last executing test programs: 51.829668951s ago: executing program 2 (id=2510): capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x4, 0x80}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0xd553, 0x2, 0x7, 0x200, 0xffffffffffffffff, 0x3, '\x00', r8, r3, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x83, &(0x7f0000000080)={r12}, 0x8) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 51.681188659s ago: executing program 2 (id=2513): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000a000000060000000000000a030000000a0000000100009300000000080000000600000046790000000000000600000d000000000e000000000000000700000004000000070000000300000009000000050000000e000000000000000d000000050000001000000000000012020000000100000000000007000000000100000000000007000000000030615f2e3e61006100"], &(0x7f0000000600)=""/157, 0xa6, 0x9d, 0x1, 0xf, 0x10000, @value}, 0x28) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0xa, [@enum={0x9, 0x7, 0x0, 0x6, 0x4, [{0x2, 0xfffffffb}, {0xc, 0x401}, {0xb, 0x3}, {0xc, 0x6}, {0xa, 0x1}, {0x7, 0x7}, {0x3, 0x1e53}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x7c, 0x4}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x56}, @fwd={0x8}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5b}}, @const={0x10, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0xe}}, @float={0xf, 0x0, 0x0, 0x10, 0xc933685593646d2b}]}, {0x0, [0x4f, 0x2e, 0x30, 0x30, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000240)=""/95, 0xe6, 0x5f, 0x1, 0xd, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0000000700000000000000ffff000081800000", @ANYRES32=0x1, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000020000000000e7ff0c0000001e1d90d9", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xfffffff5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)={0x10000005}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) setreuid(0xee00, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000000)) sendto$packet(r11, &(0x7f0000000080)="ef37c091", 0x4, 0x20000060, &(0x7f0000000040)={0x11, 0x8100, r10, 0x306, 0x7, 0x6, @local}, 0x14) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 51.445965253s ago: executing program 2 (id=2518): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) epoll_create1(0x0) socket(0x23, 0x5, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) close(r1) 51.380548527s ago: executing program 2 (id=2520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 51.290867882s ago: executing program 2 (id=2522): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000008000200180100002020702500000000002020227b1affff00000400bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000050000000600000007"], 0x24) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x8, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) pipe(&(0x7f0000000080)) fstat(0xffffffffffffffff, &(0x7f0000000140)) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18040000000000d6000000000000001cdc0000004000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 51.216294377s ago: executing program 2 (id=2525): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x4, 0x1}, 0x8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4YQeZ31Jlso1KWHUmgg0J6bGFkxqWUrWHKIjWkTSqGXQlt6ay859+el9Nofh17a/6MkpK0TmtJDcRn9sJVYcuTElpLm84Gx3pt50nvfeaOZJ81YE8Bjazz9k4k4EhFvJRGj9flJRPRXU9mImVq52xvr+XRKYnPzhR+TaplbG+v5aHpO6lA98/eI+Or1iKOZnfWWV9cWZovFwnI9P1lZvDBZXl07dn5xdr4wX1g6MTU9ffzk/06e2L9Yf/5u7fD1t5/998czv772t0/e/DqJmThcX9Ycx34Zj/H6OulPV+Edntnvynrms1c6KNS0BWQPsjHsUdoxffVeORKj0bdb/wx3s2UAwEF5NSI22+lruwQAeKQlteP/U71uBwDQLY3vAW5trOcbU2+/keiuG09HxFAt/sb5zdqSbP2c3VD1POjIreSOMyNJRIztQ/3jEfH+5y99mE5xQOchAVq5fCUizo6N79z/JzuuWdir/3RQZvyuvP0fdM8X6fjn/63Gf5mt8U+0GP8Mtnjv3o97v/8z1/ahmrbS8d+TTde23W6Kv26sr577U3XM15+cO18spPu2P0fERPQPpvmpXeqYuPnbzXbLmsd/P73z8gdp/enjdonMtezgnc+Zm63MPkjMzW5cifhHtlX8yVb/J23Gv6c7rOO5J954r92yNP403sa0M/6DtXk14l8t+z/ZKpPsen3iZHVzmGxsFC18OhMj7eofz273fzql9Tc+C3RD2v8ju8c/ljRfr1nu+KW3rhb79urol+0KNW//reNvvf0PJC9W0wP1eZdmK5XlqYiB5Pmd849vP7eRb5RP45/4Z+v3/27bf/qZ8GyHKyJ7/YeP7j/+g5XGP7en/t9zIoZuL/S1q7+z/p+upibqczrZ/3XawAdZdwAAAAAAAAAAAAAAAAAAAAAAAADQqUxEHI4kk9tKZzK5XO0e3n+NkUyxVK4cPVdaWZqL6r2yx6I/0/ipy9Gm30Odqv8efiN//K78fyPiLxHx7uBwNZ/Ll4pzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtbn/f+r7wV63DgA4MEN9vW4BANBlSTbb6yYAAN02tKfSwwfWDgCge/Z2/AcA/ggc/wHg8XOP479/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBBnT51Kp02f9lYz6f5uYurKwuli8fmCuWF3OJKPpcvLV/IzZdK88VCLl9abPtCl2sPxVLpwnQsrVyarBTKlcny6tqZxdLKUuXM+cXZ+cKZQn/XIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzpVX1xZmi8XCskRPEgvf1PrhYWmPxN4ScbnWfw9Le/YvEQPbe4nh3uycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4BvwcAAP//JJMi3A==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) 51.127556792s ago: executing program 32 (id=2525): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x4, 0x1}, 0x8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4YQeZ31Jlso1KWHUmgg0J6bGFkxqWUrWHKIjWkTSqGXQlt6ay859+el9Nofh17a/6MkpK0TmtJDcRn9sJVYcuTElpLm84Gx3pt50nvfeaOZJ81YE8Bjazz9k4k4EhFvJRGj9flJRPRXU9mImVq52xvr+XRKYnPzhR+TaplbG+v5aHpO6lA98/eI+Or1iKOZnfWWV9cWZovFwnI9P1lZvDBZXl07dn5xdr4wX1g6MTU9ffzk/06e2L9Yf/5u7fD1t5/998czv772t0/e/DqJmThcX9Ycx34Zj/H6OulPV+Edntnvynrms1c6KNS0BWQPsjHsUdoxffVeORKj0bdb/wx3s2UAwEF5NSI22+lruwQAeKQlteP/U71uBwDQLY3vAW5trOcbU2+/keiuG09HxFAt/sb5zdqSbP2c3VD1POjIreSOMyNJRIztQ/3jEfH+5y99mE5xQOchAVq5fCUizo6N79z/JzuuWdir/3RQZvyuvP0fdM8X6fjn/63Gf5mt8U+0GP8Mtnjv3o97v/8z1/ahmrbS8d+TTde23W6Kv26sr577U3XM15+cO18spPu2P0fERPQPpvmpXeqYuPnbzXbLmsd/P73z8gdp/enjdonMtezgnc+Zm63MPkjMzW5cifhHtlX8yVb/J23Gv6c7rOO5J954r92yNP403sa0M/6DtXk14l8t+z/ZKpPsen3iZHVzmGxsFC18OhMj7eofz273fzql9Tc+C3RD2v8ju8c/ljRfr1nu+KW3rhb79urol+0KNW//reNvvf0PJC9W0wP1eZdmK5XlqYiB5Pmd849vP7eRb5RP45/4Z+v3/27bf/qZ8GyHKyJ7/YeP7j/+g5XGP7en/t9zIoZuL/S1q7+z/p+upibqczrZ/3XawAdZdwAAAAAAAAAAAAAAAAAAAAAAAADQqUxEHI4kk9tKZzK5XO0e3n+NkUyxVK4cPVdaWZqL6r2yx6I/0/ipy9Gm30Odqv8efiN//K78fyPiLxHx7uBwNZ/Ll4pzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtbn/f+r7wV63DgA4MEN9vW4BANBlSTbb6yYAAN02tKfSwwfWDgCge/Z2/AcA/ggc/wHg8XOP479/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBBnT51Kp02f9lYz6f5uYurKwuli8fmCuWF3OJKPpcvLV/IzZdK88VCLl9abPtCl2sPxVLpwnQsrVyarBTKlcny6tqZxdLKUuXM+cXZ+cKZQn/XIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzpVX1xZmi8XCskRPEgvf1PrhYWmPxN4ScbnWfw9Le/YvEQPbe4nh3uycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4BvwcAAP//JJMi3A==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) 2.848723851s ago: executing program 0 (id=3512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000180)={0xff, 0xffffffffffffe71c, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff20850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) r8 = syz_pidfd_open(r5, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0xfffffffd, 0xfffffb3b, 0x0, 'queue0\x00', 0x9bf2}) close_range(r8, 0xffffffffffffffff, 0x0) 2.782294645s ago: executing program 0 (id=3515): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) timer_create(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000280)={[{@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}, {@data_err_abort}, {@sysvgroups}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f00000001c0)=0x8) socket(0x11, 0x80a, 0x0) 2.491158532s ago: executing program 3 (id=3519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000cf00"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000014000000020a010400000000000000000000000020000000080a0107fffffff800000000010000000900010073797a30"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x110, &(0x7f0000000280)=0x1, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x6}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2.154439702s ago: executing program 4 (id=3523): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000f14010027bd0ef75bbc556579f41590b96a000000df25080045006d6164b1da1ae088a700"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = gettid() lsetxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, 0x0, 0x0) 2.068890577s ago: executing program 3 (id=3526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 2.02757326s ago: executing program 3 (id=3527): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fd, &(0x7f0000000600)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.813074043s ago: executing program 0 (id=3532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000180)={0xff, 0xffffffffffffe71c, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff20850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) r8 = syz_pidfd_open(r5, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0xfffffffd, 0xfffffb3b, 0x0, 'queue0\x00', 0x9bf2}) close_range(r8, 0xffffffffffffffff, 0x0) 1.587620026s ago: executing program 3 (id=3536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0xffffffe9, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000007900000000100000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001400)=ANY=[@ANYBLOB="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"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x81f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd', @ANYRESHEX]) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r5 = epoll_create(0x400) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r9 = dup(r7) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x3f, 0x1101}}) 1.17369129s ago: executing program 0 (id=3538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 1.101043854s ago: executing program 0 (id=3539): gettid() unshare(0x6020400) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000540)="80e443f6", 0x4}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.088436325s ago: executing program 4 (id=3540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in, 0x2, 0x32}, @in6=@loopback, {}, {0x4}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x180}}]}, 0x158}}, 0x0) 1.060220117s ago: executing program 4 (id=3541): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xf, 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/../file0/file0\x00', 0x100, 0x103) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, 0x0) r4 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2b706964732005229dc8576d56afd49f7ba792fc0de6bdd7f6bfae00d546ad0657df991182f66b4a5a3b15bf428be423476f49a5219181e1901b737c40"], 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') r6 = msgget(0x0, 0x2c4) msgsnd(r6, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6], 0x2000, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000280)=0x3, 0x4) msgctl$IPC_RMID(r6, 0x0) 1.025796169s ago: executing program 3 (id=3542): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x32a000, 0x800}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xff, 0x8000, 0x10, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x40, 0x5, 0x8}}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfff}, [@generic={0x7f, 0xa, 0xc, 0x800, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x95}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7d1}, @map_val={0x18, 0x5, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xfffffff4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x3, 0x8, 0x7, 0xc, 0x8}, @generic={0x7, 0x3, 0x4, 0x9, 0xb}]}, &(0x7f00000006c0)='GPL\x00', 0x4fa, 0xfe, &(0x7f0000000700)=""/254, 0x41000, 0x12, '\x00', r9, @fallback=0x15, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x4, 0xf, 0xfffffff4, 0xb}, 0x10, 0x0, r8, 0x6, &(0x7f0000000a00)=[r11], &(0x7f0000000a40)=[{0x3, 0x3, 0x8, 0x8}, {0x2, 0x2, 0xe, 0x2}, {0x2, 0x4, 0xe, 0xa}, {0x3, 0x1, 0x1, 0x6}, {0x4, 0x2}, {0x3, 0x5, 0x6, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x20000000, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xdbed, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) r13 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x400000000040, 0x0, 0x0, 0x400000000070, 0x4000000000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000002000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138) 914.945585ms ago: executing program 5 (id=3545): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@data_writeback}, {@nombcache}, {@nolazytime}, {}]}, 0x1, 0x786, &(0x7f0000000a00)="$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") socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x4a77, &(0x7f00000001c0)={0x0, 0x8000f8e0, 0x10000, 0x3, 0x17d}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000080)="b1", 0xfef4, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 824.541791ms ago: executing program 5 (id=3546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) 823.928241ms ago: executing program 4 (id=3547): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x4e20, @broadcast}}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000200)=0x1c, 0x80000) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast1, 0x8, 0x2, 0x94, 0x400, 0x3ff, 0x250}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYRES8=r3, @ANYRES32=r1, @ANYRES64=r2, @ANYRESHEX=r2], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0xf423f}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 803.441662ms ago: executing program 5 (id=3548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000180)={0xff, 0xffffffffffffe71c, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff20850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) r8 = syz_pidfd_open(r5, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0xfffffffd, 0xfffffb3b, 0x0, 'queue0\x00', 0x9bf2}) close_range(r8, 0xffffffffffffffff, 0x0) 773.409334ms ago: executing program 5 (id=3549): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xc010, &(0x7f0000000000), 0x1, 0x25d, &(0x7f0000000680)="$eJzs3T+IHGUcBuB3ZndzXrJI1EYQ/4CI6MERO8EmaRQCEoKIoEJExEZJhJhgl7OysdBaJZVNEDujpaQJNopgFeMVZ6Ggh8UdFlqM7M6enHer593u7YSb54G5mbmZb37fsPN+s83MBmito0mOJ+kkWUjSS1Js3uGBejo6Wr08f/1MUlXP/FYM96vXaxvtjiRZSvJ4kmtlkde6ycWrL6z8fuOph9+90Hvo46vPz8/0JEdWV5afXv/o1DufnXzs4jff/XKqyPH0/3Fe01eM+V+3SO7cj2K3iKLbdA/4P06/9en3g9zfleTBYf57KVN/eO+dP3Stl0c//Le27//67T2z7CswfVXVG9wDlyqgdcok/RTlYpJ6uSwXF+vv8Dc7h8vXz51/c+HVcxfOvtL0SAVMSz9ZfvKLuc+PbMn/z506/8DBNcj/s6ev/DBYXu803Rtgmm6uVdXYDffWs0H+F1669EjkH1pnL/k/8dM+dwqYCfd/aC/5h/aSf2gv+Yf2kn84wHr/vVn+ob3kH9pL/qF95kbzzfkHANqlmtvd88KHhu8MAA6CpscfAAAAAAAAAAAAAAAAAABgu8vz189sTLOq+dUHyeqJJN1x9TvD3yNObhv+PbxWDHb7W1E3m8iL9094gAl90vDT17f/2Gz9r+9rtv6ls8nS20mOdbvbr79idP3t3R07bO+9PGGBXSq2rD/x3Gzrb/XnlWbrn7yRfDkYf46NG3/K3D2cjx9/+ju/YnlHb/wx4QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmb8CAAD///WqblI=") r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xec) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) llistxattr(&(0x7f00000001c0)='./bus\x00', 0x0, 0x19) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) listen(0xffffffffffffffff, 0x3bd) chroot(&(0x7f0000000080)='./bus\x00') syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x0) sendmsg$802154_dgram(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)="18320a7605166c8c8d153ef2c2dd63d5fe12b3ba1db19020cae010546325c35c355f9316927c159a8f9f559600c2c57ee7289ba6a0e075a9a6ae8282b4ebee4d0da54a245f3d2763bb96fdfc065a33dca87cfcb4ba3e2b7b153a5fad2b7b624474e0155ff1302059afe26c51f5050c489dc0da7b54664fade1cb9ff870280a42c714211617ed89e7a631bbbc0600b066326f2f3d844afc1780c466007778c0cc815c", 0xa2}}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 714.294157ms ago: executing program 4 (id=3550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 652.907731ms ago: executing program 4 (id=3551): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000f14010027bd0ef75bbc556579f41590b96a000000df25080045006d6164b1da1ae088a700"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, 0x0, 0x0) 377.717587ms ago: executing program 1 (id=3553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in, 0x2, 0x32}, @in6=@loopback, {}, {0x4}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x180}}]}, 0x158}}, 0x0) 356.341949ms ago: executing program 1 (id=3554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000cf00"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000014000000020a010400000000000000000000000020000000080a0107fffffff800000000010000000900010073797a30"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x110, &(0x7f0000000280)=0x1, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x6}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 280.955303ms ago: executing program 1 (id=3555): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 204.804868ms ago: executing program 0 (id=3556): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@data_writeback}, {@nombcache}, {@nolazytime}, {}]}, 0x1, 0x786, &(0x7f0000000a00)="$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") socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x4a77, &(0x7f00000001c0)={0x0, 0x8000f8e0, 0x10000, 0x3, 0x17d}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000080)="b1", 0xfef4, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 204.493678ms ago: executing program 1 (id=3557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 107.989453ms ago: executing program 1 (id=3558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) 63.365536ms ago: executing program 3 (id=3559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x35, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback=r0, r0, 0x0, 0x4051, r0, @void, @value=r0, @void, @void, r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r3, r2, 0x0, 0x8) 62.910566ms ago: executing program 1 (id=3560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000180)={0xff, 0xffffffffffffe71c, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff20850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) r8 = syz_pidfd_open(r5, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0xfffffffd, 0xfffffb3b, 0x0, 'queue0\x00', 0x9bf2}) close_range(r8, 0xffffffffffffffff, 0x0) 62.447136ms ago: executing program 5 (id=3561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 0s ago: executing program 5 (id=3562): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x4e20, @broadcast}}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000200)=0x1c, 0x80000) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast1, 0x8, 0x2, 0x94, 0x400, 0x3ff, 0x250}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYRES8=r3, @ANYRES32=r1, @ANYRES64=r2, @ANYRESHEX=r2], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r7, 0xf423f}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) kernel console output (not intermixed with test programs): 295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.5.