlock+0x4f/0x70 [ 254.220278][T16425] ? avc_has_perm_noaudit+0x1b1/0x200 [ 254.220305][T16425] ? _raw_spin_unlock_bh+0x36/0x40 [ 254.220328][T16425] ? lock_sock_nested+0x112/0x140 [ 254.220370][T16425] ? avc_has_perm+0xf7/0x180 [ 254.220405][T16425] tcp_recvmsg+0x12e/0x490 [ 254.220448][T16425] ? selinux_socket_recvmsg+0x175/0x1b0 [ 254.220547][T16425] ? __pfx_tcp_recvmsg+0x10/0x10 [ 254.220581][T16425] inet_recvmsg+0xb7/0x290 [ 254.220608][T16425] sock_recvmsg+0xf6/0x170 [ 254.220663][T16425] ____sys_recvmsg+0xf5/0x280 [ 254.220699][T16425] ___sys_recvmsg+0x11f/0x370 [ 254.220744][T16425] __x64_sys_recvmsg+0xd1/0x160 [ 254.220783][T16425] x64_sys_call+0x2b42/0x2ff0 [ 254.220833][T16425] do_syscall_64+0xd2/0x200 [ 254.220947][T16425] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.220980][T16425] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 254.221017][T16425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.221046][T16425] RIP: 0033:0x7f98dfd3eec9 [ 254.221066][T16425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.221091][T16425] RSP: 002b:00007f98de79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 254.221116][T16425] RAX: ffffffffffffffda RBX: 00007f98dff95fa0 RCX: 00007f98dfd3eec9 [ 254.221140][T16425] RDX: 0000000000000104 RSI: 0000200000001500 RDI: 0000000000000004 [ 254.221179][T16425] RBP: 00007f98de79f090 R08: 0000000000000000 R09: 0000000000000000 [ 254.221196][T16425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.221213][T16425] R13: 00007f98dff96038 R14: 00007f98dff95fa0 R15: 00007ffc3dccbc48 [ 254.221234][T16425] [ 254.662658][T16433] tipc: Started in network mode [ 254.667684][T16433] tipc: Node identity 1ead3c272863, cluster identity 4711 [ 254.675400][T16433] tipc: Enabled bearer , priority 0 [ 254.708274][T16433] tipc: Disabling bearer [ 254.782309][T16446] netlink: 'syz.2.4694': attribute type 16 has an invalid length. [ 254.790468][T16446] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4694'. [ 254.828647][T16446] FAULT_INJECTION: forcing a failure. [ 254.828647][T16446] name failslab, interval 1, probability 0, space 0, times 0 [ 254.841512][T16446] CPU: 0 UID: 0 PID: 16446 Comm: syz.2.4694 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.841548][T16446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.841566][T16446] Call Trace: [ 254.841575][T16446] [ 254.841586][T16446] __dump_stack+0x1d/0x30 [ 254.841614][T16446] dump_stack_lvl+0xe8/0x140 [ 254.841669][T16446] dump_stack+0x15/0x1b [ 254.841747][T16446] should_fail_ex+0x265/0x280 [ 254.841780][T16446] should_failslab+0x8c/0xb0 [ 254.841872][T16446] __kmalloc_noprof+0xa5/0x3e0 [ 254.841908][T16446] ? fib_nl2rule+0x215/0xc50 [ 254.841939][T16446] fib_nl2rule+0x215/0xc50 [ 254.841976][T16446] fib_newrule+0x2c1/0x930 [ 254.842099][T16446] ? avc_has_perm_noaudit+0x1b1/0x200 [ 254.842149][T16446] fib_nl_newrule+0x46/0x60 [ 254.842182][T16446] ? __pfx_fib_nl_newrule+0x10/0x10 [ 254.842211][T16446] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 254.842291][T16446] netlink_rcv_skb+0x123/0x220 [ 254.842354][T16446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.842404][T16446] rtnetlink_rcv+0x1c/0x30 [ 254.842440][T16446] netlink_unicast+0x5bd/0x690 [ 254.842497][T16446] netlink_sendmsg+0x58b/0x6b0 [ 254.842588][T16446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.842647][T16446] __sock_sendmsg+0x145/0x180 [ 254.842680][T16446] ____sys_sendmsg+0x31e/0x4e0 [ 254.842710][T16446] ___sys_sendmsg+0x17b/0x1d0 [ 254.842787][T16446] __x64_sys_sendmsg+0xd4/0x160 [ 254.842822][T16446] x64_sys_call+0x191e/0x2ff0 [ 254.842843][T16446] do_syscall_64+0xd2/0x200 [ 254.842906][T16446] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.842937][T16446] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 254.842979][T16446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.843027][T16446] RIP: 0033:0x7f98dfd3eec9 [ 254.843060][T16446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.843079][T16446] RSP: 002b:00007f98de79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.843099][T16446] RAX: ffffffffffffffda RBX: 00007f98dff95fa0 RCX: 00007f98dfd3eec9 [ 254.843193][T16446] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 254.843208][T16446] RBP: 00007f98de79f090 R08: 0000000000000000 R09: 0000000000000000 [ 254.843228][T16446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.843244][T16446] R13: 00007f98dff96038 R14: 00007f98dff95fa0 R15: 00007ffc3dccbc48 [ 254.843271][T16446] [ 254.872225][T16452] blktrace: Concurrent blktraces are not allowed on loop8 [ 255.157589][T16450] random: crng reseeded on system resumption [ 255.168746][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 255.168766][ T29] audit: type=1400 audit(6416.935:18475): avc: denied { setopt } for pid=16457 comm="syz.2.4699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.251485][ T29] audit: type=1326 audit(6417.019:18476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e0eec9 code=0x7ffc0000 [ 255.304254][ T29] audit: type=1326 audit(6417.019:18477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e0eec9 code=0x7ffc0000 [ 255.328017][ T29] audit: type=1326 audit(6417.019:18478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7d21e0eec9 code=0x7ffc0000 [ 255.351553][ T29] audit: type=1326 audit(6417.019:18479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d21e0eec9 code=0x7ffc0000 [ 255.375953][ T29] audit: type=1326 audit(6417.061:18480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.2.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 255.399219][ T29] audit: type=1326 audit(6417.061:18481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.2.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 255.422744][ T29] audit: type=1326 audit(6417.061:18482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.2.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 255.458293][T16478] FAULT_INJECTION: forcing a failure. [ 255.458293][T16478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.471660][T16478] CPU: 1 UID: 0 PID: 16478 Comm: syz.3.4705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 255.471693][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.471710][T16478] Call Trace: [ 255.471718][T16478] [ 255.471728][T16478] __dump_stack+0x1d/0x30 [ 255.471847][T16478] dump_stack_lvl+0xe8/0x140 [ 255.471873][T16478] dump_stack+0x15/0x1b [ 255.471895][T16478] should_fail_ex+0x265/0x280 [ 255.471921][T16478] should_fail+0xb/0x20 [ 255.472019][T16478] should_fail_usercopy+0x1a/0x20 [ 255.472125][T16478] _copy_to_user+0x20/0xa0 [ 255.472184][T16478] simple_read_from_buffer+0xb5/0x130 [ 255.472208][T16478] proc_fail_nth_read+0x10e/0x150 [ 255.472242][T16478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.472272][T16478] vfs_read+0x1a5/0x770 [ 255.472353][T16478] ? __rcu_read_unlock+0x4f/0x70 [ 255.472381][T16478] ? __fget_files+0x184/0x1c0 [ 255.472413][T16478] ksys_read+0xda/0x1a0 [ 255.472443][T16478] __x64_sys_read+0x40/0x50 [ 255.472506][T16478] x64_sys_call+0x27bc/0x2ff0 [ 255.472613][T16478] do_syscall_64+0xd2/0x200 [ 255.472713][T16478] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 255.472804][T16478] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 255.472847][T16478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.472870][T16478] RIP: 0033:0x7f0c6fbdd8dc [ 255.472886][T16478] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.472912][T16478] RSP: 002b:00007f0c6e61e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.472937][T16478] RAX: ffffffffffffffda RBX: 00007f0c6fe36090 RCX: 00007f0c6fbdd8dc [ 255.472954][T16478] RDX: 000000000000000f RSI: 00007f0c6e61e0a0 RDI: 0000000000000004 [ 255.472970][T16478] RBP: 00007f0c6e61e090 R08: 0000000000000000 R09: 0000000000000000 [ 255.472986][T16478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.473010][T16478] R13: 00007f0c6fe36128 R14: 00007f0c6fe36090 R15: 00007ffe9a1937d8 [ 255.473155][T16478] [ 255.760376][T16483] blktrace: Concurrent blktraces are not allowed on loop6 [ 255.813475][ T29] audit: type=1326 audit(6417.606:18483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.3.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6fbdeec9 code=0x7ffc0000 [ 255.837590][ T29] audit: type=1326 audit(6417.606:18484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.3.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6fbdeec9 code=0x7ffc0000 [ 256.250238][T16519] netlink: 'syz.3.4723': attribute type 1 has an invalid length. [ 256.258186][T16519] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4723'. [ 256.449909][ T162] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.458731][ T162] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.505255][ T162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.526032][ T162] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.579985][T16537] loop4: detected capacity change from 0 to 1024 [ 256.587902][T16534] FAULT_INJECTION: forcing a failure. [ 256.587902][T16534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.602273][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.1.4727 Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.602301][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.602315][T16534] Call Trace: [ 256.602321][T16534] [ 256.602328][T16534] __dump_stack+0x1d/0x30 [ 256.602353][T16534] dump_stack_lvl+0xe8/0x140 [ 256.602396][T16534] dump_stack+0x15/0x1b [ 256.602418][T16534] should_fail_ex+0x265/0x280 [ 256.602446][T16534] should_fail+0xb/0x20 [ 256.602474][T16534] should_fail_usercopy+0x1a/0x20 [ 256.602529][T16534] _copy_from_user+0x1c/0xb0 [ 256.602571][T16534] __ia32_sys_rt_sigreturn+0x128/0x350 [ 256.602626][T16534] x64_sys_call+0x2d3c/0x2ff0 [ 256.602654][T16534] do_syscall_64+0xd2/0x200 [ 256.602805][T16534] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 256.602839][T16534] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 256.602875][T16534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.603014][T16534] RIP: 0033:0x7f892335af79 [ 256.603066][T16534] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 256.603089][T16534] RSP: 002b:00007f8921e26a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 256.603119][T16534] RAX: ffffffffffffffda RBX: 00007f8923615fa0 RCX: 00007f892335af79 [ 256.603135][T16534] RDX: 00007f8921e26a80 RSI: 00007f8921e26bb0 RDI: 0000000000000011 [ 256.603153][T16534] RBP: 00007f8921e27090 R08: 0000000000000000 R09: 0000000000000000 [ 256.603170][T16534] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 256.603186][T16534] R13: 00007f8923616038 R14: 00007f8923615fa0 R15: 00007fff766c68a8 [ 256.603254][T16534] [ 256.776848][T16537] EXT4-fs: Ignoring removed orlov option [ 256.801468][T16537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.818090][T16537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.990314][T16571] netlink: 'syz.3.4741': attribute type 4 has an invalid length. [ 256.999773][T16571] netlink: 'syz.3.4741': attribute type 4 has an invalid length. [ 257.059176][T16573] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 257.066879][T16573] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 257.303005][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 257.312344][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 257.321809][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 257.346190][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 257.355210][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 257.364410][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 257.409568][T16613] FAULT_INJECTION: forcing a failure. [ 257.409568][T16613] name failslab, interval 1, probability 0, space 0, times 0 [ 257.422759][T16613] CPU: 0 UID: 0 PID: 16613 Comm: syz.0.4761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 257.422797][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.422821][T16613] Call Trace: [ 257.422832][T16613] [ 257.422843][T16613] __dump_stack+0x1d/0x30 [ 257.422871][T16613] dump_stack_lvl+0xe8/0x140 [ 257.422951][T16613] dump_stack+0x15/0x1b [ 257.422971][T16613] should_fail_ex+0x265/0x280 [ 257.423010][T16613] should_failslab+0x8c/0xb0 [ 257.423044][T16613] kmem_cache_alloc_noprof+0x50/0x310 [ 257.423084][T16613] ? getname_flags+0x80/0x3b0 [ 257.423121][T16613] ? kstrtouint+0x76/0xc0 [ 257.423190][T16613] getname_flags+0x80/0x3b0 [ 257.423230][T16613] user_path_at+0x28/0x130 [ 257.423310][T16613] bpf_obj_get_user+0x66/0x300 [ 257.423340][T16613] bpf_obj_get+0xed/0x100 [ 257.423409][T16613] __sys_bpf+0x5d2/0x7b0 [ 257.423459][T16613] __x64_sys_bpf+0x41/0x50 [ 257.423494][T16613] x64_sys_call+0x2aea/0x2ff0 [ 257.423566][T16613] do_syscall_64+0xd2/0x200 [ 257.423608][T16613] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 257.423641][T16613] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 257.423681][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.423738][T16613] RIP: 0033:0x7f976f93eec9 [ 257.423759][T16613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.423784][T16613] RSP: 002b:00007f976e3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.423819][T16613] RAX: ffffffffffffffda RBX: 00007f976fb95fa0 RCX: 00007f976f93eec9 [ 257.423862][T16613] RDX: 0000000000000018 RSI: 0000200000001540 RDI: 0000000000000007 [ 257.423880][T16613] RBP: 00007f976e3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 257.423897][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.423970][T16613] R13: 00007f976fb96038 R14: 00007f976fb95fa0 R15: 00007ffc1782b368 [ 257.424067][T16613] [ 257.431603][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 258.569840][T16713] netlink: 'syz.1.4801': attribute type 1 has an invalid length. [ 258.578141][T16713] __nla_validate_parse: 7 callbacks suppressed [ 258.578158][T16713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4801'. [ 258.669863][T16728] FAULT_INJECTION: forcing a failure. [ 258.669863][T16728] name failslab, interval 1, probability 0, space 0, times 0 [ 258.683090][T16728] CPU: 1 UID: 0 PID: 16728 Comm: syz.3.4808 Not tainted syzkaller #0 PREEMPT(voluntary) [ 258.683123][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.683144][T16728] Call Trace: [ 258.683152][T16728] [ 258.683161][T16728] __dump_stack+0x1d/0x30 [ 258.683240][T16728] dump_stack_lvl+0xe8/0x140 [ 258.683272][T16728] dump_stack+0x15/0x1b [ 258.683293][T16728] should_fail_ex+0x265/0x280 [ 258.683322][T16728] should_failslab+0x8c/0xb0 [ 258.683357][T16728] kmem_cache_alloc_node_noprof+0x57/0x320 [ 258.683399][T16728] ? __alloc_skb+0x101/0x320 [ 258.683545][T16728] __alloc_skb+0x101/0x320 [ 258.683570][T16728] ? audit_log_start+0x365/0x6c0 [ 258.683613][T16728] audit_log_start+0x380/0x6c0 [ 258.683688][T16728] audit_seccomp+0x48/0x100 [ 258.683715][T16728] ? __seccomp_filter+0x68c/0x10d0 [ 258.683744][T16728] __seccomp_filter+0x69d/0x10d0 [ 258.683775][T16728] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 258.683896][T16728] ? vfs_write+0x7e8/0x960 [ 258.683930][T16728] __secure_computing+0x82/0x150 [ 258.683959][T16728] syscall_trace_enter+0xcf/0x1e0 [ 258.683993][T16728] do_syscall_64+0xac/0x200 [ 258.684079][T16728] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 258.684106][T16728] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 258.684169][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.684191][T16728] RIP: 0033:0x7f0c6fbdeec9 [ 258.684207][T16728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.684238][T16728] RSP: 002b:00007f0c6e63f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000043 [ 258.684346][T16728] RAX: ffffffffffffffda RBX: 00007f0c6fe35fa0 RCX: 00007f0c6fbdeec9 [ 258.684360][T16728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.684373][T16728] RBP: 00007f0c6e63f090 R08: 0000000000000000 R09: 0000000000000000 [ 258.684385][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.684400][T16728] R13: 00007f0c6fe36038 R14: 00007f0c6fe35fa0 R15: 00007ffe9a1937d8 [ 258.684459][T16728] [ 259.080585][T16747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4815'. [ 259.211839][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4823'. [ 259.221944][T16762] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 259.223316][T16764] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4823'. [ 259.230095][T16762] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4822'. [ 259.560705][T16785] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 259.569688][T16785] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 259.732739][T16793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16793 comm=syz.4.4833 [ 259.798048][T16792] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.869392][T16799] netlink: 'syz.3.4836': attribute type 1 has an invalid length. [ 259.877442][T16799] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4836'. [ 259.887688][T16792] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.908627][T16799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4836'. [ 259.923552][T16792] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.979828][T16792] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.060156][T14773] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.089147][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.098889][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.119758][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 260.119777][ T29] audit: type=1326 audit(6422.132:19030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.163037][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.172604][ T29] audit: type=1326 audit(6422.163:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.196171][ T29] audit: type=1326 audit(6422.163:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.220095][ T29] audit: type=1326 audit(6422.163:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.244187][ T29] audit: type=1326 audit(6422.163:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.267971][ T29] audit: type=1326 audit(6422.163:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.292054][ T29] audit: type=1326 audit(6422.163:19036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.299558][T16812] block device autoloading is deprecated and will be removed. [ 260.316416][ T29] audit: type=1326 audit(6422.163:19037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.316462][ T29] audit: type=1326 audit(6422.163:19038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.374793][ T29] audit: type=1326 audit(6422.163:19039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.2.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7fc00000 [ 260.420947][T16817] netlink: 'syz.1.4844': attribute type 1 has an invalid length. [ 260.429148][T16817] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4844'. [ 260.866741][T16838] block device autoloading is deprecated and will be removed. [ 261.178677][T16862] netlink: 'syz.1.4861': attribute type 1 has an invalid length. [ 261.186763][T16862] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4861'. [ 261.218378][T16862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4861'. [ 261.515362][T16870] block device autoloading is deprecated and will be removed. [ 261.946890][T16897] block device autoloading is deprecated and will be removed. [ 261.961372][T16900] block device autoloading is deprecated and will be removed. [ 261.999669][T16902] block device autoloading is deprecated and will be removed. [ 262.117754][T16918] netlink: 'syz.4.4882': attribute type 15 has an invalid length. [ 262.237450][T16926] FAULT_INJECTION: forcing a failure. [ 262.237450][T16926] name failslab, interval 1, probability 0, space 0, times 0 [ 262.250501][T16926] CPU: 1 UID: 0 PID: 16926 Comm: syz.0.4887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.250540][T16926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.250582][T16926] Call Trace: [ 262.250591][T16926] [ 262.250601][T16926] __dump_stack+0x1d/0x30 [ 262.250670][T16926] dump_stack_lvl+0xe8/0x140 [ 262.250711][T16926] dump_stack+0x15/0x1b [ 262.250731][T16926] should_fail_ex+0x265/0x280 [ 262.250830][T16926] should_failslab+0x8c/0xb0 [ 262.250899][T16926] kmem_cache_alloc_node_noprof+0x57/0x320 [ 262.250942][T16926] ? __alloc_skb+0x101/0x320 [ 262.250970][T16926] __alloc_skb+0x101/0x320 [ 262.250997][T16926] netlink_alloc_large_skb+0xba/0xf0 [ 262.251073][T16926] netlink_sendmsg+0x3cf/0x6b0 [ 262.251110][T16926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.251141][T16926] __sock_sendmsg+0x145/0x180 [ 262.251259][T16926] ____sys_sendmsg+0x31e/0x4e0 [ 262.251306][T16926] ___sys_sendmsg+0x17b/0x1d0 [ 262.251362][T16926] __x64_sys_sendmsg+0xd4/0x160 [ 262.251482][T16926] x64_sys_call+0x191e/0x2ff0 [ 262.251512][T16926] do_syscall_64+0xd2/0x200 [ 262.251553][T16926] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 262.251644][T16926] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 262.251685][T16926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.251717][T16926] RIP: 0033:0x7f976f93eec9 [ 262.251737][T16926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.251785][T16926] RSP: 002b:00007f976e3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.251812][T16926] RAX: ffffffffffffffda RBX: 00007f976fb95fa0 RCX: 00007f976f93eec9 [ 262.251829][T16926] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 262.251847][T16926] RBP: 00007f976e3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 262.251860][T16926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.251882][T16926] R13: 00007f976fb96038 R14: 00007f976fb95fa0 R15: 00007ffc1782b368 [ 262.251978][T16926] [ 262.525524][T16936] netlink: 'syz.0.4893': attribute type 1 has an invalid length. [ 262.745838][T16944] lo speed is unknown, defaulting to 1000 [ 262.772848][T16963] block device autoloading is deprecated and will be removed. [ 262.825853][T16970] loop4: detected capacity change from 0 to 512 [ 262.859255][T16970] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 262.885512][T16970] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 262.901384][T16970] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.4905: corrupted inode contents [ 262.921215][T16970] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.4905: mark_inode_dirty error [ 262.935206][T16970] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4905: invalid indirect mapped block 1 (level 1) [ 262.951557][T16970] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.4905: corrupted inode contents [ 262.964611][T16970] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 262.983133][T16970] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.4905: corrupted inode contents [ 262.996354][T16970] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.4905: mark_inode_dirty error [ 263.009642][T16970] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 263.019181][T16970] EXT4-fs (loop4): 1 truncate cleaned up [ 263.047549][T16970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.147952][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.181319][T17008] blktrace: Concurrent blktraces are not allowed on loop0 [ 263.544655][T17039] FAULT_INJECTION: forcing a failure. [ 263.544655][T17039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.558295][T17039] CPU: 0 UID: 0 PID: 17039 Comm: syz.3.4931 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.558324][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.558340][T17039] Call Trace: [ 263.558356][T17039] [ 263.558367][T17039] __dump_stack+0x1d/0x30 [ 263.558431][T17039] dump_stack_lvl+0xe8/0x140 [ 263.558457][T17039] dump_stack+0x15/0x1b [ 263.558477][T17039] should_fail_ex+0x265/0x280 [ 263.558509][T17039] should_fail+0xb/0x20 [ 263.558595][T17039] should_fail_usercopy+0x1a/0x20 [ 263.558623][T17039] _copy_to_user+0x20/0xa0 [ 263.558667][T17039] simple_read_from_buffer+0xb5/0x130 [ 263.558748][T17039] proc_fail_nth_read+0x10e/0x150 [ 263.558811][T17039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.558848][T17039] vfs_read+0x1a5/0x770 [ 263.558877][T17039] ? __rcu_read_unlock+0x4f/0x70 [ 263.558907][T17039] ? __fget_files+0x184/0x1c0 [ 263.558988][T17039] ksys_read+0xda/0x1a0 [ 263.559082][T17039] __x64_sys_read+0x40/0x50 [ 263.559107][T17039] x64_sys_call+0x27bc/0x2ff0 [ 263.559135][T17039] do_syscall_64+0xd2/0x200 [ 263.559186][T17039] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 263.559218][T17039] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 263.559316][T17039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.559352][T17039] RIP: 0033:0x7f0c6fbdd8dc [ 263.559373][T17039] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 263.559398][T17039] RSP: 002b:00007f0c6e61e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.559447][T17039] RAX: ffffffffffffffda RBX: 00007f0c6fe36090 RCX: 00007f0c6fbdd8dc [ 263.559461][T17039] RDX: 000000000000000f RSI: 00007f0c6e61e0a0 RDI: 0000000000000008 [ 263.559474][T17039] RBP: 00007f0c6e61e090 R08: 0000000000000000 R09: 0000000000000000 [ 263.559487][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.559548][T17039] R13: 00007f0c6fe36128 R14: 00007f0c6fe36090 R15: 00007ffe9a1937d8 [ 263.559577][T17039] [ 263.787895][T17047] loop0: detected capacity change from 0 to 2048 [ 263.834295][T17047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.243257][T17073] blktrace: Concurrent blktraces are not allowed on loop8 [ 264.386015][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.558080][T17092] loop4: detected capacity change from 0 to 1024 [ 264.587818][T17092] EXT4-fs: Ignoring removed orlov option [ 264.610212][T17092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.635000][T17092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.814137][T17105] netlink: 'syz.1.4959': attribute type 1 has an invalid length. [ 264.822693][T17105] __nla_validate_parse: 1 callbacks suppressed [ 264.822710][T17105] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4959'. [ 265.083672][T17113] block device autoloading is deprecated and will be removed. [ 265.190752][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 265.190771][ T29] audit: type=1400 audit(6427.455:19403): avc: denied { create } for pid=17117 comm="syz.2.4964" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.230879][ T29] audit: type=1400 audit(6427.455:19404): avc: denied { mounton } for pid=17117 comm="syz.2.4964" path="/346/file0" dev="tmpfs" ino=1826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.254605][ T29] audit: type=1400 audit(6427.465:19405): avc: denied { unlink } for pid=12171 comm="syz-executor" name="file0" dev="tmpfs" ino=1826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.307336][ T29] audit: type=1326 audit(6427.560:19406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6fbdeec9 code=0x7fc00000 [ 265.366430][ T29] audit: type=1400 audit(6427.633:19407): avc: denied { create } for pid=17123 comm="syz.2.4967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 265.424099][T17124] loop2: detected capacity change from 0 to 512 [ 265.427417][ T29] audit: type=1400 audit(6427.633:19408): avc: denied { create } for pid=17123 comm="syz.2.4967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 265.450721][ T29] audit: type=1326 audit(6427.696:19409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 265.474937][ T29] audit: type=1326 audit(6427.696:19410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 265.503491][ T29] audit: type=1326 audit(6427.696:19411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 265.528137][ T29] audit: type=1326 audit(6427.696:19412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.2.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 265.543113][T17124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.584902][T17130] netlink: 'syz.3.4970': attribute type 1 has an invalid length. [ 265.593937][T17130] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4970'. [ 265.608474][T17124] EXT4-fs (loop2): 1 orphan inode deleted [ 265.615066][T17124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.629215][T14773] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 265.681962][T12171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.751427][T17141] block device autoloading is deprecated and will be removed. [ 265.765028][T17142] loop4: detected capacity change from 0 to 1024 [ 265.792905][T17142] EXT4-fs: Ignoring removed orlov option [ 265.829680][T17142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.849205][T17142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.934651][T17153] lo speed is unknown, defaulting to 1000 [ 266.310158][T17164] lo speed is unknown, defaulting to 1000 [ 266.385685][T17160] random: crng reseeded on system resumption [ 266.638813][T17184] lo speed is unknown, defaulting to 1000 [ 266.821827][T17191] netlink: 'syz.0.4993': attribute type 1 has an invalid length. [ 266.829845][T17191] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4993'. [ 266.866527][T17191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4993'. [ 267.370026][T17207] netlink: 'syz.0.4998': attribute type 1 has an invalid length. [ 267.377862][T17207] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4998'. [ 267.603718][T17203] random: crng reseeded on system resumption [ 267.771207][T17220] block device autoloading is deprecated and will be removed. [ 267.813320][T17222] block device autoloading is deprecated and will be removed. [ 267.922904][T17233] loop4: detected capacity change from 0 to 512 [ 267.930913][T17233] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 267.941515][T17233] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 267.957755][T17233] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.5007: corrupted inode contents [ 267.974204][T17233] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.5007: mark_inode_dirty error [ 267.986136][T17233] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5007: invalid indirect mapped block 1 (level 1) [ 268.000436][T17233] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.5007: corrupted inode contents [ 268.014105][T17233] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 268.026404][T17233] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.5007: corrupted inode contents [ 268.039239][T17233] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.5007: mark_inode_dirty error [ 268.054664][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5008'. [ 268.065015][T17233] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 268.080727][T17235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.099318][T17233] EXT4-fs (loop4): 1 truncate cleaned up [ 268.116999][T17233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.134427][T17235] vlan2: entered allmulticast mode [ 268.139808][T17235] bond1: entered allmulticast mode [ 268.245569][T17255] netlink: 'syz.3.5015': attribute type 1 has an invalid length. [ 268.253679][T17255] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5015'. [ 268.267289][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.499259][T17279] block device autoloading is deprecated and will be removed. [ 268.624430][T17296] loop0: detected capacity change from 0 to 1024 [ 268.631434][T17296] EXT4-fs: Ignoring removed oldalloc option [ 268.637907][T17296] EXT4-fs: Ignoring removed orlov option [ 268.647736][T17296] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 268.665268][T17296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.700461][T17296] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.5029: Allocating blocks 497-513 which overlap fs metadata [ 268.922256][T17308] netlink: 'syz.1.5034': attribute type 1 has an invalid length. [ 268.930088][T17308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5034'. [ 269.147156][T17327] loop4: detected capacity change from 0 to 1024 [ 269.154228][T17327] EXT4-fs: Ignoring removed bh option [ 269.159946][T17327] EXT4-fs: inline encryption not supported [ 269.166360][T17327] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 269.188488][T17327] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.5043: lblock 2 mapped to illegal pblock 2 (length 1) [ 269.203813][T17327] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.5043: lblock 0 mapped to illegal pblock 48 (length 1) [ 269.219015][T17327] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5043: Failed to acquire dquot type 0 [ 269.232254][T17327] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 269.242157][T17327] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5043: mark_inode_dirty error [ 269.254071][T17327] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 269.265005][T17327] EXT4-fs (loop4): 1 orphan inode deleted [ 269.271435][T17327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.284479][ T51] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 269.286719][T17327] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.5043: lblock 0 mapped to illegal pblock 16 (length 1) [ 269.300846][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 269.317233][T17327] netlink: 'syz.4.5043': attribute type 1 has an invalid length. [ 269.332701][T17327] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5043'. [ 269.343480][T17335] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.360417][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5043'. [ 269.375430][T17327] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.5043: lblock 0 mapped to illegal pblock 16 (length 1) [ 