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdf9ebfd169 code=0x7ffc0000 [ 187.381311][T12097] loop4: detected capacity change from 0 to 1024 [ 187.381760][T12097] EXT4-fs: Ignoring removed bh option [ 187.433977][T12099] tmpfs: Bad value for 'mpol' [ 187.572689][T12104] loop0: detected capacity change from 0 to 256 [ 187.601896][T12104] lo speed is unknown, defaulting to 1000 [ 187.640383][T12110] tmpfs: Bad value for 'mpol' [ 187.682189][T12108] SELinux: policydb magic number 0x6f6d656d does not match expected magic number 0xf97cff8c [ 187.700540][T12108] SELinux: failed to load policy [ 187.714727][T12112] loop3: detected capacity change from 0 to 8192 [ 187.782452][T12126] loop5: detected capacity change from 0 to 2048 [ 187.802032][T12116] sd 0:0:1:0: device reset [ 187.838266][T12135] loop3: detected capacity change from 0 to 2048 [ 187.857157][T12136] loop5: detected capacity change from 0 to 2048 [ 187.878618][T12135] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 187.919467][T12144] loop5: detected capacity change from 0 to 512 [ 187.951829][T12146] loop3: detected capacity change from 0 to 1024 [ 187.960872][T12142] loop0: detected capacity change from 0 to 8192 [ 187.967590][T12146] EXT4-fs: Ignoring removed bh option [ 187.998481][T12144] EXT4-fs (loop5): 1 orphan inode deleted [ 188.006920][ T3324] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 188.020588][T12144] 9pnet_fd: Insufficient options for proto=fd [ 188.084666][T12152] loop0: detected capacity change from 0 to 8192 [ 188.130692][T12157] loop3: detected capacity change from 0 to 8192 [ 188.211108][T12166] loop0: detected capacity change from 0 to 2048 [ 188.284535][T12173] program syz.3.3070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.327155][T12175] loop3: detected capacity change from 0 to 1024 [ 188.334583][T12175] EXT4-fs: Ignoring removed bh option [ 188.373145][T12178] tmpfs: Bad value for 'mpol' [ 188.540566][T12187] loop0: detected capacity change from 0 to 2048 [ 188.558150][T12187] loop0: p2 < > p3 p4 [ 188.562665][T12187] loop0: p3 start 65535 is beyond EOD, truncated [ 188.569116][T12187] loop0: p4 size 8192 extends beyond EOD, truncated [ 188.588665][T12199] netlink: 'syz.5.3079': attribute type 4 has an invalid length. [ 188.598439][T12199] rdma_rxe: rxe_newlink: failed to add lo [ 188.613459][T12199] loop5: detected capacity change from 0 to 512 [ 188.613473][T12202] loop3: detected capacity change from 0 to 2048 [ 188.676689][T12204] __nla_validate_parse: 11 callbacks suppressed [ 188.676710][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3081'. [ 188.715859][T12216] loop4: detected capacity change from 0 to 1024 [ 188.728245][T12216] EXT4-fs: Ignoring removed bh option [ 188.734060][T12216] EXT4-fs: inline encryption not supported [ 188.741382][T12216] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.753776][T12216] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 188.763406][T12216] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.3085: lblock 2 mapped to illegal pblock 2 (length 1) [ 188.778488][T12216] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.3085: lblock 0 mapped to illegal pblock 48 (length 1) [ 188.802270][T12224] loop1: detected capacity change from 0 to 2048 [ 188.810360][T12216] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3085: Failed to acquire dquot type 0 [ 188.824348][T12216] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 188.825038][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3089'. [ 188.843307][T12216] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #11: comm syz.4.3085: mark_inode_dirty error [ 188.843330][T12224] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 188.843581][T12221] loop3: detected capacity change from 0 to 1024 [ 188.869301][T12221] EXT4-fs: Ignoring removed bh option [ 188.871180][T12216] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 188.885241][T12216] EXT4-fs (loop4): 1 orphan inode deleted [ 188.894129][ T3324] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.909523][ T3324] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 188.921901][T12216] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 188.937857][T12221] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 188.953202][T12233] loop1: detected capacity change from 0 to 1024 [ 188.998531][T12233] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.1.3091: corrupted in-inode xattr: bad magic number in in-inode xattr [ 188.999463][T12235] loop3: detected capacity change from 0 to 2048 [ 189.033039][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3094'. [ 189.045132][T12239] loop4: detected capacity change from 0 to 8192 [ 189.155478][T12248] loop1: detected capacity change from 0 to 8192 [ 189.195331][T12261] loop4: detected capacity change from 0 to 2048 [ 189.258044][T12268] pim6reg: entered allmulticast mode [ 189.266041][T12268] pim6reg: left allmulticast mode [ 189.272963][T12261] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 189.298253][T12270] loop0: detected capacity change from 0 to 1024 [ 189.305181][T12270] EXT4-fs: Ignoring removed bh option [ 189.321638][T12270] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 189.463043][T12288] loop1: detected capacity change from 0 to 2048 [ 189.507068][T12290] loop0: detected capacity change from 0 to 128 [ 189.514670][T12290] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 189.528150][T12290] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 189.548380][T12288] loop1: p2 < > p3 p4 [ 189.586897][T12284] loop3: detected capacity change from 0 to 2048 [ 189.601039][T12288] loop1: p3 start 65535 is beyond EOD, truncated [ 189.607474][T12288] loop1: p4 size 8192 extends beyond EOD, truncated [ 189.700083][T12297] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 189.706672][T12297] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 189.714410][T12297] vhci_hcd vhci_hcd.0: Device attached [ 189.895382][T12302] loop3: detected capacity change from 0 to 2048 [ 189.902613][T12304] FAULT_INJECTION: forcing a failure. [ 189.902613][T12304] name failslab, interval 1, probability 0, space 0, times 0 [ 189.915334][T12304] CPU: 0 UID: 0 PID: 12304 Comm: syz.5.3112 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 189.915375][T12304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 189.915389][T12304] Call Trace: [ 189.915398][T12304] [ 189.915408][T12304] dump_stack_lvl+0xf2/0x150 [ 189.915511][T12304] dump_stack+0x15/0x1a [ 189.915580][T12304] should_fail_ex+0x24a/0x260 [ 189.915618][T12304] ? shrinker_alloc+0x3b/0x640 [ 189.915659][T12304] should_failslab+0x8f/0xb0 [ 189.915698][T12304] __kmalloc_cache_noprof+0x4e/0x320 [ 189.915726][T12304] shrinker_alloc+0x3b/0x640 [ 189.915821][T12304] ? rcu_sync_init+0x32/0x40 [ 189.915854][T12304] alloc_super+0x451/0x5a0 [ 189.915884][T12304] ? __pfx_set_anon_super_fc+0x10/0x10 [ 189.915918][T12304] sget_fc+0x259/0x700 [ 189.915945][T12304] ? __pfx_set_anon_super_fc+0x10/0x10 [ 189.916014][T12304] ? __pfx_ramfs_fill_super+0x10/0x10 [ 189.916054][T12304] get_tree_nodev+0x28/0xf0 [ 189.916080][T12304] ramfs_get_tree+0x1c/0x30 [ 189.916159][T12304] vfs_get_tree+0x56/0x1e0 [ 189.916195][T12304] vfs_cmd_create+0x83/0x130 [ 189.916238][T12304] __se_sys_fsconfig+0x6a3/0x980 [ 189.916349][T12304] __x64_sys_fsconfig+0x67/0x80 [ 189.916413][T12304] x64_sys_call+0x2b58/0x2dc0 [ 189.916444][T12304] do_syscall_64+0xc9/0x1c0 [ 189.916473][T12304] ? clear_bhb_loop+0x55/0xb0 [ 189.916559][T12304] ? clear_bhb_loop+0x55/0xb0 [ 189.916585][T12304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.916661][T12304] RIP: 0033:0x7fdf9ebfd169 [ 189.916676][T12304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.916706][T12304] RSP: 002b:00007fdf9d267038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 189.916729][T12304] RAX: ffffffffffffffda RBX: 00007fdf9ee15fa0 RCX: 00007fdf9ebfd169 [ 189.916746][T12304] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 189.916761][T12304] RBP: 00007fdf9d267090 R08: 0000000000000000 R09: 0000000000000000 [ 189.916776][T12304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.916791][T12304] R13: 0000000000000000 R14: 00007fdf9ee15fa0 R15: 00007ffcf143e3f8 [ 189.916859][T12304] [ 190.141993][T12298] vhci_hcd: connection closed [ 190.142339][ T3324] vhci_hcd: stop threads [ 190.151393][ T3324] vhci_hcd: release socket [ 190.155876][ T3324] vhci_hcd: disconnect device [ 190.178608][T12302] EXT4-fs (loop3): unsupported inode size: 1536 [ 190.184925][T12302] EXT4-fs (loop3): blocksize: 2048 [ 190.217411][ T8] usb 10-1: enqueue for inactive port 0 [ 190.243815][T12308] tmpfs: Bad value for 'mpol' [ 190.248430][T12312] loop3: detected capacity change from 0 to 1024 [ 190.254395][T12314] netlink: 'syz.5.3117': attribute type 10 has an invalid length. [ 190.256120][T12312] EXT4-fs: Ignoring removed bh option [ 190.265836][T12311] pim6reg: entered allmulticast mode [ 190.279232][T12311] pim6reg: left allmulticast mode [ 190.286444][T12314] netlink: 'syz.5.3117': attribute type 10 has an invalid length. [ 190.294564][T12314] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3117'. [ 190.306995][T12314] team0: entered promiscuous mode [ 190.308950][T12312] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 190.312231][T12314] team_slave_0: entered promiscuous mode [ 190.326438][T12314] team_slave_1: entered promiscuous mode [ 190.333445][T12314] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.340633][T12314] bridge0: port 4(team0) entered blocking state [ 190.346944][T12314] bridge0: port 4(team0) entered disabled state [ 190.356709][T12314] team0: entered allmulticast mode [ 190.361915][T12314] team_slave_0: entered allmulticast mode [ 190.367708][T12314] team_slave_1: entered allmulticast mode [ 190.375256][T12314] bridge0: port 4(team0) entered blocking state [ 190.381572][T12314] bridge0: port 4(team0) entered forwarding state [ 190.402838][T12320] loop5: detected capacity change from 0 to 2048 [ 190.410103][T12320] EXT4-fs: inline encryption not supported [ 190.428187][ T8] usb 10-1: enqueue for inactive port 0 [ 190.474276][T12330] loop3: detected capacity change from 0 to 2048 [ 190.546603][T12330] EXT4-fs: Ignoring removed bh option [ 190.591101][T12330] EXT4-fs mount: 159 callbacks suppressed [ 190.591122][T12330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.693725][ T141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.724706][T12334] lo speed is unknown, defaulting to 1000 [ 190.747066][T12347] loop0: detected capacity change from 0 to 8192 [ 190.775939][ T141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.827629][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3126'. [ 190.864957][ T141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.899649][ T4232] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.924757][ T4232] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 190.937413][ T4232] EXT4-fs (loop5): This should not happen!! Data will be lost [ 190.937413][ T4232] [ 190.947065][ T4232] EXT4-fs (loop5): Total free blocks count 0 [ 190.953162][ T4232] EXT4-fs (loop5): Free/Dirty block details [ 190.959193][ T4232] EXT4-fs (loop5): free_blocks=2415919104 [ 190.964958][ T4232] EXT4-fs (loop5): dirty_blocks=8192 [ 190.970298][ T4232] EXT4-fs (loop5): Block reservation details [ 190.976288][ T4232] EXT4-fs (loop5): i_reserved_data_blocks=512 [ 191.002704][ T3324] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 191.015540][ T3324] EXT4-fs (loop5): This should not happen!! Data will be lost [ 191.015540][ T3324] [ 191.038409][ T141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.074406][T12334] chnl_net:caif_netlink_parms(): no params data found [ 191.098091][T12318] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.177507][T12369] netlink: 'syz.0.3133': attribute type 10 has an invalid length. [ 191.192906][ T3324] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 191.205291][ T3324] EXT4-fs (loop3): This should not happen!! Data will be lost [ 191.205291][ T3324] [ 191.215028][ T3324] EXT4-fs (loop3): Total free blocks count 0 [ 191.221098][ T3324] EXT4-fs (loop3): Free/Dirty block details [ 191.227182][ T3324] EXT4-fs (loop3): free_blocks=2415919104 [ 191.233187][ T3324] EXT4-fs (loop3): dirty_blocks=8224 [ 191.236821][T12374] loop5: detected capacity change from 0 to 1024 [ 191.238841][ T3324] EXT4-fs (loop3): Block reservation details [ 191.245587][T12374] EXT4-fs: Ignoring removed bh option [ 191.251072][ T3324] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 191.256947][T12375] netlink: 'syz.0.3133': attribute type 10 has an invalid length. [ 191.265031][T12374] EXT4-fs: inline encryption not supported [ 191.270330][T12375] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3133'. [ 191.276692][T12374] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.298188][ T3324] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 191.307859][T12374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 191.322923][T12369] bridge0: port 3(team0) entered disabled state [ 191.330485][T12374] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.3135: lblock 2 mapped to illegal pblock 2 (length 1) [ 191.347694][T12377] loop0: detected capacity change from 0 to 2048 [ 191.348486][T12374] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 48: comm syz.5.3135: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.354423][T12377] EXT4-fs: inline encryption not supported [ 191.375026][T12369] team0: left allmulticast mode [ 191.380100][T12369] team_slave_0: left allmulticast mode [ 191.385580][T12369] team_slave_1: left allmulticast mode [ 191.388724][T12374] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3135: Failed to acquire dquot type 0 [ 191.391060][T12369] team0: left promiscuous mode [ 191.407042][T12369] team_slave_0: left promiscuous mode [ 191.412543][T12369] team_slave_1: left promiscuous mode [ 191.418258][T12369] bridge0: port 3(team0) entered disabled state [ 191.426833][T12377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.440076][ T141] team0: left allmulticast mode [ 191.445004][ T141] team_slave_0: left allmulticast mode [ 191.447416][T12374] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 191.450557][ T141] team_slave_1: left allmulticast mode [ 191.465579][ T141] bridge0: port 3(team0) entered disabled state [ 191.468326][T12374] EXT4-fs error (device loop5): ext4_evict_inode:256: inode #11: comm syz.5.3135: mark_inode_dirty error [ 191.484624][ T141] bridge_slave_1: left allmulticast mode [ 191.490492][ T141] bridge_slave_1: left promiscuous mode [ 191.496139][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.496455][T12374] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 191.514545][T12374] EXT4-fs (loop5): 1 orphan inode deleted [ 191.520815][ T141] bridge_slave_0: left allmulticast mode [ 191.526493][ T141] bridge_slave_0: left promiscuous mode [ 191.532293][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.539711][ T1026] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.548118][T12374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.556927][ T1026] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 0 [ 191.578493][ T8] usb usb10-port1: attempt power cycle [ 191.596139][T12374] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 191.638550][T10461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.650493][T12383] tmpfs: Bad value for 'mpol' [ 191.673354][T12387] netlink: 'syz.5.3137': attribute type 10 has an invalid length. [ 191.686831][ T141] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 191.713026][T12389] loop3: detected capacity change from 0 to 2048 [ 191.723698][T12391] loop4: detected capacity change from 0 to 2048 [ 191.732638][T12392] netlink: 'syz.5.3137': attribute type 10 has an invalid length. [ 191.737770][T12391] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 191.740571][T12392] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3137'. [ 191.750056][T12389] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 191.828072][T12398] loop3: detected capacity change from 0 to 8192 [ 191.914485][T12406] tmpfs: Bad value for 'mpol' [ 191.927981][T12407] loop3: detected capacity change from 0 to 1024 [ 191.934795][T12407] EXT4-fs: Ignoring removed bh option [ 191.940588][T12407] EXT4-fs: inline encryption not supported [ 191.946897][T12407] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.959073][T12409] loop4: detected capacity change from 0 to 1024 [ 191.959315][T12407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 191.965839][T12409] EXT4-fs: Ignoring removed bh option [ 191.974683][T12407] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.3143: lblock 2 mapped to illegal pblock 2 (length 1) [ 191.979223][T12409] EXT4-fs: inline encryption not supported [ 191.993555][T12407] __quota_error: 233 callbacks suppressed [ 191.993573][T12407] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 191.999571][T12409] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.005714][T12407] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.3143: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.038556][T12409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 192.039055][T12407] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 192.047870][T12409] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.3147: lblock 2 mapped to illegal pblock 2 (length 1) [ 192.055472][T12407] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3143: Failed to acquire dquot type 0 [ 192.070121][T12409] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 192.088841][T12409] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.3147: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.089156][T12409] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 192.104181][T12407] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 192.111733][T12409] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3147: Failed to acquire dquot type 0 [ 192.132797][T12409] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 192.133401][T12407] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.3143: mark_inode_dirty error [ 192.143116][T12409] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #11: comm syz.4.3147: mark_inode_dirty error [ 192.154515][T12407] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 192.166051][T12409] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 192.175488][T12407] EXT4-fs (loop3): 1 orphan inode deleted [ 192.185271][T12409] EXT4-fs (loop4): 1 orphan inode deleted [ 192.191342][ T50] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.197199][T12409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.223840][T12407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.224983][ T50] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 192.244852][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 192.256813][ T50] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.271482][ T50] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 192.279949][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 192.292312][T12409] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 192.304284][T12407] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 192.317411][T11685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.353080][T12415] loop4: detected capacity change from 0 to 1024 [ 192.359797][T12415] EXT4-fs: Ignoring removed bh option [ 192.365273][T12415] EXT4-fs: inline encryption not supported [ 192.371673][T12415] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.382987][T12415] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 192.392781][T12415] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.3149: lblock 2 mapped to illegal pblock 2 (length 1) [ 192.407083][T12415] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 192.415257][T12415] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.3149: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.429545][T12415] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 192.438442][T12415] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3149: Failed to acquire dquot type 0 [ 192.451594][T12415] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 192.461615][T12415] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #11: comm syz.4.3149: mark_inode_dirty error [ 192.473179][T12415] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 192.483522][T12415] EXT4-fs (loop4): 1 orphan inode deleted [ 192.490513][T12415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.503055][ T4232] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.517880][ T4232] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 192.526352][ T4232] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 0 [ 192.538512][T12415] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 192.560688][T11685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.680633][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.690358][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.699852][ T141] bond0 (unregistering): Released all slaves [ 192.707957][T12375] team0: entered promiscuous mode [ 192.713020][T12375] team_slave_0: entered promiscuous mode [ 192.718840][T12375] team_slave_1: entered promiscuous mode [ 192.725361][T12375] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.732550][T12375] bridge0: port 3(team0) entered blocking state [ 192.738892][T12375] bridge0: port 3(team0) entered disabled state [ 192.745422][T12375] team0: entered allmulticast mode [ 192.750584][T12375] team_slave_0: entered allmulticast mode [ 192.756398][T12375] team_slave_1: entered allmulticast mode [ 192.763618][T12375] bridge0: port 3(team0) entered blocking state [ 192.769953][T12375] bridge0: port 3(team0) entered forwarding state [ 192.776694][T12334] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.783778][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.816414][T12420] loop4: detected capacity change from 0 to 2048 [ 192.842342][T12334] bridge_slave_0: entered allmulticast mode [ 192.856162][T12334] bridge_slave_0: entered promiscuous mode [ 192.863951][T12334] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.871131][T12334] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.879167][T12334] bridge_slave_1: entered allmulticast mode [ 192.885947][T12334] bridge_slave_1: entered promiscuous mode [ 192.905474][T12420] loop4: p2 < > p3 p4 [ 192.910905][T12420] loop4: p3 start 65535 is beyond EOD, truncated [ 192.917284][T12420] loop4: p4 size 8192 extends beyond EOD, truncated [ 192.934017][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.953668][T12334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.968747][T12334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.996895][T12334] team0: Port device team_slave_0 added [ 193.005559][T12334] team0: Port device team_slave_1 added [ 193.033668][T12334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.040733][T12334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.066684][T12334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.109005][T12387] bridge0: port 4(team0) entered disabled state [ 193.115984][T12387] team0: left allmulticast mode [ 193.120945][T12387] team_slave_0: left allmulticast mode [ 193.126417][T12387] team_slave_1: left allmulticast mode [ 193.132037][T12387] team0: left promiscuous mode [ 193.136897][T12387] team_slave_0: left promiscuous mode [ 193.142490][T12387] team_slave_1: left promiscuous mode [ 193.148230][T12387] bridge0: port 4(team0) entered disabled state [ 193.154610][ T29] audit: type=1326 audit(16097360.441:33538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b414d169 code=0x7ffc0000 [ 193.179167][T12392] team0: entered promiscuous mode [ 193.184436][T12392] team_slave_0: entered promiscuous mode [ 193.190526][T12392] team_slave_1: entered promiscuous mode [ 193.197138][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.204469][T12392] bridge0: port 4(team0) entered blocking state [ 193.210796][T12392] bridge0: port 4(team0) entered disabled state [ 193.217233][T12392] team0: entered allmulticast mode [ 193.222466][T12392] team_slave_0: entered allmulticast mode [ 193.228313][T12392] team_slave_1: entered allmulticast mode [ 193.235181][T12392] bridge0: port 4(team0) entered blocking state [ 193.241501][T12392] bridge0: port 4(team0) entered forwarding state [ 193.248314][ T141] tipc: Left network mode [ 193.253134][T12334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.260125][T12334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.286097][T12334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.299027][T12427] loop0: detected capacity change from 0 to 2048 [ 193.335358][T12427] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 193.338440][T12334] hsr_slave_0: entered promiscuous mode [ 193.357132][T11523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.358478][T12334] hsr_slave_1: entered promiscuous mode [ 193.372641][T12334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.380744][T12334] Cannot create hsr debugfs directory [ 193.479236][T12440] netlink: 'syz.5.3159': attribute type 10 has an invalid length. [ 193.487377][ T141] hsr_slave_0: left promiscuous mode [ 193.493398][ T141] hsr_slave_1: left promiscuous mode [ 193.502506][ T141] veth1_macvtap: left promiscuous mode [ 193.507694][ T8] usb usb10-port1: unable to enumerate USB device [ 193.508582][ T141] veth0_macvtap: left promiscuous mode [ 193.520861][ T141] veth1_vlan: left promiscuous mode [ 193.529593][ T141] veth0_vlan: left promiscuous mode [ 193.541677][T12447] loop3: detected capacity change from 0 to 1024 [ 193.549172][T12447] EXT4-fs: Ignoring removed bh option [ 193.560604][T12447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.571755][T12452] netlink: 'syz.5.3159': attribute type 10 has an invalid length. [ 193.607036][T11523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.630865][ T141] team_slave_1 (unregistering): left promiscuous mode [ 193.638165][ T141] team0 (unregistering): Port device team_slave_1 removed [ 193.650650][ T141] team_slave_0 (unregistering): left promiscuous mode [ 193.661312][ T141] team0 (unregistering): Port device team_slave_0 removed [ 193.704977][ T9660] smc: removing ib device sz1 [ 193.720737][T12440] bridge0: port 4(team0) entered disabled state [ 193.730701][T12440] team0: left allmulticast mode [ 193.735703][T12440] team_slave_0: left allmulticast mode [ 193.741243][T12440] team_slave_1: left allmulticast mode [ 193.746815][T12440] team0: left promiscuous mode [ 193.751650][T12440] team_slave_0: left promiscuous mode [ 193.757187][T12440] team_slave_1: left promiscuous mode [ 193.762823][T12440] bridge0: port 4(team0) entered disabled state [ 193.780244][ T35] lo speed is unknown, defaulting to 1000 [ 193.786173][T12452] team0: entered promiscuous mode [ 193.791344][T12452] team_slave_0: entered promiscuous mode [ 193.797120][T12452] team_slave_1: entered promiscuous mode [ 193.812848][T12466] loop3: detected capacity change from 0 to 2048 [ 193.821390][T12452] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.828796][T12452] bridge0: port 4(team0) entered blocking state [ 193.835104][T12452] bridge0: port 4(team0) entered disabled state [ 193.847225][T12466] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 193.856805][T12470] loop4: detected capacity change from 0 to 512 [ 193.885663][T12470] EXT4-fs (loop4): 1 orphan inode deleted [ 193.895328][T12452] team0: entered allmulticast mode [ 193.897554][ T36] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 193.900777][T12452] team_slave_0: entered allmulticast mode [ 193.917808][T12452] team_slave_1: entered allmulticast mode [ 193.926477][T12470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.978826][T12452] bridge0: port 4(team0) entered blocking state [ 193.985160][T12452] bridge0: port 4(team0) entered forwarding state [ 193.989380][T12470] 9pnet_fd: Insufficient options for proto=fd [ 194.086525][T11685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.104781][T12485] loop3: detected capacity change from 0 to 8192 [ 194.126861][T12490] netlink: 'syz.4.3177': attribute type 10 has an invalid length. [ 194.135348][T12491] serio: Serial port ptm0 [ 194.144334][T12490] netlink: 'syz.4.3177': attribute type 10 has an invalid length. [ 194.152293][T12490] __nla_validate_parse: 3 callbacks suppressed [ 194.152308][T12490] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3177'. [ 194.168722][T12490] team0: entered promiscuous mode [ 194.173815][T12490] team_slave_0: entered promiscuous mode [ 194.179773][T12490] team_slave_1: entered promiscuous mode [ 194.192497][T12490] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.201109][T12490] bridge0: port 3(team0) entered blocking state [ 194.207554][T12490] bridge0: port 3(team0) entered disabled state [ 194.214734][T12490] team0: entered allmulticast mode [ 194.219934][T12490] team_slave_0: entered allmulticast mode [ 194.225724][T12490] team_slave_1: entered allmulticast mode [ 194.233878][T12490] bridge0: port 3(team0) entered blocking state [ 194.240220][T12490] bridge0: port 3(team0) entered forwarding state [ 194.257066][T12497] loop4: detected capacity change from 0 to 2048 [ 194.267727][T12497] EXT4-fs: inline encryption not supported [ 194.281455][T12500] pim6reg: entered allmulticast mode [ 194.297993][T12500] loop5: detected capacity change from 0 to 128 [ 194.307889][T12497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.322741][T12500] pim6reg: left allmulticast mode [ 194.394179][T12505] loop3: detected capacity change from 0 to 8192 [ 194.415990][T12509] loop0: detected capacity change from 0 to 1024 [ 194.423074][T11685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.430863][T12509] EXT4-fs: Ignoring removed bh option [ 194.437720][T12509] EXT4-fs: inline encryption not supported [ 194.445303][T12509] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.460361][T12509] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 194.476701][T12509] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.3185: lblock 2 mapped to illegal pblock 2 (length 1) [ 194.485863][T12513] loop3: detected capacity change from 0 to 2048 [ 194.498780][T12509] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.3185: lblock 0 mapped to illegal pblock 48 (length 1) [ 194.513291][T12509] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.3185: Failed to acquire dquot type 0 [ 194.518669][T12514] loop5: detected capacity change from 0 to 512 [ 194.525846][T12513] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 194.546600][T12509] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 194.559004][T12509] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.3185: mark_inode_dirty error [ 194.575222][T12509] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 194.577380][T12334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.600008][T12519] loop4: detected capacity change from 0 to 512 [ 194.602518][T12509] EXT4-fs (loop0): 1 orphan inode deleted [ 194.609813][T12519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 194.612554][T12509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.634713][ T11] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.637439][T12334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.657995][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 194.658506][T12519] EXT4-fs (loop4): 1 truncate cleaned up [ 194.671388][T12524] bridge0: port 3(team0) entered disabled state [ 194.675792][T12526] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3190'. [ 194.682245][T12524] team0: left allmulticast mode [ 194.695385][T12524] team_slave_0: left allmulticast mode [ 194.700937][T12524] team_slave_1: left allmulticast mode [ 194.702645][T12519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.706420][T12524] team0: left promiscuous mode [ 194.720864][T12514] EXT4-fs (loop5): 1 orphan inode deleted [ 194.723606][T12524] team_slave_0: left promiscuous mode [ 194.734838][T12524] team_slave_1: left promiscuous mode [ 194.737791][T12514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.740380][T12524] bridge0: port 3(team0) entered disabled state [ 194.758372][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3189'. [ 194.759183][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 194.780261][T12509] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 194.787301][T12334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.800352][T12526] team0: entered promiscuous mode [ 194.805431][T12526] team_slave_0: entered promiscuous mode [ 194.805571][T12526] team_slave_1: entered promiscuous mode [ 194.819187][T12526] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.826320][T12526] bridge0: port 3(team0) entered blocking state [ 194.832762][T12526] bridge0: port 3(team0) entered disabled state [ 194.839285][T12526] team0: entered allmulticast mode [ 194.839575][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.844399][T12526] team_slave_0: entered allmulticast mode [ 194.859272][T12526] team_slave_1: entered allmulticast mode [ 194.866540][T10461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.867906][T12526] bridge0: port 3(team0) entered blocking state [ 194.881873][T12526] bridge0: port 3(team0) entered forwarding state [ 194.892832][T12528] loop0: detected capacity change from 0 to 2048 [ 194.904587][T12528] EXT4-fs: Ignoring removed bh option [ 194.916598][T12334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.973508][T12334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.985558][T12334] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.010077][T12334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.020607][T12334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.065543][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.072731][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.082051][T12528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.088547][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.101187][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.141094][T11685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.240513][T12334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.567211][T12559] validate_nla: 2 callbacks suppressed [ 195.567231][T12559] netlink: 'syz.4.3194': attribute type 4 has an invalid length. [ 195.581988][T12559] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3194'. [ 195.604435][T12559] lo speed is unknown, defaulting to 1000 [ 195.605715][T12334] veth0_vlan: entered promiscuous mode [ 195.620547][T12559] lo speed is unknown, defaulting to 1000 [ 195.628576][T12334] veth1_vlan: entered promiscuous mode [ 195.643460][T12559] lo speed is unknown, defaulting to 1000 [ 195.663995][T12334] veth0_macvtap: entered promiscuous mode [ 195.664162][T12565] loop4: detected capacity change from 0 to 512 [ 195.671954][T12334] veth1_macvtap: entered promiscuous mode [ 195.690664][T12334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.736717][T12567] loop3: detected capacity change from 0 to 1024 [ 195.759017][T12334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.777600][T12334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.786389][T12334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.795222][T12334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.804023][T12334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.820054][T12567] EXT4-fs: Ignoring removed bh option [ 195.883596][T12559] infiniband sz1: set active [ 195.888520][T12559] infiniband sz1: added lo [ 195.906022][T12567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.906524][ T8] lo speed is unknown, defaulting to 1000 [ 195.935551][T11523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.954334][T12559] RDS/IB: sz1: added [ 195.957379][T12565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.960000][T12559] smc: adding ib device sz1 with port count 1 [ 195.978794][T12559] smc: ib device sz1 port 1 has pnetid [ 195.995363][T12576] pim6reg: entered allmulticast mode [ 196.004600][ T35] lo speed is unknown, defaulting to 1000 [ 196.006799][T12579] loop3: detected capacity change from 0 to 1024 [ 196.017132][T12559] lo speed is unknown, defaulting to 1000 [ 196.023442][T12579] EXT4-fs: Ignoring removed bh option [ 196.025459][T12576] pim6reg: left allmulticast mode [ 196.037953][T12579] EXT4-fs: inline encryption not supported [ 196.060681][T12579] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.072998][T12579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 196.081912][T12559] lo speed is unknown, defaulting to 1000 [ 196.095559][T12579] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.3201: lblock 2 mapped to illegal pblock 2 (length 1) [ 196.110388][T12579] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.3201: lblock 0 mapped to illegal pblock 48 (length 1) [ 196.137389][T12579] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3201: Failed to acquire dquot type 0 [ 196.148886][T12581] loop1: detected capacity change from 0 to 2048 [ 196.157267][T12559] lo speed is unknown, defaulting to 1000 [ 196.164276][T12579] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 196.174807][T12579] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.3201: mark_inode_dirty error [ 196.189241][T12581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.209954][T12559] lo speed is unknown, defaulting to 1000 [ 196.214175][T12579] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 196.242719][ T36] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 196.261942][T12579] EXT4-fs (loop3): 1 orphan inode deleted [ 196.273224][ T1026] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 196.299608][T12559] lo speed is unknown, defaulting to 1000 [ 196.305966][T12579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.327730][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 196.337822][ T1026] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 0 [ 196.339958][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 196.339958][ T36] [ 196.361007][ T36] EXT4-fs (loop0): Total free blocks count 0 [ 196.367003][ T36] EXT4-fs (loop0): Free/Dirty block details [ 196.372988][ T36] EXT4-fs (loop0): free_blocks=2415919104 [ 196.378817][ T36] EXT4-fs (loop0): dirty_blocks=8224 [ 196.384198][ T36] EXT4-fs (loop0): Block reservation details [ 196.390227][ T36] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 196.419093][T12579] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 196.432859][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 196.468633][T12334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.490699][T12559] lo speed is unknown, defaulting to 1000 [ 196.519345][T11523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.519652][T12601] loop1: detected capacity change from 0 to 2048 [ 196.571565][T12601] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 196.584170][T12603] loop3: detected capacity change from 0 to 512 [ 196.592626][T12559] lo speed is unknown, defaulting to 1000 [ 196.601881][T12603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.628031][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'. [ 196.631253][T12603] EXT4-fs (loop3): 1 truncate cleaned up [ 196.653417][T12603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.695821][T12559] lo speed is unknown, defaulting to 1000 [ 196.708535][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3206'. [ 196.738498][T12614] loop1: detected capacity change from 0 to 512 [ 196.765168][T12559] lo speed is unknown, defaulting to 1000 [ 196.774369][T12614] EXT4-fs (loop1): 1 orphan inode deleted [ 196.802227][ T1026] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 196.828710][T12614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.855022][T12622] tmpfs: Bad value for 'mpol' [ 196.859723][T12614] 9pnet_fd: Insufficient options for proto=fd [ 196.876513][T11685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.898435][T11523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.933075][T12625] pim6reg: entered allmulticast mode [ 196.942472][T12334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.950455][T12626] loop3: detected capacity change from 0 to 1024 [ 196.962377][T12625] pim6reg: left allmulticast mode [ 196.967633][T12626] EXT4-fs: Ignoring removed bh option [ 196.973248][T12626] EXT4-fs: inline encryption not supported [ 196.997563][T12626] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.012156][T12626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 197.029819][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 197.029835][ T29] audit: type=1326 audit(16097364.341:33715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9ebfd169 code=0x7ffc0000 [ 197.033211][T12626] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.3214: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.036025][ T29] audit: type=1326 audit(16097364.341:33716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9ebfd169 code=0x7ffc0000 [ 197.102509][T12626] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 197.115479][T12626] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.3214: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.139319][ T29] audit: type=1326 audit(16097364.451:33717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.4.