269.408048][T17335] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.425557][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.465772][T17335] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.533038][T17335] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.565379][T17348] netlink: 'syz.0.5050': attribute type 1 has an invalid length. [ 269.586295][ T162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.612009][ T162] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.631820][ T162] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.658684][ T162] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.733831][T17352] __nla_validate_parse: 1 callbacks suppressed [ 269.733899][T17352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5051'. [ 269.752037][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.752037][T17351] bridge0: port 3(31ªî{X¹¦) entered blocking state [ 269.762520][T11170] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 269.768903][T17351] bridge0: port 3(31ªî{X¹¦) entered disabled state [ 269.783529][T11170] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 269.790692][T17351] 1ªî{X¹¦: entered promiscuous mode [ 269.801323][T11170] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 269.813301][T17351] bridge0: port 3(31ªî{X¹¦) entered blocking state [ 269.823359][T17351] bridge0: port 3(31ªî{X¹¦) entered forwarding state [ 269.855576][T17351] 1ªî{X¹¦: left promiscuous mode [ 269.861336][T17351] bridge0: port 3(31ªî{X¹¦) entered disabled state [ 269.871002][T17358] block device autoloading is deprecated and will be removed. [ 269.872381][T17351] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5051'. [ 269.899292][T17356] loop0: detected capacity change from 0 to 512 [ 269.907263][T17356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.927391][T17356] EXT4-fs (loop0): 1 orphan inode deleted [ 269.944698][T17364] loop4: detected capacity change from 0 to 1024 [ 269.951548][T17364] EXT4-fs: Ignoring removed orlov option [ 269.958153][T17356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.959199][T14770] __quota_error: 72 callbacks suppressed [ 269.959217][T14770] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 269.986779][T14770] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 1 [ 270.000419][ T29] audit: type=1326 audit(6432.505:19481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.0.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f976f93d710 code=0x7ffc0000 [ 270.024145][ T29] audit: type=1326 audit(6432.505:19482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.0.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f976f93dc17 code=0x7ffc0000 [ 270.048501][ T29] audit: type=1326 audit(6432.505:19483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.0.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f976f93d710 code=0x7ffc0000 [ 270.093779][T17364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.112459][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.121871][ T29] audit: type=1326 audit(6432.505:19484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.0.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 270.132120][T17364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.145703][ T29] audit: type=1326 audit(6432.505:19485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.0.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 270.270183][ T29] audit: type=1326 audit(6432.788:19486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6fbdeec9 code=0x7ffc0000 [ 270.295086][ T29] audit: type=1326 audit(6432.788:19487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6fbdeec9 code=0x7ffc0000 [ 270.332694][ T29] audit: type=1326 audit(6432.841:19488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f0c6fbdeec9 code=0x7ffc0000 [ 270.356913][ T29] audit: type=1326 audit(6432.841:19489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6fbdeec9 code=0x7ffc0000 [ 270.398072][T17382] loop0: detected capacity change from 0 to 1024 [ 270.422259][T17382] EXT4-fs: Ignoring removed bh option [ 270.428884][T17382] EXT4-fs: inline encryption not supported [ 270.436651][T17382] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 270.455888][T17382] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.5059: lblock 2 mapped to illegal pblock 2 (length 1) [ 270.483259][T17389] block device autoloading is deprecated and will be removed. [ 270.489465][T17382] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.5059: lblock 0 mapped to illegal pblock 48 (length 1) [ 270.506491][T17382] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.5059: Failed to acquire dquot type 0 [ 270.519021][T17382] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 270.538215][T17382] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.5059: mark_inode_dirty error [ 270.552668][T17382] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 270.563208][T17382] EXT4-fs (loop0): 1 orphan inode deleted [ 270.569784][T17382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.582683][ T162] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 270.601437][T17374] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 16: comm syz.0.5059: lblock 0 mapped to illegal pblock 16 (length 1) [ 270.621478][T17394] blktrace: Concurrent blktraces are not allowed on loop2 [ 270.629663][ T162] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 270.645480][T17374] netlink: 'syz.0.5059': attribute type 1 has an invalid length. [ 270.653849][T17374] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5059'. [ 270.679086][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.690304][T12523] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 270.718161][T12523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 270.729821][T12523] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 270.935188][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5077'. [ 270.965842][T17424] loop2: detected capacity change from 0 to 1024 [ 270.972699][T17424] EXT4-fs: Ignoring removed orlov option [ 270.980670][T17424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.994985][T17424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.076027][T17434] netlink: 'syz.0.5084': attribute type 1 has an invalid length. [ 271.084386][T17434] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5084'. [ 272.021286][T17491] block device autoloading is deprecated and will be removed. [ 272.296730][T17520] loop0: detected capacity change from 0 to 1024 [ 272.305330][T17520] EXT4-fs: Ignoring removed oldalloc option [ 272.312817][T17520] EXT4-fs: Ignoring removed orlov option [ 272.319229][T17520] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 272.351539][T17520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.475997][T17501] Set syz1 is full, maxelem 65536 reached [ 272.650781][T17534] netlink: 'syz.4.5124': attribute type 1 has an invalid length. [ 272.658977][T17534] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5124'. [ 272.728013][T17538] loop2: detected capacity change from 0 to 512 [ 272.735723][T17538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.751516][T17538] EXT4-fs (loop2): 1 orphan inode deleted [ 272.757957][T17538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.771411][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 272.801463][T12171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.838349][T17545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5128'. [ 272.871034][T17549] loop2: detected capacity change from 0 to 1024 [ 272.878108][T17549] EXT4-fs: Ignoring removed bh option [ 272.883985][T17549] EXT4-fs: inline encryption not supported [ 272.890270][T17549] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 272.903345][T17549] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.5130: lblock 2 mapped to illegal pblock 2 (length 1) [ 272.918016][T17549] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.5130: lblock 0 mapped to illegal pblock 48 (length 1) [ 272.932829][T17549] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5130: Failed to acquire dquot type 0 [ 272.944556][T17549] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 272.954483][T17549] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.5130: mark_inode_dirty error [ 272.967172][T17549] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 272.977977][T17549] EXT4-fs (loop2): 1 orphan inode deleted [ 272.984410][T17549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.998802][T14773] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 273.010379][T17549] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.5130: lblock 0 mapped to illegal pblock 16 (length 1) [ 273.014589][T14773] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 0 [ 273.045515][T17549] netlink: 'syz.2.5130': attribute type 1 has an invalid length. [ 273.054014][T17549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5130'. [ 273.064695][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.077254][T17549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5130'. [ 273.093068][T17549] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.5130: lblock 0 mapped to illegal pblock 16 (length 1) [ 273.176689][T17563] loop0: detected capacity change from 0 to 1024 [ 273.184573][T17563] EXT4-fs: Ignoring removed orlov option [ 273.193032][T17563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.206422][T17563] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.278678][T12171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.289534][T12171] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 273.304258][T12171] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 273.315441][T12171] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 273.500060][T17579] netlink: 'syz.1.5139': attribute type 1 has an invalid length. [ 273.507957][T17579] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5139'. [ 274.461406][T17612] block device autoloading is deprecated and will be removed. [ 274.840749][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 274.840835][ T29] audit: type=1326 audit(6437.586:19686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 274.871023][ T29] audit: type=1326 audit(6437.586:19687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 274.895354][ T29] audit: type=1326 audit(6437.586:19688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 274.918665][ T29] audit: type=1326 audit(6437.586:19689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 274.942077][ T29] audit: type=1326 audit(6437.586:19690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 274.965935][ T29] audit: type=1326 audit(6437.586:19691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 274.989358][ T29] audit: type=1326 audit(6437.586:19692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 275.012813][ T29] audit: type=1326 audit(6437.586:19693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 275.036383][ T29] audit: type=1326 audit(6437.586:19694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 275.059906][ T29] audit: type=1326 audit(6437.586:19695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.1.