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4914ad169 code=0x7ffc0000 [ 197.162842][ T29] audit: type=1326 audit(16097364.451:33718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.4.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4914ad169 code=0x7ffc0000 [ 197.178165][T12626] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 197.186395][ T29] audit: type=1326 audit(16097364.451:33719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.4.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4914ad169 code=0x7ffc0000 [ 197.195215][T12626] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3214: Failed to acquire dquot type 0 [ 197.218606][ T29] audit: type=1326 audit(16097364.451:33720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.4.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4914ad169 code=0x7ffc0000 [ 197.253548][ T29] audit: type=1326 audit(16097364.451:33721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.4.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4914ad169 code=0x7ffc0000 [ 197.264348][T12590] chnl_net:caif_netlink_parms(): no params data found [ 197.276955][ T29] audit: type=1326 audit(16097364.451:33722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.4.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ff4914ad169 code=0x7ffc0000 [ 197.323370][T12637] loop5: detected capacity change from 0 to 2048 [ 197.331427][T12626] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 197.343268][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3220'. [ 197.344477][T12626] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.3214: mark_inode_dirty error [ 197.373384][T12637] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 197.381861][T12626] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 197.393885][T12626] EXT4-fs (loop3): 1 orphan inode deleted [ 197.407007][T12590] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.414201][T12590] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.432893][ T4232] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.433182][T12626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.459805][T12590] bridge_slave_0: entered allmulticast mode [ 197.461703][ T4232] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 0 [ 197.466610][T12590] bridge_slave_0: entered promiscuous mode [ 197.486018][T12656] sz1: rxe_newlink: already configured on lo [ 197.496227][T12656] loop4: detected capacity change from 0 to 512 [ 197.501555][T12652] netlink: 'syz.4.3223': attribute type 4 has an invalid length. [ 197.510324][T12652] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3223'. [ 197.519970][T12655] loop5: detected capacity change from 0 to 2048 [ 197.521905][T12590] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.528604][T12626] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 197.533451][T12590] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.545023][T12655] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 197.552553][T12590] bridge_slave_1: entered allmulticast mode [ 197.565288][T12590] bridge_slave_1: entered promiscuous mode [ 197.566148][T12656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.595882][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.608916][T11523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.618600][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.664029][T11685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.674423][T12663] loop5: detected capacity change from 0 to 1024 [ 197.678264][T12662] loop3: detected capacity change from 0 to 512 [ 197.682461][T12663] EXT4-fs: Ignoring removed bh option [ 197.699504][T12663] EXT4-fs: inline encryption not supported [ 197.699575][T12590] team0: Port device team_slave_0 added [ 197.705815][T12663] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.712530][T12590] team0: Port device team_slave_1 added [ 197.723427][T12665] netlink: 'syz.4.3226': attribute type 10 has an invalid length. [ 197.728506][T12662] EXT4-fs (loop3): 1 orphan inode deleted [ 197.741170][ T1026] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 197.741265][T12662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.755154][T12663] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 197.771005][T12662] 9pnet_fd: Insufficient options for proto=fd [ 197.775940][T12663] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.3227: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.794052][T12669] netlink: 'syz.4.3226': attribute type 10 has an invalid length. [ 197.794137][T12663] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 48: comm syz.5.3227: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.801921][T12669] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3226'. [ 197.817345][T12663] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3227: Failed to acquire dquot type 0 [ 197.829005][T12665] bridge0: port 3(team0) entered disabled state [ 197.842514][T12663] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 197.844089][T12665] team0: left allmulticast mode [ 197.852539][T12663] EXT4-fs error (device loop5): ext4_evict_inode:256: inode #11: comm syz.5.3227: mark_inode_dirty error [ 197.856840][T12665] team_slave_0: left allmulticast mode [ 197.856856][T12665] team_slave_1: left allmulticast mode [ 197.856873][T12665] team0: left promiscuous mode [ 197.869879][T12663] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 197.873587][T12665] team_slave_0: left promiscuous mode [ 197.879695][T12663] EXT4-fs (loop5): 1 orphan inode deleted [ 197.883933][T12665] team_slave_1: left promiscuous mode [ 197.895633][T12663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.899596][T12665] bridge0: port 3(team0) entered disabled state [ 197.923058][ T11] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.951329][T12671] loop4: detected capacity change from 0 to 2048 [ 197.958897][T12669] team0: entered promiscuous mode [ 197.959274][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 197.963960][T12669] team_slave_0: entered promiscuous mode [ 197.976812][T12663] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 197.981115][T12669] team_slave_1: entered promiscuous mode [ 197.997185][T12671] EXT4-fs: inline encryption not supported [ 197.998869][T12669] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.010435][T12669] bridge0: port 3(team0) entered blocking state [ 198.011183][T11523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.016733][T12669] bridge0: port 3(team0) entered disabled state [ 198.017452][T12669] team0: entered allmulticast mode [ 198.037238][T12669] team_slave_0: entered allmulticast mode [ 198.042994][T12669] team_slave_1: entered allmulticast mode [ 198.049778][T12669] bridge0: port 3(team0) entered blocking state [ 198.050530][T12671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.056066][T12669] bridge0: port 3(team0) entered forwarding state [ 198.073529][T10461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.098272][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.105341][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.131543][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.191000][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'. [ 198.191068][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.191080][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.232985][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.285462][T12590] hsr_slave_0: entered promiscuous mode [ 198.291762][T12590] hsr_slave_1: entered promiscuous mode [ 198.324767][T12690] loop3: detected capacity change from 0 to 128 [ 198.333428][T12691] netlink: 'syz.5.3235': attribute type 4 has an invalid length. [ 198.342010][T12691] rdma_rxe: rxe_newlink: failed to add lo [ 198.352394][T12691] loop5: detected capacity change from 0 to 512 [ 198.392796][T12690] syz.3.3234: attempt to access beyond end of device [ 198.392796][T12690] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 198.423091][T12690] syz.3.3234: attempt to access beyond end of device [ 198.423091][T12690] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 198.427148][T12669] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 198.444051][T12691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.452193][T12669] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 198.476701][T12669] EXT4-fs (loop4): This should not happen!! Data will be lost [ 198.476701][T12669] [ 198.486428][T12669] EXT4-fs (loop4): Total free blocks count 0 [ 198.492473][T12669] EXT4-fs (loop4): Free/Dirty block details [ 198.498417][T12669] EXT4-fs (loop4): free_blocks=2415919104 [ 198.504187][T12669] EXT4-fs (loop4): dirty_blocks=8192 [ 198.509535][T12669] EXT4-fs (loop4): Block reservation details [ 198.512057][T12690] syz.3.3234: attempt to access beyond end of device [ 198.512057][T12690] loop3: rw=524288, sector=369, nr_sectors = 672 limit=128 [ 198.515543][T12669] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 198.550410][T12699] loop1: detected capacity change from 0 to 2048 [ 198.567732][T12590] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.578400][T12699] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 198.598434][T10461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.648723][T12590] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.679492][ T4232] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 198.714620][T12712] tmpfs: Bad value for 'mpol' [ 198.722720][T12590] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.769701][T12590] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.839038][T12720] loop1: detected capacity change from 0 to 2048 [ 198.843432][T12590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.864551][T12590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.874246][T12720] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 198.879609][T12731] loop4: detected capacity change from 0 to 512 [ 198.884695][T12590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.908472][T12590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.923256][T12735] netlink: 'syz.3.3251': attribute type 10 has an invalid length. [ 198.940712][T12733] loop5: detected capacity change from 0 to 2048 [ 198.951301][T12735] bridge0: port 3(team0) entered disabled state [ 198.958792][T12735] team0: left allmulticast mode [ 198.963678][T12735] team_slave_0: left allmulticast mode [ 198.966055][T12731] EXT4-fs (loop4): 1 orphan inode deleted [ 198.969299][T12735] team_slave_1: left allmulticast mode [ 198.979737][T12731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.980538][T12735] team0: left promiscuous mode [ 198.993451][T12741] netlink: 'syz.3.3251': attribute type 10 has an invalid length. [ 198.997596][T12735] team_slave_0: left promiscuous mode [ 199.010999][T12735] team_slave_1: left promiscuous mode [ 199.015864][T12733] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 199.016520][T12735] bridge0: port 3(team0) entered disabled state [ 199.029918][T12731] 9pnet_fd: Insufficient options for proto=fd [ 199.038408][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 199.058134][T12741] team0: entered promiscuous mode [ 199.063213][T12741] team_slave_0: entered promiscuous mode [ 199.063393][T12742] loop3: detected capacity change from 0 to 2048 [ 199.068971][T12741] team_slave_1: entered promiscuous mode [ 199.075678][T12742] EXT4-fs: inline encryption not supported [ 199.089358][T12741] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.096630][T12741] bridge0: port 3(team0) entered blocking state [ 199.103030][T12741] bridge0: port 3(team0) entered disabled state [ 199.109953][T12741] team0: entered allmulticast mode [ 199.109970][T12741] team_slave_0: entered allmulticast mode [ 199.109984][T12741] team_slave_1: entered allmulticast mode [ 199.111266][T12741] bridge0: port 3(team0) entered blocking state [ 199.133261][T12741] bridge0: port 3(team0) entered forwarding state [ 199.169699][T12590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.189815][T12749] pim6reg: entered allmulticast mode [ 199.198392][T12742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.217962][T12590] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.225142][T12749] pim6reg: left allmulticast mode [ 199.245872][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.253071][ T9660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.264085][T11685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.291416][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.298691][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.328201][T12754] __nla_validate_parse: 3 callbacks suppressed [ 199.328217][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 199.344835][T12756] tmpfs: Bad value for 'mpol' [ 199.388707][T12754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.396197][T12754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.406429][T12754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.413931][T12754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.428969][T12758] loop5: detected capacity change from 0 to 128 [ 199.436986][T12758] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.479062][T12590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.537919][T12741] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 199.554916][T12741] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 199.567488][T12741] EXT4-fs (loop3): This should not happen!! Data will be lost [ 199.567488][T12741] [ 199.573084][T12590] veth0_vlan: entered promiscuous mode [ 199.577180][T12741] EXT4-fs (loop3): Total free blocks count 0 [ 199.577197][T12741] EXT4-fs (loop3): Free/Dirty block details [ 199.577210][T12741] EXT4-fs (loop3): free_blocks=2415919104 [ 199.585819][T12590] veth1_vlan: entered promiscuous mode [ 199.588836][T12741] EXT4-fs (loop3): dirty_blocks=8192 [ 199.604035][T12590] veth0_macvtap: entered promiscuous mode [ 199.605901][T12741] EXT4-fs (loop3): Block reservation details [ 199.605915][T12741] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 199.647210][T10461] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.653372][T12590] veth1_macvtap: entered promiscuous mode [ 199.672569][T12590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.684361][T12590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.695638][T12590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.704466][T12590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.713336][T12590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.722112][T12590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.744511][ T9660] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 199.964459][T12799] loop5: detected capacity change from 0 to 128 [ 199.984022][T12799] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.088803][T12814] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 200.099264][T12814] batman_adv: batadv0: Adding interface: team0 [ 200.105482][T12814] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.131153][T12814] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 200.142180][T12814] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 200.150209][T12814] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3274'. [ 200.159838][T12814] team0: entered promiscuous mode [ 200.164918][T12814] team_slave_0: entered promiscuous mode [ 200.170799][T12814] team_slave_1: entered promiscuous mode [ 200.177533][T12814] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.198409][T12814] batman_adv: batadv0: Interface activated: team0 [ 200.204970][T12814] batman_adv: batadv0: Interface deactivated: team0 [ 200.211812][T12814] batman_adv: batadv0: Removing interface: team0 [ 200.228500][T12814] bridge0: port 3(team0) entered blocking state [ 200.234888][T12814] bridge0: port 3(team0) entered disabled state [ 200.235021][T12824] loop0: detected capacity change from 0 to 2048 [ 200.243301][T12814] team0: entered allmulticast mode [ 200.248974][T12824] EXT4-fs: inline encryption not supported [ 200.252668][T12814] team_slave_0: entered allmulticast mode [ 200.264400][T12814] team_slave_1: entered allmulticast mode [ 200.272111][T12814] bridge0: port 3(team0) entered blocking state [ 200.278432][T12814] bridge0: port 3(team0) entered forwarding state [ 200.285775][T12824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.327824][T12831] netlink: 'syz.3.3279': attribute type 10 has an invalid length. [ 200.337244][T12831] bridge0: port 3(team0) entered disabled state [ 200.344963][T12831] team0: left allmulticast mode [ 200.349923][T12831] team_slave_0: left allmulticast mode [ 200.355412][T12831] team_slave_1: left allmulticast mode [ 200.360950][T12831] team0: left promiscuous mode [ 200.365735][T12831] team_slave_0: left promiscuous mode [ 200.371212][T12831] team_slave_1: left promiscuous mode [ 200.376811][T12831] bridge0: port 3(team0) entered disabled state [ 200.390271][T12833] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3279'. [ 200.402328][T12833] team0: entered promiscuous mode [ 200.407458][T12833] team_slave_0: entered promiscuous mode [ 200.413253][T12833] team_slave_1: entered promiscuous mode [ 200.420349][T12833] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.427565][T12833] bridge0: port 3(team0) entered blocking state [ 200.433868][T12833] bridge0: port 3(team0) entered disabled state [ 200.440875][T12833] team0: entered allmulticast mode [ 200.446048][T12833] team_slave_0: entered allmulticast mode [ 200.452129][T12833] team_slave_1: entered allmulticast mode [ 200.478986][T12831] loop3: detected capacity change from 0 to 2048 [ 200.486504][T12831] EXT4-fs: inline encryption not supported [ 200.492791][T12833] bridge0: port 3(team0) entered blocking state [ 200.499171][T12833] bridge0: port 3(team0) entered forwarding state [ 200.519932][T12831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.536978][T12824] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 200.552384][T12824] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 200.564986][T12824] EXT4-fs (loop0): This should not happen!! Data will be lost [ 200.564986][T12824] [ 200.574683][T12824] EXT4-fs (loop0): Total free blocks count 0 [ 200.580771][T12824] EXT4-fs (loop0): Free/Dirty block details [ 200.586680][T12824] EXT4-fs (loop0): free_blocks=2415919104 [ 200.592445][T12824] EXT4-fs (loop0): dirty_blocks=8192 [ 200.597753][T12824] EXT4-fs (loop0): Block reservation details [ 200.603746][T12824] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 200.714073][T10461] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.744654][ T4232] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 200.838731][T12851] loop1: detected capacity change from 0 to 2048 [ 200.878717][T12851] loop1: p2 < > p3 p4 [ 200.883900][T12851] loop1: p3 start 65535 is beyond EOD, truncated [ 200.890334][T12851] loop1: p4 size 8192 extends beyond EOD, truncated [ 201.082294][T12855] loop5: detected capacity change from 0 to 512 [ 201.151198][T12855] EXT4-fs (loop5): 1 orphan inode deleted [ 201.163760][T12855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.176560][ T4232] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 201.192770][T12853] loop4: detected capacity change from 0 to 8192 [ 201.194869][T12833] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.214860][T12833] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 201.227395][T12833] EXT4-fs (loop3): This should not happen!! Data will be lost [ 201.227395][T12833] [ 201.227414][T12833] EXT4-fs (loop3): Total free blocks count 0 [ 201.227428][T12833] EXT4-fs (loop3): Free/Dirty block details [ 201.227439][T12833] EXT4-fs (loop3): free_blocks=2415919104 [ 201.227530][T12833] EXT4-fs (loop3): dirty_blocks=8192 [ 201.227544][T12833] EXT4-fs (loop3): Block reservation details [ 201.227557][T12833] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 201.310937][T10461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.319312][ T4232] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 201.449904][T12874] tmpfs: Bad value for 