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89233beec9 code=0x7ffc0000 [ 275.131343][T17627] block device autoloading is deprecated and will be removed. [ 275.195612][T17632] lo speed is unknown, defaulting to 1000 [ 275.292770][T17638] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.360443][T17638] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.419827][T17638] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.466136][T17638] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.580937][ T162] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.630475][ T162] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.643534][T17663] loop4: detected capacity change from 0 to 128 [ 275.677798][ T162] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.687908][ T162] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.850540][T17658] random: crng reseeded on system resumption [ 275.935943][T17692] loop2: detected capacity change from 0 to 128 [ 275.953813][T17694] loop4: detected capacity change from 0 to 1024 [ 275.961074][T17694] EXT4-fs: Ignoring removed orlov option [ 275.975286][T17694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.010729][T17694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.503010][T17722] random: crng reseeded on system resumption [ 276.996895][T17770] netlink: 'syz.3.5220': attribute type 10 has an invalid length. [ 277.005070][T17770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5220'. [ 277.027261][T17774] lo speed is unknown, defaulting to 1000 [ 277.076905][T17774] 9pnet_fd: Insufficient options for proto=fd [ 277.096017][T17783] block device autoloading is deprecated and will be removed. [ 277.237455][T17776] random: crng reseeded on system resumption [ 277.418275][T13912] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 277.426568][T13912] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 277.449988][T13912] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 277.460284][T17823] lo speed is unknown, defaulting to 1000 [ 277.464576][T13912] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 277.494145][T17826] 9pnet_fd: Insufficient options for proto=fd [ 277.709453][T17841] loop2: detected capacity change from 0 to 512 [ 277.751071][T17841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.891048][T12171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.149816][T17861] lo speed is unknown, defaulting to 1000 [ 278.192335][T17866] 9pnet_fd: Insufficient options for proto=fd [ 278.518773][T17884] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.560798][T17884] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.610201][T17884] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.647110][T17884] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.701052][T14773] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.713377][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.727445][T14773] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.743964][T14773] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.791115][T17898] netlink: 'syz.0.5269': attribute type 1 has an invalid length. [ 278.798965][T17898] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5269'. [ 279.041882][T17904] loop4: detected capacity change from 0 to 1024 [ 279.049288][T17904] EXT4-fs: Ignoring removed oldalloc option [ 279.055585][T17904] EXT4-fs: Ignoring removed orlov option [ 279.065138][T17904] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 279.065828][T17906] block device autoloading is deprecated and will be removed. [ 279.088504][T17904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.322970][T17930] netlink: 'syz.0.5281': attribute type 1 has an invalid length. [ 279.330928][T17930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5281'. [ 279.669037][T17934] blktrace: Concurrent blktraces are not allowed on loop0 [ 279.775962][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.861526][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 279.861544][ T29] audit: type=1400 audit(6442.857:20036): avc: denied { read write } for pid=17945 comm="+}[@" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 279.937670][ T29] audit: type=1326 audit(6442.899:20037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 279.961126][ T29] audit: type=1326 audit(6442.899:20038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 279.984716][ T29] audit: type=1326 audit(6442.899:20039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 280.008168][ T29] audit: type=1326 audit(6442.899:20040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 280.032495][ T29] audit: type=1326 audit(6442.899:20041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 280.056435][ T29] audit: type=1326 audit(6442.899:20042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 280.080204][ T29] audit: type=1326 audit(6442.899:20043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 280.103824][ T29] audit: type=1326 audit(6442.899:20044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 280.127855][ T29] audit: type=1326 audit(6442.899:20045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.5288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 280.228604][T17965] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.270779][T17974] blktrace: Concurrent blktraces are not allowed on loop4 [ 280.294853][T17965] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.340206][T17981] lo speed is unknown, defaulting to 1000 [ 280.362770][T17968] random: crng reseeded on system resumption [ 280.377330][T17965] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.429110][T17965] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.503622][T17990] loop2: detected capacity change from 0 to 1024 [ 280.510618][T17990] EXT4-fs: Ignoring removed orlov option [ 280.518771][T17990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.532706][T17990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.975352][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5311'. [ 281.071003][T18014] lo speed is unknown, defaulting to 1000 [ 281.358388][T18026] loop4: detected capacity change from 0 to 1024 [ 281.365267][T18026] EXT4-fs: Ignoring removed orlov option [ 281.386701][T18026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.406090][T18026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.537236][T18046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5323'. [ 281.592183][T18048] lo speed is unknown, defaulting to 1000 [ 281.846881][T18051] netlink: 'syz.1.5325': attribute type 1 has an invalid length. [ 281.855121][T18051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5325'. [ 282.165949][T18058] netlink: 'syz.3.5328': attribute type 1 has an invalid length. [ 282.173852][T18058] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5328'. [ 282.204161][T18058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5328'. [ 282.228129][T18060] loop4: detected capacity change from 0 to 128 [ 282.278048][T18056] random: crng reseeded on system resumption [ 282.384870][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5334'. [ 282.433590][T18075] block device autoloading is deprecated and will be removed. [ 282.608962][T18086] loop4: detected capacity change from 0 to 512 [ 282.668902][T18086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.746993][T18086] EXT4-fs (loop4): 1 orphan inode deleted [ 282.762257][T14773] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 282.762779][T18086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.817518][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.903564][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.921570][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.944500][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.962415][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.980670][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5347'. [ 283.112276][T18108] random: crng reseeded on system resumption [ 283.164785][T18117] block device autoloading is deprecated and will be removed. [ 283.205616][T18120] loop0: detected capacity change from 0 to 1024 [ 283.221396][T18120] EXT4-fs: Ignoring removed orlov option [ 283.239824][T18120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.301453][T18120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.689926][T18146] random: crng reseeded on system resumption [ 283.779602][T18162] loop4: detected capacity change from 0 to 1024 [ 283.786490][T18162] EXT4-fs: Ignoring removed orlov option [ 283.939205][T18162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.971014][T18162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.219514][T18201] netlink: 'syz.2.5379': attribute type 10 has an invalid length. [ 284.228398][T18201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5379'. [ 284.549195][T18203] random: crng reseeded on system resumption [ 284.671970][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 284.671989][ T29] audit: type=1400 audit(6447.907:20258): avc: denied { setopt } for pid=18209 comm="syz.4.5383" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.733854][ T29] audit: type=1326 audit(6447.970:20259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 284.758103][ T29] audit: type=1326 audit(6447.970:20260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 284.826534][ T29] audit: type=1326 audit(6448.023:20261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 284.850502][ T29] audit: type=1326 audit(6448.023:20262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 284.874011][ T29] audit: type=1326 audit(6448.023:20263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 284.897757][ T29] audit: type=1326 audit(6448.023:20264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 284.921141][ T29] audit: type=1326 audit(6448.023:20265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 284.945006][ T29] audit: type=1326 audit(6448.023:20266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 284.968919][ T29] audit: type=1326 audit(6448.023:20267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18213 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 285.219130][T18233] random: crng reseeded on system resumption [ 285.443113][T18265] netlink: 'syz.1.5405': attribute type 1 has an invalid length. [ 285.451076][T18265] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5405'. [ 286.118612][T18293] block device autoloading is deprecated and will be removed. [ 286.155426][T18285] random: crng reseeded on system resumption [ 286.263479][T18299] 9pnet_fd: Insufficient options for proto=fd [ 286.277584][T18300] block device autoloading is deprecated and will be removed. [ 286.496813][T18318] netlink: 'syz.0.5424': attribute type 10 has an invalid length. [ 286.505067][T18318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5424'. [ 286.526466][T18318] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 286.756217][T18324] block device autoloading is deprecated and will be removed. [ 286.776875][T18327] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.813737][T18329] 9pnet_fd: Insufficient options for proto=fd [ 286.859983][T18327] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.904709][T18327] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.962645][T18327] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.023883][T14773] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.045634][T14773] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.054540][T14773] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.075366][T14773] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.158576][T18341] loop0: detected capacity change from 0 to 128 [ 287.411602][T18375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.494979][T18375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.552044][T18375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.597458][T18383] netlink: 'syz.4.5451': attribute type 10 has an invalid length. [ 287.605731][T18383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5451'. [ 287.616935][T18375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.703776][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.712647][T14773] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.720990][T14773] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.747063][T14773] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.990743][T18397] block device autoloading is deprecated and will be removed. [ 288.143640][T18408] netlink: 'syz.3.5462': attribute type 10 has an invalid length. [ 288.151854][T18408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5462'. [ 288.199749][T18410] netlink: 'syz.0.5461': attribute type 1 has an invalid length. [ 288.208122][T18410] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5461'. [ 288.228588][T18410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5461'. [ 288.625564][T18438] loop4: detected capacity change from 0 to 128 [ 288.690582][T18440] netlink: 'syz.2.5475': attribute type 10 has an invalid length. [ 288.698832][T18440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5475'. [ 288.839354][T18454] block device autoloading is deprecated and will be removed. [ 288.885548][T18465] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.920620][T18466] loop4: detected capacity change from 0 to 1024 [ 288.927822][T18466] EXT4-fs: Ignoring removed oldalloc option [ 288.936366][T18465] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.956195][T18466] EXT4-fs: Ignoring removed orlov option [ 288.962688][T18466] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 288.981039][T18465] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.996034][T18466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.019562][T18471] loop0: detected capacity change from 0 to 128 [ 289.038440][T18465] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.097210][T18466] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.5483: Allocating blocks 497-513 which overlap fs metadata [ 289.118534][T18480] netlink: 'syz.0.5489': attribute type 10 has an invalid length. [ 289.126901][T18480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5489'. [ 289.140439][T18480] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 289.218090][T18487] loop0: detected capacity change from 0 to 512 [ 289.235320][T18487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.278140][T18487] EXT4-fs (loop0): 1 orphan inode deleted [ 289.285188][T18487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.298405][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 289.336441][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.438216][T18495] loop0: detected capacity change from 0 to 512 [ 289.445536][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 289.445554][ T29] audit: type=1326 audit(6452.905:20513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 289.452457][T18495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.475441][ T29] audit: type=1326 audit(6452.905:20514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 289.508204][ T29] audit: type=1326 audit(6452.905:20515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 289.532364][ T29] audit: type=1326 audit(6452.905:20516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 289.556749][ T29] audit: type=1326 audit(6452.905:20517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 289.580379][ T29] audit: type=1326 audit(6452.905:20518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f976f93ef03 code=0x7ffc0000 [ 289.592673][T18495] EXT4-fs (loop0): 1 orphan inode deleted [ 289.606302][ T29] audit: type=1326 audit(6452.915:20519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f976f93d97f code=0x7ffc0000 [ 289.613921][T18495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.643950][ T29] audit: type=1326 audit(6452.915:20520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f976f93ef57 code=0x7ffc0000 [ 289.681707][ T29] audit: type=1326 audit(6452.915:20521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f976f93d710 code=0x7ffc0000 [ 289.681746][ T29] audit: type=1326 audit(6452.915:20522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18494 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f976f93eacb code=0x7ffc0000 [ 289.730545][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 289.790980][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.880475][T18511] netlink: 'syz.0.5502': attribute type 10 has an invalid length. [ 289.888689][T18511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5502'. [ 289.909378][T18511] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 289.939900][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.952720][T18513] loop0: detected capacity change from 0 to 512 [ 289.971902][T18513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.986006][T18516] loop4: detected capacity change from 0 to 512 [ 289.993466][T18516] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 290.010945][T18513] EXT4-fs (loop0): 1 orphan inode deleted [ 290.018266][T18513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.032113][T14770] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 1 [ 290.119998][T18523] netlink: 'syz.4.5506': attribute type 1 has an invalid length. [ 290.128278][T18523] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5506'. [ 290.161804][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.202006][T18528] loop0: detected capacity change from 0 to 512 [ 290.209799][T18528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.230171][T18528] EXT4-fs (loop0): 1 orphan inode deleted [ 290.238902][T18528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.258537][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 290.336692][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.440888][T18536] loop0: detected capacity change from 0 to 128 [ 290.510689][T18542] netlink: 'syz.0.5514': attribute type 10 has an invalid length. [ 290.518950][T18542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5514'. [ 290.530793][T18542] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 290.553297][ T2835] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.574533][ T2835] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.594798][ T2835] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.615063][ T2835] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.731312][T18559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5522'. [ 290.742037][T18559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18559 comm=syz.2.5522 [ 290.769679][T18554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.796307][T13921] lo speed is unknown, defaulting to 1000 [ 291.002202][T18575] netlink: 'syz.3.5528': attribute type 2 has an invalid length. [ 291.138346][T18586] netlink: 'syz.3.5533': attribute type 4 has an invalid length. [ 291.536144][T18598] syzkaller1: entered promiscuous mode [ 291.541854][T18598] syzkaller1: entered allmulticast mode [ 291.573771][T18602] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.581411][T18602] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.849111][T18624] loop0: detected capacity change from 0 to 128 [ 291.908968][T18630] loop0: detected capacity change from 0 to 1024 [ 291.918133][T18630] EXT4-fs: Ignoring removed bh option [ 291.933415][T18630] EXT4-fs: inline encryption not supported [ 291.956862][T18630] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.977108][T18630] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.5549: lblock 2 mapped to illegal pblock 2 (length 1) [ 292.001024][T18630] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.5549: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.155964][T18630] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.5549: Failed to acquire dquot type 0 [ 292.178024][T18639] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 292.214211][T18630] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 292.254342][T18630] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.5549: mark_inode_dirty error [ 292.286623][T18630] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 292.312656][T18630] EXT4-fs (loop0): 1 orphan inode deleted [ 292.339717][ T2835] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 292.355673][T18630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.397886][ T2835] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 292.431056][T18630] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 16: comm syz.0.5549: lblock 0 mapped to illegal pblock 16 (length 1) [ 292.484186][T18646] netlink: 'syz.0.5549': attribute type 1 has an invalid length. [ 292.492186][T18646] __nla_validate_parse: 8 callbacks suppressed [ 292.492204][T18646] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5549'. [ 292.641185][T18630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5549'. [ 292.666601][T18630] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 16: comm syz.0.5549: lblock 0 mapped to illegal pblock 16 (length 1) [ 293.178014][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.207848][T12523] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 293.233868][T12523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 293.251585][T18675] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.269720][T12523] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 293.333899][T18675] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.391031][T18675] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.448132][T18675] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.682859][T18697] block device autoloading is deprecated and will be removed. [ 293.707668][T18702] loop0: detected capacity change from 0 to 1024 [ 293.720092][T18702] EXT4-fs: Ignoring removed bh option [ 293.726050][T18702] EXT4-fs: inline encryption not supported [ 293.734448][T18702] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 293.746971][T18702] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.5576: lblock 2 mapped to illegal pblock 2 (length 1) [ 293.762570][T18702] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.5576: lblock 0 mapped to illegal pblock 48 (length 1) [ 293.781517][T18702] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.5576: Failed to acquire dquot type 0 [ 293.793674][T18702] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 293.805594][T18706] netlink: 'syz.3.5578': attribute type 1 has an invalid length. [ 293.813581][T18706] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5578'. [ 293.813627][T18702] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.5576: mark_inode_dirty error [ 293.838673][T18702] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 293.849563][T18702] EXT4-fs (loop0): 1 orphan inode deleted [ 293.856111][T18702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.869452][T14773] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.887527][T14773] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 0 [ 293.904761][T18702] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 16: comm syz.0.5576: lblock 0 mapped to illegal pblock 16 (length 1) [ 293.920091][T18702] netlink: 'syz.0.5576': attribute type 1 has an invalid length. [ 293.928163][T18702] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5576'. [ 293.962401][T18702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5576'. [ 293.979266][T18702] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 16: comm syz.0.5576: lblock 0 mapped to illegal pblock 16 (length 1) [ 294.219513][T14773] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.238870][T14773] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.250828][T14773] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.275021][T14773] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.302404][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 294.302425][ T29] audit: type=1326 audit(6458.018:20641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18735 comm="syz.2.