'mpol' [ 201.553227][T12885] validate_nla: 1 callbacks suppressed [ 201.553247][T12885] netlink: 'syz.1.3296': attribute type 10 has an invalid length. [ 201.555736][T12886] tmpfs: Bad value for 'mpol' [ 201.572425][T12885] netlink: 'syz.1.3296': attribute type 10 has an invalid length. [ 201.580439][T12885] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3296'. [ 201.597566][T12885] team0: entered promiscuous mode [ 201.602826][T12885] team_slave_0: entered promiscuous mode [ 201.608566][T12885] team_slave_1: entered promiscuous mode [ 201.628348][T12885] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.636142][T12885] bridge0: port 3(team0) entered blocking state [ 201.642523][T12885] bridge0: port 3(team0) entered disabled state [ 201.657672][T12885] team0: entered allmulticast mode [ 201.662924][T12885] team_slave_0: entered allmulticast mode [ 201.668838][T12885] team_slave_1: entered allmulticast mode [ 201.702650][T12900] loop3: detected capacity change from 0 to 2048 [ 201.704539][T12885] bridge0: port 3(team0) entered blocking state [ 201.715439][T12885] bridge0: port 3(team0) entered forwarding state [ 201.715578][T12897] loop1: detected capacity change from 0 to 2048 [ 201.725778][T12892] loop0: detected capacity change from 0 to 128 [ 201.729258][T12897] EXT4-fs: inline encryption not supported [ 201.749357][T12900] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 201.808709][T12917] tmpfs: Bad value for 'mpol' [ 201.901692][T12927] loop4: detected capacity change from 0 to 512 [ 201.904803][T12924] loop3: detected capacity change from 0 to 2048 [ 201.931406][T12924] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 201.940859][T12927] EXT4-fs (loop4): 1 orphan inode deleted [ 201.958382][ T9660] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 201.975515][T12927] 9pnet_fd: Insufficient options for proto=fd [ 202.005861][T12931] loop5: detected capacity change from 0 to 2048 [ 202.018084][T12897] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 202.032997][T12897] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 202.045552][T12897] EXT4-fs (loop1): This should not happen!! Data will be lost [ 202.045552][T12897] [ 202.046757][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 202.046772][ T29] audit: type=1400 audit(16097369.351:34097): avc: denied { unmount } for pid=11685 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 202.055245][T12897] EXT4-fs (loop1): Total free blocks count 0 [ 202.055262][T12897] EXT4-fs (loop1): Free/Dirty block details [ 202.055289][T12897] EXT4-fs (loop1): free_blocks=2415919104 [ 202.055302][T12897] EXT4-fs (loop1): dirty_blocks=8192 [ 202.055323][T12897] EXT4-fs (loop1): Block reservation details [ 202.055357][T12897] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 202.091732][T12931] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 202.145439][ T4232] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 202.158237][ T4232] EXT4-fs (loop1): This should not happen!! Data will be lost [ 202.158237][ T4232] [ 202.211405][T12941] loop4: detected capacity change from 0 to 2048 [ 202.220452][ T29] audit: type=1400 audit(16097369.531:34098): avc: denied { module_request } for pid=12942 comm="syz.3.3319" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 202.253504][ T29] audit: type=1400 audit(16097369.561:34099): avc: denied { read } for pid=12942 comm="syz.3.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.275404][T12941] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 202.283481][ T29] audit: type=1326 audit(16097369.591:34100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 202.307349][ T29] audit: type=1326 audit(16097369.591:34101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 202.330785][ T29] audit: type=1326 audit(16097369.591:34102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 202.354225][ T29] audit: type=1326 audit(16097369.591:34103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 202.377852][ T29] audit: type=1326 audit(16097369.591:34104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 202.401575][ T29] audit: type=1326 audit(16097369.591:34105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 202.424997][ T29] audit: type=1326 audit(16097369.591:34106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 202.564392][T12964] netlink: 'syz.1.3317': attribute type 10 has an invalid length. [ 202.587925][T12964] bridge0: port 3(team0) entered disabled state [ 202.595305][T12964] team0: left allmulticast mode [ 202.600223][T12964] team_slave_0: left allmulticast mode [ 202.602575][T12965] loop0: detected capacity change from 0 to 2048 [ 202.605783][T12964] team_slave_1: left allmulticast mode [ 202.605802][T12964] team0: left promiscuous mode [ 202.622465][T12964] team_slave_0: left promiscuous mode [ 202.627941][T12964] team_slave_1: left promiscuous mode [ 202.633644][T12964] bridge0: port 3(team0) entered disabled state [ 202.643036][T12971] netlink: 'syz.1.3317': attribute type 10 has an invalid length. [ 202.651016][T12971] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3317'. [ 202.667549][T12965] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 202.682017][T12971] team0: entered promiscuous mode [ 202.687212][T12971] team_slave_0: entered promiscuous mode [ 202.693169][T12971] team_slave_1: entered promiscuous mode [ 202.716959][T12964] loop1: detected capacity change from 0 to 2048 [ 202.719194][T12971] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.732559][T12971] bridge0: port 3(team0) entered blocking state [ 202.739094][T12971] bridge0: port 3(team0) entered disabled state [ 202.745649][T12971] team0: entered allmulticast mode [ 202.750947][T12971] team_slave_0: entered allmulticast mode [ 202.756761][T12971] team_slave_1: entered allmulticast mode [ 202.762396][T12964] EXT4-fs: inline encryption not supported [ 202.763711][T12971] bridge0: port 3(team0) entered blocking state [ 202.774676][T12971] bridge0: port 3(team0) entered forwarding state [ 202.834434][T12985] loop0: detected capacity change from 0 to 1024 [ 202.846699][T12985] EXT4-fs: Ignoring removed bh option [ 202.900166][T12985] EXT4-fs: inline encryption not supported [ 202.909692][T12985] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.921605][T12985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 202.930928][T12985] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.3333: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.946301][T12985] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.3333: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.961911][T12985] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.3333: Failed to acquire dquot type 0 [ 202.973638][T12985] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 202.984789][T12985] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.3333: mark_inode_dirty error [ 202.996115][T13000] loop1: detected capacity change from 0 to 2048 [ 202.996565][T12985] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 203.015987][T12985] EXT4-fs (loop0): 1 orphan inode deleted [ 203.024630][ T141] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 203.027669][T13000] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 203.039399][ T141] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 0 [ 203.060712][T12985] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 203.127929][T13006] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 203.145296][T13006] loop3: detected capacity change from 0 to 2048 [ 203.202254][T13020] netlink: 'syz.4.3345': attribute type 10 has an invalid length. [ 203.220917][T13020] bridge0: port 3(team0) entered disabled state [ 203.227973][T13020] team0: left allmulticast mode [ 203.232850][T13020] team_slave_0: left allmulticast mode [ 203.239549][T13020] team_slave_1: left allmulticast mode [ 203.245127][T13020] team0: left promiscuous mode [ 203.249991][T13020] team_slave_0: left promiscuous mode [ 203.255537][T13020] team_slave_1: left promiscuous mode [ 203.261174][T13020] bridge0: port 3(team0) entered disabled state [ 203.270573][T13020] netlink: 'syz.4.3345': attribute type 10 has an invalid length. [ 203.278505][T13020] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3345'. [ 203.288031][T13020] team0: entered promiscuous mode [ 203.293091][T13020] team_slave_0: entered promiscuous mode [ 203.299022][T13020] team_slave_1: entered promiscuous mode [ 203.307154][T13020] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.330092][T13020] bridge0: port 3(team0) entered blocking state [ 203.336451][T13020] bridge0: port 3(team0) entered disabled state [ 203.357267][T13031] loop4: detected capacity change from 0 to 2048 [ 203.375891][T13020] team0: entered allmulticast mode [ 203.380249][T13035] loop5: detected capacity change from 0 to 1024 [ 203.381212][T13020] team_slave_0: entered allmulticast mode [ 203.393224][T13020] team_slave_1: entered allmulticast mode [ 203.400209][T13031] EXT4-fs: inline encryption not supported [ 203.407105][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 203.415121][T13035] EXT4-fs: Ignoring removed bh option [ 203.422509][T13039] loop3: detected capacity change from 0 to 1024 [ 203.425050][T13020] bridge0: port 3(team0) entered blocking state [ 203.429165][T13035] EXT4-fs: inline encryption not supported [ 203.435172][T13020] bridge0: port 3(team0) entered forwarding state [ 203.441463][T13039] EXT4-fs: Ignoring removed bh option [ 203.453370][T13039] EXT4-fs: inline encryption not supported [ 203.461790][T13035] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.464436][T13037] loop0: detected capacity change from 0 to 128 [ 203.474764][T13039] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.490090][T13035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 203.500751][T13035] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.3350: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.515008][T13035] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 48: comm syz.5.3350: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.530222][T13035] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3350: Failed to acquire dquot type 0 [ 203.533165][T13039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 203.549665][T13035] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 203.550987][T13039] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.3353: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.560504][T13035] EXT4-fs error (device loop5): ext4_evict_inode:256: inode #11: comm syz.5.3350: mark_inode_dirty error [ 203.573827][T13039] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.3353: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.598951][T13035] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 203.612118][T13039] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3353: Failed to acquire dquot type 0 [ 203.623758][T13035] EXT4-fs (loop5): 1 orphan inode deleted [ 203.631308][T13039] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 203.649275][T13039] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.3353: mark_inode_dirty error [ 203.661218][ T4232] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 203.667395][T13039] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 203.695817][ T4232] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 0 [ 203.697005][T13054] loop1: detected capacity change from 0 to 8192 [ 203.709865][T13039] EXT4-fs (loop3): 1 orphan inode deleted [ 203.720836][ T4232] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 203.736147][ T4232] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 0 [ 203.749371][T13039] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 203.749593][T13035] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 203.900426][T13074] netlink: 'syz.5.3364': attribute type 10 has an invalid length. [ 203.928176][T13074] bridge0: port 4(team0) entered disabled state [ 203.939488][T13074] team0: left allmulticast mode [ 203.944397][T13074] team_slave_0: left allmulticast mode [ 203.949916][T13074] team_slave_1: left allmulticast mode [ 203.955414][T13074] team0: left promiscuous mode [ 203.960223][T13074] team_slave_0: left promiscuous mode [ 203.965659][T13074] team_slave_1: left promiscuous mode [ 203.971637][T13074] bridge0: port 4(team0) entered disabled state [ 203.975841][T13078] netlink: 'syz.5.3364': attribute type 10 has an invalid length. [ 203.985914][T13078] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3364'. [ 204.001763][T13078] team0: entered promiscuous mode [ 204.006844][T13078] team_slave_0: entered promiscuous mode [ 204.012628][T13078] team_slave_1: entered promiscuous mode [ 204.021556][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.029465][T13078] bridge0: port 4(team0) entered blocking state [ 204.035818][T13078] bridge0: port 4(team0) entered disabled state [ 204.042710][T13078] team0: entered allmulticast mode [ 204.047930][T13078] team_slave_0: entered allmulticast mode [ 204.053713][T13078] team_slave_1: entered allmulticast mode [ 204.061663][T13078] bridge0: port 4(team0) entered blocking state [ 204.068012][T13078] bridge0: port 4(team0) entered forwarding state [ 204.091121][T13074] loop5: detected capacity change from 0 to 2048 [ 204.119808][T13086] loop3: detected capacity change from 0 to 2048 [ 204.127410][T13074] EXT4-fs: inline encryption not supported [ 204.170406][T13086] loop3: p2 < > p3 p4 [ 204.175723][T13086] loop3: p3 start 65535 is beyond EOD, truncated [ 204.182186][T13086] loop3: p4 size 8192 extends beyond EOD, truncated [ 204.269566][T13084] loop4: detected capacity change from 0 to 8192 [ 204.520331][T13105] loop4: detected capacity change from 0 to 512 [ 204.550535][T13105] EXT4-fs (loop4): 1 orphan inode deleted [ 204.558392][T13105] 9pnet_fd: Insufficient options for proto=fd [ 204.567521][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 204.617987][T13117] netlink: 'syz.4.3379': attribute type 10 has an invalid length. [ 204.627665][T13117] bridge0: port 3(team0) entered disabled state [ 204.635030][T13117] team0: left allmulticast mode [ 204.640148][T13117] team_slave_0: left allmulticast mode [ 204.645869][T13117] team_slave_1: left allmulticast mode [ 204.651442][T13117] team0: left promiscuous mode [ 204.656229][T13117] team_slave_0: left promiscuous mode [ 204.661711][T13117] team_slave_1: left promiscuous mode [ 204.667451][T13117] bridge0: port 3(team0) entered disabled state [ 204.683128][T13121] netlink: 'syz.4.3379': attribute type 10 has an invalid length. [ 204.691076][T13121] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3379'. [ 204.702193][T13121] team0: entered promiscuous mode [ 204.707261][T13121] team_slave_0: entered promiscuous mode [ 204.713009][T13121] team_slave_1: entered promiscuous mode [ 204.720128][T13121] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.727451][T13121] bridge0: port 3(team0) entered blocking state [ 204.733754][T13121] bridge0: port 3(team0) entered disabled state [ 204.741454][T13121] team0: entered allmulticast mode [ 204.746608][T13121] team_slave_0: entered allmulticast mode [ 204.752547][T13121] team_slave_1: entered allmulticast mode [ 204.762007][T13121] bridge0: port 3(team0) entered blocking state [ 204.768322][T13121] bridge0: port 3(team0) entered forwarding state [ 204.800169][T13117] loop4: detected capacity change from 0 to 2048 [ 204.812144][T13117] EXT4-fs: inline encryption not supported [ 204.833640][T13127] loop5: detected capacity change from 0 to 128 [ 204.885007][T13143] 9pnet_fd: Insufficient options for proto=fd [ 204.915201][T13148] loop1: detected capacity change from 0 to 1024 [ 204.926950][T13148] EXT4-fs: Ignoring removed bh option [ 204.935341][T13148] EXT4-fs: inline encryption not supported [ 204.941659][T13148] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 204.966694][T13148] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 204.980464][T13148] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm syz.1.3391: lblock 2 mapped to illegal pblock 2 (length 1) [ 204.995642][T13148] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 48: comm syz.1.3391: lblock 0 mapped to illegal pblock 48 (length 1) [ 205.011085][T13148] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3391: Failed to acquire dquot type 0 [ 205.027757][T13148] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 205.038171][T13148] EXT4-fs error (device loop1): ext4_evict_inode:256: inode #11: comm syz.1.3391: mark_inode_dirty error [ 205.053347][T13159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.062115][T13159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.082060][T13148] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 205.093073][T13148] EXT4-fs (loop1): 1 orphan inode deleted [ 205.101479][ T9660] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.116062][ T9660] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 0 [ 205.188766][T13168] loop4: detected capacity change from 0 to 2048 [ 205.218524][T13148] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 205.238773][T13168] loop4: p2 < > p3 p4 [ 205.261263][T13168] loop4: p3 start 65535 is beyond EOD, truncated [ 205.267798][T13168] loop4: p4 size 8192 extends beyond EOD, truncated [ 205.550168][T13184] 9pnet_fd: Insufficient options for proto=fd [ 205.678300][T13200] loop3: detected capacity change from 0 to 1024 [ 205.684971][T13200] EXT4-fs: Ignoring removed bh option [ 205.690518][T13200] EXT4-fs: inline encryption not supported [ 205.696765][T13200] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.708054][T13200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 205.718702][T13200] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.3410: lblock 2 mapped to illegal pblock 2 (length 1) [ 205.733219][T13200] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.3410: lblock 0 mapped to illegal pblock 48 (length 1) [ 205.756177][T13200] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3410: Failed to acquire dquot type 0 [ 205.768154][T13200] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 205.779463][T13200] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.3410: mark_inode_dirty error [ 205.791441][T13200] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 205.802795][T13200] EXT4-fs (loop3): 1 orphan inode deleted [ 205.833973][ T4232] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.853628][ T4232] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 0 [ 205.868575][T13200] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 205.879310][T13210] loop1: detected capacity change from 0 to 2048 [ 205.890364][T13210] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 206.140700][T13231] loop1: detected capacity change from 0 to 2048 [ 206.168795][T13231] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 206.425832][T13245] loop1: detected capacity change from 0 to 2048 [ 206.459834][T13245] loop1: p2 < > p3 p4 [ 206.487623][T13245] loop1: p3 start 65535 is beyond EOD, truncated [ 206.494020][T13245] loop1: p4 size 8192 extends beyond EOD, truncated [ 206.571527][T13247] loop0: detected capacity change from 0 to 1024 [ 206.578949][T13247] EXT4-fs: Ignoring removed bh option [ 206.584910][T13247] EXT4-fs: inline encryption not supported [ 206.592908][T13247] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.608418][T13247] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 206.620403][T13247] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.3426: lblock 2 mapped to illegal pblock 2 (length 1) [ 206.635254][T13247] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.3426: lblock 0 mapped to illegal pblock 48 (length 1) [ 206.651069][T13247] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.3426: Failed to acquire dquot type 0 [ 206.663113][T13247] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 206.674019][T13247] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.3426: mark_inode_dirty error [ 