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 294.348598][T12523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.366162][ T29] audit: type=1326 audit(6458.018:20642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18735 comm="syz.2.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 294.389806][ T29] audit: type=1326 audit(6458.060:20643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18735 comm="syz.2.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 294.399062][T12523] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 294.413421][ T29] audit: type=1326 audit(6458.060:20644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18735 comm="syz.2.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 294.450575][ T29] audit: type=1326 audit(6458.060:20645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18735 comm="syz.2.5589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfd3eec9 code=0x7ffc0000 [ 294.483067][T12523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 294.507521][T12523] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 294.553486][T18740] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.578273][ T29] audit: type=1326 audit(6458.301:20646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18746 comm="syz.0.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 294.602362][ T29] audit: type=1326 audit(6458.301:20647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18746 comm="syz.0.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 294.664332][ T29] audit: type=1326 audit(6458.364:20648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18746 comm="syz.0.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 294.688244][ T29] audit: type=1326 audit(6458.364:20649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18746 comm="syz.0.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 294.711637][ T29] audit: type=1326 audit(6458.364:20650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18746 comm="syz.0.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 294.737377][T18754] netlink: 'syz.1.5595': attribute type 10 has an invalid length. [ 294.745513][T18754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5595'. [ 294.766680][T18740] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.833434][T18740] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.895316][T18740] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.998752][T18767] netlink: 'syz.4.5602': attribute type 1 has an invalid length. [ 294.999599][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.006691][T18767] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5602'. [ 295.021427][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.040108][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.055883][T18772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5602'. [ 295.087805][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.545176][T13904] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 295.553320][T13904] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 295.562174][T13904] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x3 [ 295.570187][T13904] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 295.578446][T13904] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 295.586401][T13904] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 295.594721][T13904] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 295.602794][T13904] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 295.611258][T13904] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 295.725129][T18814] netlink: 'syz.1.5622': attribute type 1 has an invalid length. [ 295.734341][T18814] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5622'. [ 295.745476][T18814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5622'. [ 295.856643][ T2954] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 295.864553][ T2954] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 295.893046][ T2954] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 295.904558][T18821] random: crng reseeded on system resumption [ 296.107746][T18838] loop0: detected capacity change from 0 to 512 [ 296.115810][T18838] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 296.281579][T18857] random: crng reseeded on system resumption [ 297.408181][T18933] random: crng reseeded on system resumption [ 297.683927][T11889] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 298.306266][T18973] __nla_validate_parse: 2 callbacks suppressed [ 298.306302][T18973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5687'. [ 298.370039][T18973] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5687'. [ 298.707861][T18988] netlink: 'syz.3.5694': attribute type 1 has an invalid length. [ 298.716124][T18988] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5694'. [ 298.767500][T18988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5694'. [ 299.192790][T19028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.229166][T19028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.267407][T19028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.305515][T19028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.341617][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.353233][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.364491][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.379756][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.422803][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 299.422823][ T29] audit: type=1326 audit(6463.393:20788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 299.453699][ T29] audit: type=1326 audit(6463.393:20789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 299.477697][ T29] audit: type=1326 audit(6463.435:20790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 299.501013][ T29] audit: type=1326 audit(6463.435:20791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 299.525062][ T29] audit: type=1326 audit(6463.435:20792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 299.548895][ T29] audit: type=1326 audit(6463.435:20793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f976f93eec9 code=0x7ffc0000 [ 299.572468][ T29] audit: type=1326 audit(6463.435:20794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f976f93ef03 code=0x7ffc0000 [ 299.596500][ T29] audit: type=1326 audit(6463.435:20795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f976f93d97f code=0x7ffc0000 [ 299.620762][ T29] audit: type=1326 audit(6463.435:20796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f976f93ef57 code=0x7ffc0000 [ 299.646543][ T29] audit: type=1326 audit(6463.456:20797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.0.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f976f93d710 code=0x7ffc0000 [ 299.806427][T19048] netlink: 'syz.2.5719': attribute type 1 has an invalid length. [ 299.814501][T19048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5719'. [ 299.856391][T19048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5719'. [ 299.914177][T19055] block device autoloading is deprecated and will be removed. [ 300.108385][T19053] random: crng reseeded on system resumption [ 300.413106][T19103] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.506220][T19103] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.521188][T19114] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.562679][T19103] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.575717][T19114] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.610665][T19103] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.638861][T19114] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.679457][T14773] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.693331][T14773] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.704663][T19114] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.725270][T14773] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.742080][T14773] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.767785][T14773] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.820674][T14773] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.838069][T14773] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.859529][T14773] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.955092][T13910] hid_parser_main: 14 callbacks suppressed [ 300.955111][T13910] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 300.969374][T13910] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 300.978624][T13910] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x3 [ 300.988693][T13910] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 301.034492][T19148] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.107102][T19148] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.177482][T19148] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.249350][T19148] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.699001][T19234] block device autoloading is deprecated and will be removed. [ 302.863754][T19238] lo speed is unknown, defaulting to 1000 [ 302.906242][T13921] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 302.914232][T13921] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 302.930061][T13921] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 302.965970][T13921] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 302.981231][T14773] bridge_slave_1: left allmulticast mode [ 302.987102][T14773] bridge_slave_1: left promiscuous mode [ 302.993321][T14773] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.013219][T14773] bridge_slave_0: left allmulticast mode [ 303.019163][T14773] bridge_slave_0: left promiscuous mode [ 303.025253][T14773] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.039175][T14773] ip6gretap0 (unregistering): left promiscuous mode [ 303.089052][T19268] loop0: detected capacity change from 0 to 1024 [ 303.096148][T19268] EXT4-fs: Ignoring removed orlov option [ 303.106868][T19268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.141759][T19274] block device autoloading is deprecated and will be removed. [ 303.153380][T14773] bond0 (unregistering): left promiscuous mode [ 303.159874][T14773] bond_slave_0: left promiscuous mode [ 303.165758][T14773] bond_slave_1: left promiscuous mode [ 303.172720][T14773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.184349][T14773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.195531][T14773] bond0 (unregistering): Released all slaves [ 303.205414][T14773] bond1 (unregistering): Released all slaves [ 303.214972][T14773] bond2 (unregistering): Released all slaves [ 303.226187][T19238] chnl_net:caif_netlink_parms(): no params data found [ 303.247943][T19268] ================================================================== [ 303.256704][T19268] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 303.266393][T19268] [ 303.269008][T19268] write to 0xffff888119402008 of 4 bytes by task 19276 on cpu 0: [ 303.276746][T19268] writeback_single_inode+0x14a/0x3e0 [ 303.282419][T19268] sync_inode_metadata+0x5b/0x90 [ 303.287591][T19268] generic_buffers_fsync_noflush+0xd9/0x120 [ 303.293636][T19268] ext4_sync_file+0x1ab/0x690 [ 303.298443][T19268] vfs_fsync_range+0x10a/0x130 [ 303.303261][T19268] ext4_buffered_write_iter+0x34f/0x3c0 [ 303.309038][T19268] ext4_file_write_iter+0x383/0xf00 [ 303.314281][T19268] iter_file_splice_write+0x666/0xa60 [ 303.319855][T19268] direct_splice_actor+0x156/0x2a0 [ 303.325098][T19268] splice_direct_to_actor+0x312/0x680 [ 303.330801][T19268] do_splice_direct+0xda/0x150 [ 303.335611][T19268] do_sendfile+0x380/0x650 [ 303.340414][T19268] __x64_sys_sendfile64+0x105/0x150 [ 303.345635][T19268] x64_sys_call+0x2bb0/0x2ff0 [ 303.350699][T19268] do_syscall_64+0xd2/0x200 [ 303.355508][T19268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.361622][T19268] [ 303.363998][T19268] read to 0xffff888119402008 of 4 bytes by task 19268 on cpu 1: [ 303.371747][T19268] generic_buffers_fsync_noflush+0x80/0x120 [ 303.378053][T19268] ext4_sync_file+0x1ab/0x690 [ 303.382767][T19268] vfs_fsync_range+0x10a/0x130 [ 303.387553][T19268] ext4_buffered_write_iter+0x34f/0x3c0 [ 303.393130][T19268] ext4_file_write_iter+0x383/0xf00 [ 303.398816][T19268] iter_file_splice_write+0x666/0xa60 [ 303.404406][T19268] direct_splice_actor+0x156/0x2a0 [ 303.409739][T19268] splice_direct_to_actor+0x312/0x680 [ 303.415310][T19268] do_splice_direct+0xda/0x150 [ 303.420119][T19268] do_sendfile+0x380/0x650 [ 303.424686][T19268] __x64_sys_sendfile64+0x105/0x150 [ 303.430078][T19268] x64_sys_call+0x2bb0/0x2ff0 [ 303.434782][T19268] do_syscall_64+0xd2/0x200 [ 303.439654][T19268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.445737][T19268] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.448064][T19268] value changed: 0x00000038 -> 0x00000002 [ 303.453982][T19268] [ 303.456499][T19268] Reported by Kernel Concurrency Sanitizer on: [ 303.463457][T19268] CPU: 1 UID: 0 PID: 19268 Comm: syz.0.5804 Not tainted syzkaller #0 PREEMPT(voluntary) [ 303.473385][T19268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.483847][T19268] ================================================================== [ 303.551815][T19238] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 303.649204][T13230] syz_tun (unregistering): left allmulticast mode [ 303.665745][T13230] syz_tun (unregistering): left promiscuous mode [ 303.672406][T13230] bridge0: port 3(syz_tun) entered disabled state [ 303.681070][T14773] veth1_to_bridge: left promiscuous mode [ 303.688859][T14773] hsr_slave_0: left promiscuous mode [ 303.695605][T14773] hsr_slave_1: left promiscuous mode [ 303.701998][T14773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.710197][T14773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.718112][T14773] batman_adv: batadv0: Removing interface: dummy0 [ 303.726267][T14773] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 303.733936][T14773] batman_adv: batadv0: Removing interface: veth1_vlan [ 303.772490][T14773] team0 (unregistering): Port device team_slave_1 removed [ 303.783115][T14773] team0 (unregistering): Port device team_slave_0 removed [ 303.842176][T19268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.137898][ T2835] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.149464][ T2835] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.160913][ T2835] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.173108][ T2835] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.258704][T14773] IPVS: stop unused estimator thread 0... [ 304.306410][T14773] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.372366][T14773] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.429823][T14773] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.468030][T14773] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.736608][T14773] bridge_slave_1: left allmulticast mode [ 304.742800][T14773] bridge_slave_1: left promiscuous mode [ 304.748560][T14773] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.757075][T14773] bridge_slave_0: left allmulticast mode [ 304.763095][T14773] bridge_slave_0: left promiscuous mode [ 304.769034][T14773] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.777464][T14773] bridge_slave_1: left allmulticast mode [ 304.783323][T14773] bridge_slave_1: left promiscuous mode [ 304.789156][T14773] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.797315][T14773] bridge_slave_0: left allmulticast mode [ 304.803215][T14773] bridge_slave_0: left promiscuous mode [ 304.809138][T14773] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.916730][T14773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.927123][T14773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.937272][T14773] bond0 (unregistering): Released all slaves [ 304.947243][T14773] bond1 (unregistering): Released all slaves [ 304.984969][T14773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.995337][T14773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.004584][T14773] bond0 (unregistering): Released all slaves [ 305.086698][T14773] bond0 (unregistering): Released all slaves [ 305.127170][T14773] tipc: Left network mode [ 305.136806][T14773] hsr_slave_0: left promiscuous mode [ 305.142601][T14773] hsr_slave_1: left promiscuous mode [ 305.149694][T14773] hsr_slave_0: left promiscuous mode [ 305.155718][T14773] hsr_slave_1: left promiscuous mode [ 305.161341][T14773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.169274][T14773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.177279][T14773] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 305.184747][T14773] batman_adv: batadv0: Removing interface: veth1_vlan [ 305.194783][T14773] veth1_macvtap: left promiscuous mode [ 305.200695][T14773] veth0_macvtap: left promiscuous mode [ 305.206605][T14773] veth1_vlan: left promiscuous mode [ 305.212058][T14773] veth0_vlan: left promiscuous mode [ 305.274041][T14773] team0 (unregistering): Port device team_slave_1 removed [ 305.288317][T14773] team0 (unregistering): Port device team_slave_0 removed [ 305.316983][T14773] team0 (unregistering): Port device dummy0 removed [ 305.351810][T14773] team0 (unregistering): Port device team_slave_1 removed [ 305.363862][T14773] team0 (unregistering): Port device team_slave_0 removed [ 305.878501][T14773] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.934912][T14773] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.010623][T14773] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.058389][T14773] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.137282][T14773] bridge_slave_1: left allmulticast mode [ 306.143103][T14773] bridge_slave_1: left promiscuous mode [ 306.148831][T14773] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.156913][T14773] bridge_slave_0: left allmulticast mode [ 306.162751][T14773] bridge_slave_0: left promiscuous mode [ 306.168645][T14773] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.278136][T14773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.288480][T14773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.298290][T14773] bond0 (unregistering): Released all slaves [ 306.307231][T14773] bond1 (unregistering): Released all slaves [ 306.339096][T14773] hsr_slave_0: left promiscuous mode [ 306.344936][T14773] hsr_slave_1: left promiscuous mode [ 306.351261][T14773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.360067][T14773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.368003][T14773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.375817][T14773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.384140][T14773] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 306.391458][T14773] batman_adv: batadv0: Removing interface: veth1_vlan [ 306.401076][T14773] veth1_macvtap: left promiscuous mode [ 306.406917][T14773] veth0_macvtap: left promiscuous mode [ 306.412632][T14773] veth1_vlan: left promiscuous mode [ 306.418170][T14773] veth0_vlan: left promiscuous mode [ 306.482301][T14773] team0 (unregistering): Port device team_slave_1 removed [ 306.492939][T14773] team0 (unregistering): Port device team_slave_0 removed [ 306.744302][T14773] IPVS: stop unused estimator thread 0... [ 307.440306][ T2835] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.496735][ T2835] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.544358][ T2835] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.582454][ T2835] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.651401][ T2835] bridge_slave_1: left allmulticast mode [ 307.657438][ T2835] bridge_slave_1: left promiscuous mode [ 307.663495][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.672510][ T2835] bridge_slave_0: left allmulticast mode [ 307.678334][ T2835] bridge_slave_0: left promiscuous mode [ 307.684576][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.813607][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.823803][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.833645][ T2835] bond0 (unregistering): Released all slaves [ 307.859207][ T2835] IPVS: stopping master sync thread 12435 ... [ 307.866785][ T2835] hsr_slave_0: left promiscuous mode [ 307.873059][ T2835] hsr_slave_1: left promiscuous mode [ 307.879098][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.887054][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.895128][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.903515][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.914401][ T2835] veth1_macvtap: left promiscuous mode [ 307.919905][ T2835] veth0_macvtap: left promiscuous mode [ 307.970690][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 307.981414][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 308.013732][ T2954] lo speed is unknown, defaulting to 1000 [ 308.019864][ T2954] infiniband syz2: ib_query_port failed (-19)