206.698376][T13247] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 206.712874][T13247] EXT4-fs (loop0): 1 orphan inode deleted [ 206.727161][ T50] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 206.743004][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 206.755342][T13247] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 206.766043][T13252] netlink: 'syz.4.3428': attribute type 4 has an invalid length. [ 206.773862][T13252] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3428'. [ 206.784302][T13252] sz1: rxe_newlink: already configured on lo [ 206.796532][T13252] loop4: detected capacity change from 0 to 512 [ 206.841011][T13257] netlink: 'syz.3.3429': attribute type 10 has an invalid length. [ 206.852521][T13257] bridge0: port 3(team0) entered disabled state [ 206.859962][T13257] team0: left allmulticast mode [ 206.864868][T13257] team_slave_0: left allmulticast mode [ 206.870480][T13257] team_slave_1: left allmulticast mode [ 206.876023][T13257] team0: left promiscuous mode [ 206.880848][T13257] team_slave_0: left promiscuous mode [ 206.886407][T13257] team_slave_1: left promiscuous mode [ 206.891969][T13257] bridge0: port 3(team0) entered disabled state [ 206.902321][T13263] netlink: 'syz.3.3429': attribute type 10 has an invalid length. [ 206.910238][T13263] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3429'. [ 206.931882][T13263] team0: entered promiscuous mode [ 206.936976][T13263] team_slave_0: entered promiscuous mode [ 206.942790][T13263] team_slave_1: entered promiscuous mode [ 206.950627][T13263] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.963288][T13267] loop0: detected capacity change from 0 to 512 [ 206.964500][T13263] bridge0: port 3(team0) entered blocking state [ 206.976176][T13263] bridge0: port 3(team0) entered disabled state [ 206.982813][T13257] loop3: detected capacity change from 0 to 2048 [ 206.982808][T13263] team0: entered allmulticast mode [ 206.991430][T13257] EXT4-fs: inline encryption not supported [ 206.994360][T13263] team_slave_0: entered allmulticast mode [ 207.005984][T13263] team_slave_1: entered allmulticast mode [ 207.012634][T13263] bridge0: port 3(team0) entered blocking state [ 207.013566][T13267] EXT4-fs (loop0): 1 orphan inode deleted [ 207.018931][T13263] bridge0: port 3(team0) entered forwarding state [ 207.031300][ T4232] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 207.036207][T13267] 9pnet_fd: Insufficient options for proto=fd [ 207.099085][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 207.099100][ T29] audit: type=1326 audit(16097374.411:34481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.128755][ T29] audit: type=1326 audit(16097374.411:34482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.183245][ T29] audit: type=1326 audit(16097374.411:34483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.206794][ T29] audit: type=1326 audit(16097374.411:34484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.230271][ T29] audit: type=1326 audit(16097374.411:34485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.253751][ T29] audit: type=1326 audit(16097374.411:34486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.277416][ T29] audit: type=1326 audit(16097374.411:34487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.301064][ T29] audit: type=1326 audit(16097374.411:34488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.324605][ T29] audit: type=1326 audit(16097374.411:34489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.348062][ T29] audit: type=1326 audit(16097374.411:34490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3885aed169 code=0x7ffc0000 [ 207.394820][T13282] netlink: 'syz.0.3437': attribute type 10 has an invalid length. [ 207.404245][T13282] bridge0: port 3(team0) entered disabled state [ 207.411279][T13282] team0: left allmulticast mode [ 207.416151][T13282] team_slave_0: left allmulticast mode [ 207.421767][T13282] team_slave_1: left allmulticast mode [ 207.427229][T13282] team0: left promiscuous mode [ 207.432096][T13282] team_slave_0: left promiscuous mode [ 207.437526][T13282] team_slave_1: left promiscuous mode [ 207.443177][T13282] bridge0: port 3(team0) entered disabled state [ 207.445648][T13283] netlink: 'syz.0.3437': attribute type 10 has an invalid length. [ 207.457484][T13283] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3437'. [ 207.467590][T13282] batman_adv: batadv0: Adding interface: team0 [ 207.473804][T13282] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.499014][T13282] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 207.520753][T13288] futex_wake_op: syz.1.3439 tries to shift op by -1; fix this program [ 207.535040][T13288] 9pnet: Could not find request transport: tcpöQA#’¨>è0TáëÖL¾5”T£ò#œþ5øzÞŠ[…™hÿP ÀÝ [ 207.537646][T13283] team0: entered promiscuous mode [ 207.550728][T13283] team_slave_0: entered promiscuous mode [ 207.556445][T13283] team_slave_1: entered promiscuous mode [ 207.565168][T13283] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.567491][ T141] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.573252][T13283] batman_adv: batadv0: Interface activated: team0 [ 207.593243][T13283] batman_adv: batadv0: Interface deactivated: team0 [ 207.593258][T13282] loop0: detected capacity change from 0 to 2048 [ 207.599923][T13283] batman_adv: batadv0: Removing interface: team0 [ 207.613992][ T141] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 207.614707][T13283] bridge0: port 3(team0) entered blocking state [ 207.626523][ T141] EXT4-fs (loop3): This should not happen!! Data will be lost [ 207.626523][ T141] [ 207.626548][ T141] EXT4-fs (loop3): Total free blocks count 0 [ 207.626562][ T141] EXT4-fs (loop3): Free/Dirty block details [ 207.632941][T13283] bridge0: port 3(team0) entered disabled state [ 207.642449][ T141] EXT4-fs (loop3): free_blocks=2415919104 [ 207.642467][ T141] EXT4-fs (loop3): dirty_blocks=8192 [ 207.663916][T13282] EXT4-fs: inline encryption not supported [ 207.666336][ T141] EXT4-fs (loop3): Block reservation details [ 207.666351][ T141] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 207.675971][T13283] team0: entered allmulticast mode [ 207.683490][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 207.683566][T13283] team_slave_0: entered allmulticast mode [ 207.683583][T13283] team_slave_1: entered allmulticast mode [ 207.684764][T13283] bridge0: port 3(team0) entered blocking state [ 207.689681][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 207.689681][ T50] [ 207.694797][T13283] bridge0: port 3(team0) entered forwarding state [ 207.889573][T13298] netlink: 'syz.3.3440': attribute type 4 has an invalid length. [ 207.897406][T13298] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3440'. [ 207.897656][T13299] loop5: detected capacity change from 0 to 2048 [ 207.987985][T13298] rdma_rxe: rxe_newlink: failed to add lo [ 207.997215][T13298] loop3: detected capacity change from 0 to 512 [ 208.006522][T13299] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 208.045396][T13305] loop4: detected capacity change from 0 to 2048 [ 208.090562][T13305] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 208.213137][T13314] loop5: detected capacity change from 0 to 512 [ 208.289731][T13314] EXT4-fs (loop5): 1 orphan inode deleted [ 208.298529][T13314] 9pnet_fd: Insufficient options for proto=fd [ 208.307791][ T50] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 208.321870][T13326] netlink: 'syz.3.3451': attribute type 10 has an invalid length. [ 208.349630][T13326] bridge0: port 3(team0) entered disabled state [ 208.356573][T13326] team0: left allmulticast mode [ 208.361629][T13326] team_slave_0: left allmulticast mode [ 208.367281][T13326] team_slave_1: left allmulticast mode [ 208.372917][T13326] team0: left promiscuous mode [ 208.377877][T13326] team_slave_0: left promiscuous mode [ 208.380708][T13329] netlink: 'syz.3.3451': attribute type 10 has an invalid length. [ 208.383363][T13326] team_slave_1: left promiscuous mode [ 208.391114][T13329] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3451'. [ 208.396984][T13326] bridge0: port 3(team0) entered disabled state [ 208.414597][T13329] team0: entered promiscuous mode [ 208.419772][T13329] team_slave_0: entered promiscuous mode [ 208.425532][T13329] team_slave_1: entered promiscuous mode [ 208.432377][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.444809][T13329] bridge0: port 3(team0) entered blocking state [ 208.452102][T13329] bridge0: port 3(team0) entered disabled state [ 208.463868][T13326] loop3: detected capacity change from 0 to 2048 [ 208.465745][ T36] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.470563][T13326] EXT4-fs: inline encryption not supported [ 208.491444][T13329] team0: entered allmulticast mode [ 208.496628][T13329] team_slave_0: entered allmulticast mode [ 208.502531][T13329] team_slave_1: entered allmulticast mode [ 208.503427][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3455'. [ 208.509370][T13329] bridge0: port 3(team0) entered blocking state [ 208.518305][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 208.523456][T13329] bridge0: port 3(team0) entered forwarding state [ 208.535847][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 208.535847][ T36] [ 208.552016][ T36] EXT4-fs (loop0): Total free blocks count 0 [ 208.558056][ T36] EXT4-fs (loop0): Free/Dirty block details [ 208.563939][ T36] EXT4-fs (loop0): free_blocks=2415919104 [ 208.569821][ T36] EXT4-fs (loop0): dirty_blocks=8192 [ 208.575171][ T36] EXT4-fs (loop0): Block reservation details [ 208.581208][ T36] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 208.603278][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 208.616107][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 208.616107][ T36] [ 208.713580][T13343] loop3: detected capacity change from 0 to 2048 [ 208.727689][T13343] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 208.812977][T13360] loop0: detected capacity change from 0 to 512 [ 208.837616][T13362] netlink: 'syz.1.3467': attribute type 10 has an invalid length. [ 208.849620][T13365] loop3: detected capacity change from 0 to 2048 [ 208.857584][T13362] bridge0: port 3(team0) entered disabled state [ 208.864688][T13360] EXT4-fs (loop0): 1 orphan inode deleted [ 208.865120][T13362] team0: left allmulticast mode [ 208.874783][T13360] 9pnet_fd: Insufficient options for proto=fd [ 208.875401][T13362] team_slave_0: left allmulticast mode [ 208.875444][T13362] team_slave_1: left allmulticast mode [ 208.892679][T13362] team0: left promiscuous mode [ 208.897501][T13362] team_slave_0: left promiscuous mode [ 208.898602][T13365] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 208.903018][T13362] team_slave_1: left promiscuous mode [ 208.911679][T13368] netlink: 'syz.1.3467': attribute type 10 has an invalid length. [ 208.916279][T13362] bridge0: port 3(team0) entered disabled state [ 208.924001][T13368] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3467'. [ 208.933624][ T36] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 208.960658][T13368] team0: entered promiscuous mode [ 208.965852][T13368] team_slave_0: entered promiscuous mode [ 208.971655][T13368] team_slave_1: entered promiscuous mode [ 208.989270][T13368] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.996609][T13368] bridge0: port 3(team0) entered blocking state [ 209.002980][T13368] bridge0: port 3(team0) entered disabled state [ 209.009403][T13362] loop1: detected capacity change from 0 to 2048 [ 209.011046][T13368] team0: entered allmulticast mode [ 209.020959][T13368] team_slave_0: entered allmulticast mode [ 209.026777][T13368] team_slave_1: entered allmulticast mode [ 209.033681][T13368] bridge0: port 3(team0) entered blocking state [ 209.039985][T13368] bridge0: port 3(team0) entered forwarding state [ 209.050254][T13362] EXT4-fs: inline encryption not supported [ 209.152594][T13381] loop0: detected capacity change from 0 to 2048 [ 209.168230][T13381] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 209.426353][T13393] loop4: detected capacity change from 0 to 2048 [ 209.448601][T13393] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 209.489723][T13399] bridge0: port 4(team0) entered disabled state [ 209.496530][T13399] team0: left allmulticast mode [ 209.501467][T13399] team_slave_0: left allmulticast mode [ 209.507073][T13399] team_slave_1: left allmulticast mode [ 209.512613][T13399] team0: left promiscuous mode [ 209.517410][T13399] team_slave_0: left promiscuous mode [ 209.522855][T13399] team_slave_1: left promiscuous mode [ 209.528618][T13399] bridge0: port 4(team0) entered disabled state [ 209.544977][T13400] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3477'. [ 209.562995][T13400] team0: entered promiscuous mode [ 209.568242][T13400] team_slave_0: entered promiscuous mode [ 209.574054][T13400] team_slave_1: entered promiscuous mode [ 209.588510][T13400] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.603936][T13400] bridge0: port 4(team0) entered blocking state [ 209.606047][T13404] loop0: detected capacity change from 0 to 512 [ 209.610269][T13400] bridge0: port 4(team0) entered disabled state [ 209.623220][T13400] team0: entered allmulticast mode [ 209.628485][T13400] team_slave_0: entered allmulticast mode [ 209.634238][T13400] team_slave_1: entered allmulticast mode [ 209.645754][T13400] bridge0: port 4(team0) entered blocking state [ 209.652181][T13400] bridge0: port 4(team0) entered forwarding state [ 209.659542][T13406] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3480'. [ 209.669378][T13410] sz1: rxe_newlink: already configured on lo [ 209.677209][T13404] EXT4-fs (loop0): 1 orphan inode deleted [ 209.686717][T13404] 9pnet_fd: Insufficient options for proto=fd [ 209.693260][ T36] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 209.739063][T13406] loop4: detected capacity change from 0 to 512 [ 209.805945][T13418] loop0: detected capacity change from 0 to 8192 [ 209.823156][T13418] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.909321][T13431] loop3: detected capacity change from 0 to 2048 [ 209.920257][T13431] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 209.928331][T13433] loop4: detected capacity change from 0 to 2048 [ 209.939600][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3484'. [ 209.958505][T13433] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 210.024109][T13446] loop0: detected capacity change from 0 to 2048 [ 210.025339][T13448] loop4: detected capacity change from 0 to 512 [ 210.057992][T13446] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 210.067189][T13448] EXT4-fs (loop4): 1 orphan inode deleted [ 210.073937][T13452] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3495'. [ 210.083439][ T36] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 210.098942][T13448] 9pnet_fd: Insufficient options for proto=fd [ 210.105638][T13452] rdma_rxe: rxe_newlink: failed to add lo [ 210.115861][T13452] loop3: detected capacity change from 0 to 512 [ 210.171172][T13465] loop4: detected capacity change from 0 to 1024 [ 210.181968][T13465] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3499: Failed to acquire dquot type 0 [ 210.194060][T13465] EXT4-fs (loop4): 1 truncate cleaned up [ 210.205281][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'. [ 210.248752][T13465] team0: left allmulticast mode [ 210.253699][T13465] team_slave_0: left allmulticast mode [ 210.259237][T13465] team_slave_1: left allmulticast mode [ 210.264883][T13465] bridge0: port 3(team0) entered disabled state [ 210.289880][T13465] bridge_slave_1: left allmulticast mode [ 210.295582][T13465] bridge_slave_1: left promiscuous mode [ 210.301274][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.311494][T13465] bridge_slave_0: left allmulticast mode [ 210.317231][T13465] bridge_slave_0: left promiscuous mode [ 210.323118][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.529620][T13484] loop0: detected capacity change from 0 to 2048 [ 210.547548][T13484] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 210.651147][T13489] loop4: detected capacity change from 0 to 2048 [ 210.677656][T13489] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 210.692729][T13494] loop0: detected capacity change from 0 to 512 [ 210.770719][T13494] EXT4-fs (loop0): 1 orphan inode deleted [ 210.784395][T13494] 9pnet_fd: Insufficient options for proto=fd [ 210.790959][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 210.840084][T13508] tmpfs: Unknown parameter '' [ 210.936379][T13514] bridge0: port 3(team0) entered disabled state [ 211.114378][T13520] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3515'. [ 211.176922][T13514] team0: left allmulticast mode [ 211.181964][T13514] team_slave_0: left allmulticast mode [ 211.187583][T13514] team_slave_1: left allmulticast mode [ 211.193115][T13514] team0: left promiscuous mode [ 211.197922][T13514] team_slave_0: left promiscuous mode [ 211.203516][T13514] team_slave_1: left promiscuous mode [ 211.209155][T13514] bridge0: port 3(team0) entered disabled state [ 211.317519][T13528] loop0: detected capacity change from 0 to 2048 [ 211.325901][T13528] EXT4-fs: inline encryption not supported [ 211.338359][T13514] batman_adv: batadv0: Adding interface: team0 [ 211.344559][T13514] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.350061][T13533] rdma_rxe: rxe_newlink: failed to add lo [ 211.369727][T13514] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 211.383207][T13535] loop5: detected capacity change from 0 to 512 [ 211.391633][T13532] loop4: detected capacity change from 0 to 2048 [ 211.407937][T13532] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 211.416770][T13535] EXT4-fs (loop5): 1 orphan inode deleted [ 211.423527][T13526] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3519'. [ 211.433820][ T50] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 211.452664][T13535] 9pnet_fd: Insufficient options for proto=fd [ 211.471001][T13533] loop3: detected capacity change from 0 to 512 [ 211.490746][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 211.500433][T13520] team0: entered promiscuous mode [ 211.505622][T13520] team_slave_0: entered promiscuous mode [ 211.511408][T13520] team_slave_1: entered promiscuous mode [ 211.529295][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.538125][T13520] batman_adv: batadv0: Interface activated: team0 [ 211.544691][T13520] batman_adv: batadv0: Interface deactivated: team0 [ 211.551403][T13520] batman_adv: batadv0: Removing interface: team0 [ 211.618721][T13520] bridge0: port 3(team0) entered blocking state [ 211.625114][T13520] bridge0: port 3(team0) entered disabled state [ 211.642710][T13520] team0: entered allmulticast mode [ 211.648307][T13520] team_slave_0: entered allmulticast mode [ 211.651869][T13554] loop3: detected capacity change from 0 to 1024 [ 211.654302][T13520] team_slave_1: entered allmulticast mode [ 211.668415][T13520] bridge0: port 3(team0) entered blocking state [ 211.674754][T13520] bridge0: port 3(team0) entered forwarding state [ 211.681883][T13554] EXT4-fs: Ignoring removed bh option [ 211.689888][T13554] EXT4-fs: inline encryption not supported [ 211.711489][T13554] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.723806][T13557] tmpfs: Unknown parameter '' [ 211.749861][T13528] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.770085][T13528] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 211.776697][T13554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 211.782694][T13528] EXT4-fs (loop0): This should not happen!! Data will be lost [ 211.782694][T13528] [ 211.782713][T13528] EXT4-fs (loop0): Total free blocks count 0 [ 211.782729][T13528] EXT4-fs (loop0): Free/Dirty block details [ 211.782742][T13528] EXT4-fs (loop0): free_blocks=2415919104 [ 211.782755][T13528] EXT4-fs (loop0): dirty_blocks=8192 [ 211.782768][T13528] EXT4-fs (loop0): Block reservation details [ 211.782779][T13528] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 211.837816][T13554] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.3527: lblock 2 mapped to illegal pblock 2 (length 1) [ 211.870753][ T141] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 211.883642][ T141] EXT4-fs (loop0): This should not happen!! Data will be lost [ 211.883642][ T141] [ 211.894316][T13567] loop1: detected capacity change from 0 to 2048 [ 211.899700][T13554] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.3527: lblock 0 mapped to illegal pblock 48 (length 1) [ 211.917706][T13554] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3527: Failed to acquire dquot type 0 [ 211.932568][T13567] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 211.943558][T13554] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 211.955098][T13554] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.3527: mark_inode_dirty error [ 211.967052][T13554] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 211.977563][T13554] EXT4-fs (loop3): 1 orphan inode deleted [ 211.994876][ T11] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.024660][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 212.036884][T13554] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 212.114123][T13574] loop3: detected capacity change from 0 to 512 [ 212.162591][T13574] EXT4-fs (loop3): 1 orphan inode deleted [ 212.171799][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 212.171815][ T29] audit: type=1326 audit(16097379.481:34897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.214491][ T141] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 212.224380][ T141] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 212.236227][ T29] audit: type=1326 audit(16097379.521:34898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.294593][ T29] audit: type=1326 audit(16097379.601:34899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.318309][ T29] audit: type=1326 audit(16097379.601:34900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.344298][T13586] loop1: detected capacity change from 0 to 128 [ 212.366184][ T29] audit: type=1326 audit(16097379.671:34901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.390240][T13574] 9pnet_fd: Insufficient options for proto=fd [ 212.396462][ T29] audit: type=1326 audit(16097379.701:34902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.419935][ T29] audit: type=1326 audit(16097379.701:34903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.455766][T13583] validate_nla: 7 callbacks suppressed [ 212.455786][T13583] netlink: 'syz.5.3537': attribute type 4 has an invalid length. [ 212.469109][T13583] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3537'. [ 212.518097][ T29] audit: type=1326 audit(16097379.831:34904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.541527][ T29] audit: type=1326 audit(16097379.831:34905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019dd5d169 code=0x7ffc0000 [ 212.587010][T13583] rdma_rxe: rxe_newlink: failed to add lo [ 212.619679][T13583] loop5: detected capacity change from 0 to 512 [ 212.661294][T13602] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 212.769047][T13613] loop5: detected capacity change from 0 to 2048 [ 212.779035][T13613] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 212.922535][T13623] loop5: detected capacity change from 0 to 128 [ 212.979724][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 213.202038][T13636] loop1: detected capacity change from 0 to 512 [ 213.242209][T13636] EXT4-fs (loop1): 1 orphan inode deleted [ 213.251934][T13636] 9pnet_fd: Insufficient options for proto=fd [ 213.258760][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 213.325690][T13642] netlink: 'syz.1.3554': attribute type 4 has an invalid length. [ 213.333613][T13642] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3554'. [ 213.346851][T13642] rdma_rxe: rxe_newlink: failed to add lo [ 213.357106][T13642] loop1: detected capacity change from 0 to 512 [ 213.468345][T13649] loop0: detected capacity change from 0 to 2048 [ 213.508244][T13649] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 213.675159][ C1] ================================================================== [ 213.683307][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 213.690555][ C1] [ 213.692888][ C1] read-write to 0xffff88810d5ac020 of 4 bytes by interrupt on cpu 0: [ 213.700975][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 213.705687][ C1] can_rcv_filter+0xbf/0x4c0 [ 213.710301][ C1] can_receive+0x182/0x1f0 [ 213.714737][ C1] canfd_rcv+0xe7/0x180 [ 213.718909][ C1] __netif_receive_skb+0x123/0x280 [ 213.724047][ C1] process_backlog+0x22e/0x440 [ 213.728844][ C1] __napi_poll+0x63/0x3c0 [ 213.733195][ C1] net_rx_action+0x3a1/0x7f0 [ 213.737812][ C1] handle_softirqs+0xbf/0x280 [ 213.743047][ C1] do_softirq+0x5e/0x90 [ 213.747225][ C1] __local_bh_enable_ip+0x6e/0x70 [ 213.752304][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 213.757267][ C1] lock_sock_nested+0x10f/0x140 [ 213.762151][ C1] sockopt_lock_sock+0x42/0x50 [ 213.766926][ C1] do_ip_getsockopt+0xbf3/0x1270 [ 213.771888][ C1] ip_getsockopt+0x5c/0x170 [ 213.776417][ C1] tcp_getsockopt+0xaa/0xe0 [ 213.780950][ C1] sock_common_getsockopt+0x5b/0x70 [ 213.786179][ C1] do_sock_getsockopt+0x1ca/0x260 [ 213.791221][ C1] __x64_sys_getsockopt+0x18c/0x200 [ 213.796445][ C1] x64_sys_call+0x1288/0x2dc0 [ 213.801152][ C1] do_syscall_64+0xc9/0x1c0 [ 213.805683][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.811600][ C1] [ 213.813949][ C1] read-write to 0xffff88810d5ac020 of 4 bytes by interrupt on cpu 1: [ 213.822026][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 213.826748][ C1] can_rcv_filter+0xbf/0x4c0 [ 213.831359][ C1] can_receive+0x182/0x1f0 [ 213.835795][ C1] canfd_rcv+0xe7/0x180 [ 213.839970][ C1] __netif_receive_skb+0x123/0x280 [ 213.845109][ C1] process_backlog+0x22e/0x440 [ 213.849896][ C1] __napi_poll+0x63/0x3c0 [ 213.854247][ C1] net_rx_action+0x3a1/0x7f0 [ 213.858885][ C1] handle_softirqs+0xbf/0x280 [ 213.863587][ C1] do_softirq+0x5e/0x90 [ 213.867761][ C1] __local_bh_enable_ip+0x6e/0x70 [ 213.872804][ C1] fpu__restore_sig+0x5c1/0xb00 [ 213.877673][ C1] restore_sigcontext+0x1b5/0x220 [ 213.882723][ C1] __do_sys_rt_sigreturn+0xfd/0x160 [ 213.887948][ C1] x64_sys_call+0x2982/0x2dc0 [ 213.892655][ C1] do_syscall_64+0xc9/0x1c0 [ 213.897189][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.903107][ C1] [ 213.905439][ C1] value changed: 0x0002598d -> 0x0002598e [ 213.911168][ C1] [ 213.913498][ C1] Reported by Kernel Concurrency Sanitizer on: [ 213.919658][ C1] CPU: 1 UID: 0 PID: 13632 Comm: syz.4.3551 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 213.930438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 213.940512][ C1] ================================================================== [ 213.951887][ C0] ================================================================== [ 213.959998][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 213.967222][ C0] [ 213.969555][ C0] read-write to 0xffff8881033b17e8 of 8 bytes by interrupt on cpu 1: [ 213.977623][ C0] can_rcv_filter+0xd1/0x4c0 [ 213.982233][ C0] can_receive+0x182/0x1f0 [ 213.986668][ C0] canfd_rcv+0xe7/0x180 [ 213.990837][ C0] __netif_receive_skb+0x123/0x280 [ 213.995971][ C0] process_backlog+0x22e/0x440 [ 214.000759][ C0] __napi_poll+0x63/0x3c0 [ 214.005108][ C0] net_rx_action+0x3a1/0x7f0 [ 214.009723][ C0] handle_softirqs+0xbf/0x280 [ 214.014419][ C0] run_ksoftirqd+0x1c/0x30 [ 214.018855][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 214.023814][ C0] kthread+0x4ae/0x520 [ 214.027907][ C0] ret_from_fork+0x4b/0x60 [ 214.032349][ C0] ret_from_fork_asm+0x1a/0x30 [ 214.037140][ C0] [ 214.039472][ C0] read-write to 0xffff8881033b17e8 of 8 bytes by interrupt on cpu 0: [ 214.047545][ C0] can_rcv_filter+0xd1/0x4c0 [ 214.052166][ C0] can_receive+0x182/0x1f0 [ 214.056600][ C0] canfd_rcv+0xe7/0x180 [ 214.060775][ C0] __netif_receive_skb+0x123/0x280 [ 214.065909][ C0] process_backlog+0x22e/0x440 [ 214.070701][ C0] __napi_poll+0x63/0x3c0 [ 214.075053][ C0] net_rx_action+0x3a1/0x7f0 [ 214.079669][ C0] handle_softirqs+0xbf/0x280 [ 214.084375][ C0] do_softirq+0x5e/0x90 [ 214.088550][ C0] __local_bh_enable_ip+0x6e/0x70 [ 214.093596][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 214.098568][ C0] wg_packet_encrypt_worker+0x180/0xb80 [ 214.104142][ C0] process_scheduled_works+0x4db/0xa20 [ 214.109623][ C0] worker_thread+0x51d/0x6f0 [ 214.114234][ C0] kthread+0x4ae/0x520 [ 214.118328][ C0] ret_from_fork+0x4b/0x60 [ 214.122770][ C0] ret_from_fork_asm+0x1a/0x30 [ 214.127573][ C0] [ 214.129902][ C0] value changed: 0x000000000002b59d -> 0x000000000002b59f [ 214.137029][ C0] [ 214.139356][ C0] Reported by Kernel Concurrency Sanitizer on: [ 214.145513][ C0] CPU: 0 UID: 0 PID: 2962 Comm: kworker/0:2 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 214.156295][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.166418][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 214.172954][ C0] ================================================================== [ 214.193931][ C0] ================================================================== [ 214.202041][ C0] BUG: KCSAN: data-race in can_send / can_send [ 214.208216][ C0] [ 214.210546][ C0] read-write to 0xffff88812514ebf0 of 8 bytes by interrupt on cpu 1: [ 214.218621][ C0] can_send+0x5b6/0x6d0 [ 214.222794][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 214.227504][ C0] can_rcv_filter+0xbf/0x4c0 [ 214.232111][ C0] can_receive+0x182/0x1f0 [ 214.236543][ C0] canfd_rcv+0xe7/0x180 [ 214.240767][ C0] __netif_receive_skb+0x123/0x280 [ 214.245905][ C0] process_backlog+0x22e/0x440 [ 214.250695][ C0] __napi_poll+0x63/0x3c0 [ 214.255047][ C0] net_rx_action+0x3a1/0x7f0 [ 214.259675][ C0] handle_softirqs+0xbf/0x280 [ 214.264376][ C0] run_ksoftirqd+0x1c/0x30 [ 214.268819][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 214.273789][ C0] kthread+0x4ae/0x520 [ 214.277896][ C0] ret_from_fork+0x4b/0x60 [ 214.282346][ C0] ret_from_fork_asm+0x1a/0x30 [ 214.287143][ C0] [ 214.289471][ C0] read-write to 0xffff88812514ebf0 of 8 bytes by interrupt on cpu 0: [ 214.297549][ C0] can_send+0x5b6/0x6d0 [ 214.301722][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 214.306418][ C0] can_rcv_filter+0xbf/0x4c0 [ 214.311026][ C0] can_receive+0x182/0x1f0 [ 214.315475][ C0] canfd_rcv+0xe7/0x180 [ 214.319646][ C0] __netif_receive_skb+0x123/0x280 [ 214.324780][ C0] process_backlog+0x22e/0x440 [ 214.329654][ C0] __napi_poll+0x63/0x3c0 [ 214.334004][ C0] net_rx_action+0x3a1/0x7f0 [ 214.338616][ C0] handle_softirqs+0xbf/0x280 [ 214.343315][ C0] do_softirq+0x5e/0x90 [ 214.347482][ C0] __local_bh_enable_ip+0x6e/0x70 [ 214.352530][ C0] xt_replace_table+0x261/0x460 [ 214.357404][ C0] __do_replace+0xcc/0x580 [ 214.361849][ C0] do_ip6t_set_ctl+0x820/0x8c0 [ 214.366666][ C0] nf_setsockopt+0x195/0x1b0 [ 214.371310][ C0] ipv6_setsockopt+0x10f/0x130 [ 214.376107][ C0] tcp_setsockopt+0x93/0xb0 [ 214.380636][ C0] sock_common_setsockopt+0x64/0x80 [ 214.385867][ C0] __sys_setsockopt+0x187/0x200 [ 214.390737][ C0] __x64_sys_setsockopt+0x66/0x80 [ 214.395778][ C0] x64_sys_call+0x282e/0x2dc0 [ 214.400492][ C0] do_syscall_64+0xc9/0x1c0 [ 214.405029][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.410961][ C0] [ 214.413291][ C0] value changed: 0x000000000000bd95 -> 0x000000000000bd96 [ 214.420405][ C0] [ 214.422735][ C0] Reported by Kernel Concurrency Sanitizer on: [ 214.428890][ C0] CPU: 0 UID: 0 PID: 11523 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 214.439836][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.449906][ C0] ================================================================== [ 214.463667][ C0] ================================================================== [ 214.471809][ C0] BUG: KCSAN: data-race in can_send / can_send [ 214.477987][ C0] [ 214.480325][ C0] read-write to 0xffff88812514eb90 of 8 bytes by interrupt on cpu 1: [ 214.488490][ C0] can_send+0x5a2/0x6d0 [ 214.492664][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 214.497371][ C0] can_rcv_filter+0xbf/0x4c0 [ 214.501979][ C0] can_receive+0x182/0x1f0 [ 214.506415][ C0] canfd_rcv+0xe7/0x180 [ 214.510591][ C0] __netif_receive_skb+0x123/0x280 [ 214.515727][ C0] process_backlog+0x22e/0x440 [ 214.520518][ C0] __napi_poll+0x63/0x3c0 [ 214.524872][ C0] net_rx_action+0x3a1/0x7f0 [ 214.529583][ C0] handle_softirqs+0xbf/0x280 [ 214.534299][ C0] run_ksoftirqd+0x1c/0x30 [ 214.538743][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 214.543704][ C0] kthread+0x4ae/0x520 [ 214.547802][ C0] ret_from_fork+0x4b/0x60 [ 214.552243][ C0] ret_from_fork_asm+0x1a/0x30 [ 214.557035][ C0] [ 214.559363][ C0] read-write to 0xffff88812514eb90 of 8 bytes by interrupt on cpu 0: [ 214.567436][ C0] can_send+0x5a2/0x6d0 [ 214.571638][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 214.576361][ C0] can_rcv_filter+0xbf/0x4c0 [ 214.580971][ C0] can_receive+0x182/0x1f0 [ 214.585409][ C0] canfd_rcv+0xe7/0x180 [ 214.589582][ C0] __netif_receive_skb+0x123/0x280 [ 214.594720][ C0] process_backlog+0x22e/0x440 [ 214.599510][ C0] __napi_poll+0x63/0x3c0 [ 214.603875][ C0] net_rx_action+0x3a1/0x7f0 [ 214.608488][ C0] handle_softirqs+0xbf/0x280 [ 214.613184][ C0] run_ksoftirqd+0x1c/0x30 [ 214.617626][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 214.622585][ C0] kthread+0x4ae/0x520 [ 214.626685][ C0] ret_from_fork+0x4b/0x60 [ 214.631124][ C0] ret_from_fork_asm+0x1a/0x30 [ 214.635917][ C0] [ 214.638253][ C0] value changed: 0x0000000000036738 -> 0x0000000000036739 [ 214.645375][ C0] [ 214.647706][ C0] Reported by Kernel Concurrency Sanitizer on: [ 214.653866][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 214.664475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.674551][ C0] ================================================================== [ 216.679500][ C1] ================================================================== [ 216.687636][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 216.694884][ C1] [ 216.697220][ C1] read-write to 0xffff88810d5ac020 of 4 bytes by interrupt on cpu 0: [ 216.705306][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 216.710012][ C1] can_rcv_filter+0xbf/0x4c0 [ 216.714620][ C1] can_receive+0x182/0x1f0 [ 216.719053][ C1] canfd_rcv+0xe7/0x180 [ 216.723224][ C1] __netif_receive_skb+0x123/0x280 [ 216.728364][ C1] process_backlog+0x22e/0x440 [ 216.733157][ C1] __napi_poll+0x63/0x3c0 [ 216.737512][ C1] net_rx_action+0x3a1/0x7f0 [ 216.742126][ C1] handle_softirqs+0xbf/0x280 [ 216.746828][ C1] do_softirq+0x5e/0x90 [ 216.751006][ C1] __local_bh_enable_ip+0x6e/0x70 [ 216.756047][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 216.761001][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 216.766655][ C1] process_scheduled_works+0x4db/0xa20 [ 216.772132][ C1] worker_thread+0x51d/0x6f0 [ 216.776749][ C1] kthread+0x4ae/0x520 [ 216.780844][ C1] ret_from_fork+0x4b/0x60 [ 216.785287][ C1] ret_from_fork_asm+0x1a/0x30 [ 216.790082][ C1] [ 216.792414][ C1] read-write to 0xffff88810d5ac020 of 4 bytes by interrupt on cpu 1: [ 216.800498][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 216.805209][ C1] can_rcv_filter+0xbf/0x4c0 [ 216.809823][ C1] can_receive+0x182/0x1f0 [ 216.814257][ C1] canfd_rcv+0xe7/0x180 [ 216.818427][ C1] __netif_receive_skb+0x123/0x280 [ 216.823564][ C1] process_backlog+0x22e/0x440 [ 216.828363][ C1] __napi_poll+0x63/0x3c0 [ 216.832720][ C1] net_rx_action+0x3a1/0x7f0 [ 216.837341][ C1] handle_softirqs+0xbf/0x280 [ 216.842215][ C1] run_ksoftirqd+0x1c/0x30 [ 216.846661][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 216.851627][ C1] kthread+0x4ae/0x520 [ 216.855721][ C1] ret_from_fork+0x4b/0x60 [ 216.860169][ C1] ret_from_fork_asm+0x1a/0x30 [ 216.864964][ C1] [ 216.867334][ C1] value changed: 0x00082f98 -> 0x00082f9a [ 216.873064][ C1] [ 216.875400][ C1] Reported by Kernel Concurrency Sanitizer on: [ 216.881562][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 216.892173][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 216.902248][ C1] ================================================================== [ 216.960508][ C0] ================================================================== [ 216.968634][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 216.975858][ C0] [ 216.978198][ C0] read-write to 0xffff8881033b17e8 of 8 bytes by interrupt on cpu 1: [ 216.986279][ C0] can_rcv_filter+0xd1/0x4c0 [ 216.990889][ C0] can_receive+0x182/0x1f0 [ 216.995373][ C0] canfd_rcv+0xe7/0x180 [ 216.999545][ C0] __netif_receive_skb+0x123/0x280 [ 217.004680][ C0] process_backlog+0x22e/0x440 [ 217.009466][ C0] __napi_poll+0x63/0x3c0 [ 217.013815][ C0] net_rx_action+0x3a1/0x7f0 [ 217.018437][ C0] handle_softirqs+0xbf/0x280 [ 217.023130][ C0] do_softirq+0x5e/0x90 [ 217.027310][ C0] __local_bh_enable_ip+0x6e/0x70 [ 217.032356][ C0] wg_timers_any_authenticated_packet_traversal+0xe5/0x110 [ 217.039588][ C0] wg_packet_tx_worker+0xe9/0x360 [ 217.044639][ C0] process_scheduled_works+0x4db/0xa20 [ 217.050120][ C0] worker_thread+0x51d/0x6f0 [ 217.054734][ C0] kthread+0x4ae/0x520 [ 217.058831][ C0] ret_from_fork+0x4b/0x60 [ 217.063265][ C0] ret_from_fork_asm+0x1a/0x30 [ 217.068057][ C0] [ 217.070386][ C0] read-write to 0xffff8881033b17e8 of 8 bytes by interrupt on cpu 0: [ 217.078461][ C0] can_rcv_filter+0xd1/0x4c0 [ 217.083068][ C0] can_receive+0x182/0x1f0 [ 217.087502][ C0] canfd_rcv+0xe7/0x180 [ 217.091673][ C0] __netif_receive_skb+0x123/0x280 [ 217.096809][ C0] process_backlog+0x22e/0x440 [ 217.101611][ C0] __napi_poll+0x63/0x3c0 [ 217.105962][ C0] net_rx_action+0x3a1/0x7f0 [ 217.110580][ C0] handle_softirqs+0xbf/0x280 [ 217.115284][ C0] run_ksoftirqd+0x1c/0x30 [ 217.119728][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 217.124688][ C0] kthread+0x4ae/0x520 [ 217.128789][ C0] ret_from_fork+0x4b/0x60 [ 217.133237][ C0] ret_from_fork_asm+0x1a/0x30 [ 217.138038][ C0] [ 217.140378][ C0] value changed: 0x000000000008a9f3 -> 0x000000000008a9f5 [ 217.147494][ C0] [ 217.149827][ C0] Reported by Kernel Concurrency Sanitizer on: [ 217.155986][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 217.166597][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.176671][ C0] ================================================================== [ 217.202406][ C0] ================================================================== [ 217.210521][ C0] BUG: KCSAN: data-race in can_send / can_send [ 217.216703][ C0] [ 217.219039][ C0] read-write to 0xffff88812514ebf0 of 8 bytes by interrupt on cpu 1: [ 217.227119][ C0] can_send+0x5b6/0x6d0 [ 217.231295][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 217.236003][ C0] can_rcv_filter+0xbf/0x4c0 [ 217.240614][ C0] can_receive+0x182/0x1f0 [ 217.245050][ C0] canfd_rcv+0xe7/0x180 [ 217.249224][ C0] __netif_receive_skb+0x123/0x280 [ 217.254360][ C0] process_backlog+0x22e/0x440 [ 217.259158][ C0] __napi_poll+0x63/0x3c0 [ 217.263515][ C0] net_rx_action+0x3a1/0x7f0 [ 217.268128][ C0] handle_softirqs+0xbf/0x280 [ 217.272840][ C0] do_softirq+0x5e/0x90 [ 217.277016][ C0] __local_bh_enable_ip+0x6e/0x70 [ 217.282077][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 217.287044][ C0] lock_sock_nested+0x10f/0x140 [ 217.291937][ C0] sockopt_lock_sock+0x42/0x50 [ 217.296722][ C0] do_ip_getsockopt+0xbf3/0x1270 [ 217.301688][ C0] ip_getsockopt+0x5c/0x170 [ 217.306213][ C0] tcp_getsockopt+0xaa/0xe0 [ 217.310745][ C0] sock_common_getsockopt+0x5b/0x70 [ 217.315979][ C0] do_sock_getsockopt+0x1ca/0x260 [ 217.321023][ C0] __x64_sys_getsockopt+0x18c/0x200 [ 217.326254][ C0] x64_sys_call+0x1288/0x2dc0 [ 217.330955][ C0] do_syscall_64+0xc9/0x1c0 [ 217.335486][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.341409][ C0] [ 217.343752][ C0] read-write to 0xffff88812514ebf0 of 8 bytes by interrupt on cpu 0: [ 217.351838][ C0] can_send+0x5b6/0x6d0 [ 217.356018][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 217.360736][ C0] can_rcv_filter+0xbf/0x4c0 [ 217.365358][ C0] can_receive+0x182/0x1f0 [ 217.369888][ C0] canfd_rcv+0xe7/0x180 [ 217.374073][ C0] __netif_receive_skb+0x123/0x280 [ 217.379215][ C0] process_backlog+0x22e/0x440 [ 217.384003][ C0] __napi_poll+0x63/0x3c0 [ 217.388354][ C0] net_rx_action+0x3a1/0x7f0 [ 217.393056][ C0] handle_softirqs+0xbf/0x280 [ 217.397761][ C0] do_softirq+0x5e/0x90 [ 217.401946][ C0] __local_bh_enable_ip+0x6e/0x70 [ 217.406996][ C0] update_defense_level+0x575/0x5b0 [ 217.412218][ C0] defense_work_handler+0x1f/0x80 [ 217.417263][ C0] process_scheduled_works+0x4db/0xa20 [ 217.422745][ C0] worker_thread+0x51d/0x6f0 [ 217.427361][ C0] kthread+0x4ae/0x520 [ 217.431457][ C0] ret_from_fork+0x4b/0x60 [ 217.435905][ C0] ret_from_fork_asm+0x1a/0x30 [ 217.440738][ C0] [ 217.443075][ C0] value changed: 0x00000000000073e0 -> 0x00000000000073e1 [ 217.450198][ C0] [ 217.452539][ C0] Reported by Kernel Concurrency Sanitizer on: [ 217.458714][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 217.469242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.479328][ C0] Workqueue: events_long defense_work_handler [ 217.485425][ C0] ================================================================== [ 217.514854][ C1] ================================================================== [ 217.522974][ C1] BUG: KCSAN: data-race in can_send / can_send [ 217.529150][ C1] [ 217.531478][ C1] read-write to 0xffff88812514eb90 of 8 bytes by interrupt on cpu 0: [ 217.539564][ C1] can_send+0x5a2/0x6d0 [ 217.543742][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 217.548449][ C1] can_rcv_filter+0xbf/0x4c0 [ 217.553060][ C1] can_receive+0x182/0x1f0 [ 217.557496][ C1] canfd_rcv+0xe7/0x180 [ 217.561674][ C1] __netif_receive_skb+0x123/0x280 [ 217.566810][ C1] process_backlog+0x22e/0x440 [ 217.571607][ C1] __napi_poll+0x63/0x3c0 [ 217.575960][ C1] net_rx_action+0x3a1/0x7f0 [ 217.580576][ C1] handle_softirqs+0xbf/0x280 [ 217.585276][ C1] do_softirq+0x5e/0x90 [ 217.589462][ C1] __local_bh_enable_ip+0x6e/0x70 [ 217.594514][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 217.599469][ C1] wg_packet_decrypt_worker+0x6ac/0x6f0 [ 217.605057][ C1] process_scheduled_works+0x4db/0xa20 [ 217.610541][ C1] worker_thread+0x51d/0x6f0 [ 217.615154][ C1] kthread+0x4ae/0x520 [ 217.619244][ C1] ret_from_fork+0x4b/0x60 [ 217.623695][ C1] ret_from_fork_asm+0x1a/0x30 [ 217.628511][ C1] [ 217.630845][ C1] read-write to 0xffff88812514eb90 of 8 bytes by interrupt on cpu 1: [ 217.638928][ C1] can_send+0x5a2/0x6d0 [ 217.643107][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 217.647816][ C1] can_rcv_filter+0xbf/0x4c0 [ 217.652431][ C1] can_receive+0x182/0x1f0 [ 217.656866][ C1] canfd_rcv+0xe7/0x180 [ 217.661042][ C1] __netif_receive_skb+0x123/0x280 [ 217.666189][ C1] process_backlog+0x22e/0x440 [ 217.670985][ C1] __napi_poll+0x63/0x3c0 [ 217.675342][ C1] net_rx_action+0x3a1/0x7f0 [ 217.679966][ C1] handle_softirqs+0xbf/0x280 [ 217.684675][ C1] do_softirq+0x5e/0x90 [ 217.688858][ C1] __local_bh_enable_ip+0x6e/0x70 [ 217.693912][ C1] xt_replace_table+0x261/0x460 [ 217.698801][ C1] __do_replace+0xcc/0x570 [ 217.703237][ C1] do_ipt_set_ctl+0x811/0x8b0 [ 217.707932][ C1] nf_setsockopt+0x195/0x1b0 [ 217.712553][ C1] ip_setsockopt+0xea/0x100 [ 217.717077][ C1] tcp_setsockopt+0x93/0xb0 [ 217.721611][ C1] sock_common_setsockopt+0x64/0x80 [ 217.726854][ C1] __sys_setsockopt+0x187/0x200 [ 217.731729][ C1] __x64_sys_setsockopt+0x66/0x80 [ 217.736774][ C1] x64_sys_call+0x282e/0x2dc0 [ 217.741480][ C1] do_syscall_64+0xc9/0x1c0 [ 217.746022][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.751960][ C1] [ 217.754295][ C1] value changed: 0x000000000009709d -> 0x000000000009709e [ 217.761409][ C1] [ 217.763741][ C1] Reported by Kernel Concurrency Sanitizer on: [ 217.769901][ C1] CPU: 1 UID: 0 PID: 11523 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 217.780883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.790965][ C1] ================================================================== [ 219.694666][ C0] ================================================================== [ 219.702806][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 219.710048][ C0] [ 219.712379][ C0] read-write to 0xffff88810d5ac020 of 4 bytes by interrupt on cpu 1: [ 219.720460][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 219.725518][ C0] can_rcv_filter+0xbf/0x4c0 [ 219.730123][ C0] can_receive+0x182/0x1f0 [ 219.734558][ C0] canfd_rcv+0xe7/0x180 [ 219.738742][ C0] __netif_receive_skb+0x123/0x280 [ 219.743887][ C0] process_backlog+0x22e/0x440 [ 219.748688][ C0] __napi_poll+0x63/0x3c0 [ 219.753042][ C0] net_rx_action+0x3a1/0x7f0 [ 219.757659][ C0] handle_softirqs+0xbf/0x280 [ 219.762355][ C0] do_softirq+0x5e/0x90 [ 219.766535][ C0] __local_bh_enable_ip+0x6e/0x70 [ 219.771606][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 219.776558][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 219.782211][ C0] process_scheduled_works+0x4db/0xa20 [ 219.787699][ C0] worker_thread+0x51d/0x6f0 [ 219.792305][ C0] kthread+0x4ae/0x520 [ 219.796398][ C0] ret_from_fork+0x4b/0x60 [ 219.800843][ C0] ret_from_fork_asm+0x1a/0x30 [ 219.805635][ C0] [ 219.807966][ C0] read-write to 0xffff88810d5ac020 of 4 bytes by interrupt on cpu 0: [ 219.816047][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 219.820757][ C0] can_rcv_filter+0xbf/0x4c0 [ 219.825366][ C0] can_receive+0x182/0x1f0 [ 219.829804][ C0] canfd_rcv+0xe7/0x180 [ 219.833980][ C0] __netif_receive_skb+0x123/0x280 [ 219.839126][ C0] process_backlog+0x22e/0x440 [ 219.843936][ C0] __napi_poll+0x63/0x3c0 [ 219.848299][ C0] net_rx_action+0x3a1/0x7f0 [ 219.852922][ C0] handle_softirqs+0xbf/0x280 [ 219.857624][ C0] do_softirq+0x5e/0x90 [ 219.861804][ C0] __local_bh_enable_ip+0x6e/0x70 [ 219.866879][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 219.871870][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 219.877185][ C0] batadv_tt_purge+0x2b/0x630 [ 219.881893][ C0] process_scheduled_works+0x4db/0xa20 [ 219.887396][ C0] worker_thread+0x51d/0x6f0 [ 219.892009][ C0] kthread+0x4ae/0x520 [ 219.896102][ C0] ret_from_fork+0x4b/0x60 [ 219.900548][ C0] ret_from_fork_asm+0x1a/0x30 [ 219.905337][ C0] [ 219.907670][ C0] value changed: 0x000e12b6 -> 0x000e12b7 [ 219.913406][ C0] [ 219.915735][ C0] Reported by Kernel Concurrency Sanitizer on: [ 219.921899][ C0] CPU: 0 UID: 0 PID: 141 Comm: kworker/u8:4 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 219.932679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 219.942842][ C0] Workqueue: bat_events batadv_tt_purge [ 219.948424][ C0] ================================================================== [ 219.998478][ C0] ================================================================== [ 220.006603][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 220.013922][ C0] [ 220.016268][ C0] read-write to 0xffff8881033b17e8 of 8 bytes by interrupt on cpu 1: [ 220.024360][ C0] can_rcv_filter+0xd1/0x4c0 [ 220.028980][ C0] can_receive+0x182/0x1f0 [ 220.033417][ C0] canfd_rcv+0xe7/0x180 [ 220.037595][ C0] __netif_receive_skb+0x123/0x280 [ 220.042737][ C0] process_backlog+0x22e/0x440 [ 220.047533][ C0] __napi_poll+0x63/0x3c0 [ 220.051894][ C0] net_rx_action+0x3a1/0x7f0 [ 220.056512][ C0] handle_softirqs+0xbf/0x280 [ 220.061211][ C0] do_softirq+0x5e/0x90 [ 220.065391][ C0] __local_bh_enable_ip+0x6e/0x70 [ 220.070433][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 220.075383][ C0] wg_index_hashtable_insert+0xaa/0x2a0 [ 220.080964][ C0] wg_noise_handshake_create_initiation+0x4f6/0x5b0 [ 220.087590][ C0] wg_packet_handshake_send_worker+0xb3/0x150 [ 220.093683][ C0] process_scheduled_works+0x4db/0xa20 [ 220.099161][ C0] worker_thread+0x51d/0x6f0 [ 220.103779][ C0] kthread+0x4ae/0x520 [ 220.107882][ C0] ret_from_fork+0x4b/0x60 [ 220.112324][ C0] ret_from_fork_asm+0x1a/0x30 [ 220.117118][ C0] [ 220.119455][ C0] read-write to 0xffff8881033b17e8 of 8 bytes by interrupt on cpu 0: [ 220.127533][ C0] can_rcv_filter+0xd1/0x4c0 [ 220.132149][ C0] can_receive+0x182/0x1f0 [ 220.136584][ C0] canfd_rcv+0xe7/0x180 [ 220.140762][ C0] __netif_receive_skb+0x123/0x280 [ 220.145907][ C0] process_backlog+0x22e/0x440 [ 220.150736][ C0] __napi_poll+0x63/0x3c0 [ 220.155090][ C0] net_rx_action+0x3a1/0x7f0 [ 220.159713][ C0] handle_softirqs+0xbf/0x280 [ 220.164413][ C0] do_softirq+0x5e/0x90 [ 220.168597][ C0] __local_bh_enable_ip+0x6e/0x70 [ 220.173645][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 220.178690][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 220.183993][ C0] batadv_tt_purge+0x2b/0x630 [ 220.188742][ C0] process_scheduled_works+0x4db/0xa20 [ 220.194222][ C0] worker_thread+0x51d/0x6f0 [ 220.198833][ C0] kthread+0x4ae/0x520 [ 220.202941][ C0] ret_from_fork+0x4b/0x60 [ 220.207381][ C0] ret_from_fork_asm+0x1a/0x30 [ 220.212174][ C0] [ 220.214506][ C0] value changed: 0x00000000000e968b -> 0x00000000000e968d [ 220.221626][ C0] [ 220.223956][ C0] Reported by Kernel Concurrency Sanitizer on: [ 220.230127][ C0] CPU: 0 UID: 0 PID: 141 Comm: kworker/u8:4 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 220.240905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 220.250975][ C0] Workqueue: bat_events batadv_tt_purge [ 220.256545][ C0] ================================================================== [ 220.281813][ C1] ================================================================== [ 220.289938][ C1] BUG: KCSAN: data-race in can_send / can_send [ 220.296117][ C1] [ 220.298453][ C1] read-write to 0xffff88812514ebf0 of 8 bytes by interrupt on cpu 0: [ 220.306595][ C1] can_send+0x5b6/0x6d0 [ 220.310773][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 220.315477][ C1] can_rcv_filter+0xbf/0x4c0 [ 220.320083][ C1] can_receive+0x182/0x1f0 [ 220.324524][ C1] canfd_rcv+0xe7/0x180 [ 220.328698][ C1] __netif_receive_skb+0x123/0x280 [ 220.333830][ C1] process_backlog+0x22e/0x440 [ 220.338634][ C1] __napi_poll+0x63/0x3c0 [ 220.342989][ C1] net_rx_action+0x3a1/0x7f0 [ 220.347605][ C1] handle_softirqs+0xbf/0x280 [ 220.352304][ C1] do_softirq+0x5e/0x90 [ 220.356484][ C1] __local_bh_enable_ip+0x6e/0x70 [ 220.361574][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 220.366580][ C1] batadv_tt_local_purge+0x1a8/0x1f0 [ 220.371890][ C1] batadv_tt_purge+0x2b/0x630 [ 220.376589][ C1] process_scheduled_works+0x4db/0xa20 [ 220.382063][ C1] worker_thread+0x51d/0x6f0 [ 220.386677][ C1] kthread+0x4ae/0x520 [ 220.390858][ C1] ret_from_fork+0x4b/0x60 [ 220.395304][ C1] ret_from_fork_asm+0x1a/0x30 [ 220.400096][ C1] [ 220.402439][ C1] read-write to 0xffff88812514ebf0 of 8 bytes by interrupt on cpu 1: [ 220.410559][ C1] can_send+0x5b6/0x6d0 [ 220.414742][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 220.419456][ C1] can_rcv_filter+0xbf/0x4c0 [ 220.424072][ C1] can_receive+0x182/0x1f0 [ 220.428514][ C1] canfd_rcv+0xe7/0x180 [ 220.432693][ C1] __netif_receive_skb+0x123/0x280 [ 220.437834][ C1] process_backlog+0x22e/0x440 [ 220.442632][ C1] __napi_poll+0x63/0x3c0 [ 220.446982][ C1] net_rx_action+0x3a1/0x7f0 [ 220.451636][ C1] handle_softirqs+0xbf/0x280 [ 220.456337][ C1] do_softirq+0x5e/0x90 [ 220.460530][ C1] __local_bh_enable_ip+0x6e/0x70 [ 220.465576][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 220.470556][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 220.476223][ C1] process_scheduled_works+0x4db/0xa20 [ 220.481704][ C1] worker_thread+0x51d/0x6f0 [ 220.486320][ C1] kthread+0x4ae/0x520 [ 220.490423][ C1] ret_from_fork+0x4b/0x60 [ 220.494866][ C1] ret_from_fork_asm+0x1a/0x30 [ 220.499667][ C1] [ 220.501996][ C1] value changed: 0x000000000000f3d4 -> 0x000000000000f3d5 [ 220.509117][ C1] [ 220.511449][ C1] Reported by Kernel Concurrency Sanitizer on: [ 220.517610][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 220.528313][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 220.538389][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 220.545292][ C1] ================================================================== [ 220.577450][ C0] ================================================================== [ 220.585559][ C0] BUG: KCSAN: data-race in can_send / can_send [ 220.591732][ C0] [ 220.594061][ C0] read-write to 0xffff88812514eb90 of 8 bytes by interrupt on cpu 1: [ 220.602148][ C0] can_send+0x5a2/0x6d0 [ 220.606321][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 220.611029][ C0] can_rcv_filter+0xbf/0x4c0 [ 220.615639][ C0] can_receive+0x182/0x1f0 [ 220.620072][ C0] canfd_rcv+0xe7/0x180 [ 220.624246][ C0] __netif_receive_skb+0x123/0x280 [ 220.629382][ C0] process_backlog+0x22e/0x440 [ 220.634172][ C0] __napi_poll+0x63/0x3c0 [ 220.638524][ C0] net_rx_action+0x3a1/0x7f0 [ 220.643152][ C0] handle_softirqs+0xbf/0x280 [ 220.647856][ C0] do_softirq+0x5e/0x90 [ 220.652044][ C0] __local_bh_enable_ip+0x6e/0x70 [ 220.657096][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 220.662053][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 220.667717][ C0] process_scheduled_works+0x4db/0xa20 [ 220.673195][ C0] worker_thread+0x51d/0x6f0 [ 220.677806][ C0] kthread+0x4ae/0x520 [ 220.681904][ C0] ret_from_fork+0x4b/0x60 [ 220.686347][ C0] ret_from_fork_asm+0x1a/0x30 [ 220.691138][ C0] [ 220.693467][ C0] read-write to 0xffff88812514eb90 of 8 bytes by interrupt on cpu 0: [ 220.701549][ C0] can_send+0x5a2/0x6d0 [ 220.705722][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 220.710430][ C0] can_rcv_filter+0xbf/0x4c0 [ 220.715041][ C0] can_receive+0x182/0x1f0 [ 220.719527][ C0] canfd_rcv+0xe7/0x180 [ 220.723705][ C0] __netif_receive_skb+0x123/0x280 [ 220.728872][ C0] process_backlog+0x22e/0x440 [ 220.733677][ C0] __napi_poll+0x63/0x3c0 [ 220.738027][ C0] net_rx_action+0x3a1/0x7f0 [ 220.742649][ C0] handle_softirqs+0xbf/0x280 [ 220.747348][ C0] do_softirq+0x5e/0x90 [ 220.751527][ C0] __local_bh_enable_ip+0x6e/0x70 [ 220.756578][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 220.761549][ C0] batadv_tt_purge+0x2e7/0x630 [ 220.766339][ C0] process_scheduled_works+0x4db/0xa20 [ 220.771828][ C0] worker_thread+0x51d/0x6f0 [ 220.776447][ C0] kthread+0x4ae/0x520 [ 220.780550][ C0] ret_from_fork+0x4b/0x60 [ 220.784991][ C0] ret_from_fork_asm+0x1a/0x30 [ 220.789781][ C0] [ 220.792152][ C0] value changed: 0x00000000000f5319 -> 0x00000000000f531a [ 220.799357][ C0] [ 220.801690][ C0] Reported by Kernel Concurrency Sanitizer on: [ 220.807854][ C0] CPU: 0 UID: 0 PID: 141 Comm: kworker/u8:4 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 220.818630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 220.828705][ C0] Workqueue: bat_events batadv_tt_purge [ 220.834277][ C0] ================================================================== [ 222.709685][ C1] ================================================================== [ 222.717823][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 222.725063][ C1] [ 222.727400][ C1] read-write to 0xffff88810d5ac020 of 4 bytes by interrupt on cpu 0: [ 222.735487][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 222.740198][ C1] can_rcv_filter+0xbf/0x4c0 [ 222.744801][ C1] can_receive+0x182/0x1f0 [ 222.749236][ C1] canfd_rcv+0xe7/0x180 [ 222.753411][ C1] __netif_receive_skb+0x123/0x280 [ 222.758554][ C1] process_backlog+0x22e/0x440 [ 222.763342][ C1] __napi_poll+0x63/0x3c0 [ 222.767697][ C1] net_rx_action+0x3a1/0x7f0 [ 222.772304][ C1] handle_softirqs+0xbf/0x280 [ 222.777006][ C1] do_softirq+0x5e/0x90 [ 222.781180][ C1] __local_bh_enable_ip+0x6e/0x70 [ 222.786230][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 222.791181][ C1] wg_packet_decrypt_worker+0x173/0x6f0 [ 222.796756][ C1] process_scheduled_works+0x4db/0xa20 [ 222.802237][ C1] worker_thread+0x51d/0x6f0 [ 222.806848][ C1] kthread+0x4ae/0x520 [ 222.810945][ C1] ret_from_fork+0x4b/0x60 [ 222.815390][ C1] ret_from_fork_asm+0x1a/0x30 [ 222.820184][ C1] [ 222.822515][ C1] read-write to 0xffff88810d5ac020 of 4 bytes by interrupt on cpu 1: [ 222.830593][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 222.835298][ C1] can_rcv_filter+0xbf/0x4c0 [ 222.839907][ C1] can_receive+0x182/0x1f0 [ 222.844340][ C1] canfd_rcv+0xe7/0x180 [ 222.848516][ C1] __netif_receive_skb+0x123/0x280 [ 222.853649][ C1] process_backlog+0x22e/0x440 [ 222.858463][ C1] __napi_poll+0x63/0x3c0 [ 222.862815][ C1] net_rx_action+0x3a1/0x7f0 [ 222.867434][ C1] handle_softirqs+0xbf/0x280 [ 222.872133][ C1] run_ksoftirqd+0x1c/0x30 [ 222.876574][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 222.881531][ C1] kthread+0x4ae/0x520 [ 222.885623][ C1] ret_from_fork+0x4b/0x60 [ 222.890061][ C1] ret_from_fork_asm+0x1a/0x30 [ 222.894852][ C1] [ 222.897182][ C1] value changed: 0x0013e502 -> 0x0013e503 [ 222.902912][ C1] [ 222.905244][ C1] Reported by Kernel Concurrency Sanitizer on: [ 222.911405][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 222.922017][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 222.932092][ C1] ================================================================== [ 223.008530][ C1] ================================================================== [ 223.016652][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 223.023875][ C1] [ 223.026209][ C1] read-write to 0xffff8881033b17e8 of 8 bytes by interrupt on cpu 0: [ 223.034288][ C1] can_rcv_filter+0xd1/0x4c0 [ 223.038928][ C1] can_receive+0x182/0x1f0 [ 223.043373][ C1] canfd_rcv+0xe7/0x180 [ 223.047554][ C1] __netif_receive_skb+0x123/0x280 [ 223.052692][ C1] process_backlog+0x22e/0x440 [ 223.057490][ C1] __napi_poll+0x63/0x3c0 [ 223.061847][ C1] net_rx_action+0x3a1/0x7f0 [ 223.066467][ C1] handle_softirqs+0xbf/0x280 [ 223.071171][ C1] do_softirq+0x5e/0x90 [ 223.075348][ C1] __local_bh_enable_ip+0x6e/0x70 [ 223.080414][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 223.085382][ C1] batadv_nc_purge_paths+0x220/0x270 [ 223.090708][ C1] batadv_nc_worker+0x3db/0xad0 [ 223.095596][ C1] process_scheduled_works+0x4db/0xa20 [ 223.101078][ C1] worker_thread+0x51d/0x6f0 [ 223.105694][ C1] kthread+0x4ae/0x520 [ 223.109789][ C1] ret_from_fork+0x4b/0x60 [ 223.114236][ C1] ret_from_fork_asm+0x1a/0x30 [ 223.119030][ C1] [ 223.121365][ C1] read-write to 0xffff8881033b17e8 of 8 bytes by interrupt on cpu 1: [ 223.129452][ C1] can_rcv_filter+0xd1/0x4c0 [ 223.134063][ C1] can_receive+0x182/0x1f0 [ 223.138499][ C1] canfd_rcv+0xe7/0x180 [ 223.142677][ C1] __netif_receive_skb+0x123/0x280 [ 223.147817][ C1] process_backlog+0x22e/0x440 [ 223.152608][ C1] __napi_poll+0x63/0x3c0 [ 223.156961][ C1] net_rx_action+0x3a1/0x7f0 [ 223.161576][ C1] handle_softirqs+0xbf/0x280 [ 223.166353][ C1] do_softirq+0x5e/0x90 [ 223.170550][ C1] __local_bh_enable_ip+0x6e/0x70 [ 223.175598][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 223.180556][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 223.186211][ C1] process_scheduled_works+0x4db/0xa20 [ 223.191692][ C1] worker_thread+0x51d/0x6f0 [ 223.196306][ C1] kthread+0x4ae/0x520 [ 223.200407][ C1] ret_from_fork+0x4b/0x60 [ 223.204849][ C1] ret_from_fork_asm+0x1a/0x30 [ 223.209648][ C1] [ 223.211981][ C1] value changed: 0x0000000000146d46 -> 0x0000000000146d48 [ 223.219103][ C1] [ 223.221437][ C1] Reported by Kernel Concurrency Sanitizer on: [ 223.227596][ C1] CPU: 1 UID: 0 PID: 3324 Comm: kworker/u8:6 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 223.238467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 223.248541][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 223.255331][ C1] ================================================================== [ 223.338865][ C0] ================================================================== [ 223.346992][ C0] BUG: KCSAN: data-race in can_send / can_send [ 223.353265][ C0] [ 223.355629][ C0] read-write to 0xffff88812514ebf0 of 8 bytes by interrupt on cpu 1: [ 223.363716][ C0] can_send+0x5b6/0x6d0 [ 223.367890][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 223.372607][ C0] can_rcv_filter+0xbf/0x4c0 [ 223.377211][ C0] can_receive+0x182/0x1f0 [ 223.381641][ C0] canfd_rcv+0xe7/0x180 [ 223.385814][ C0] __netif_receive_skb+0x123/0x280 [ 223.390952][ C0] process_backlog+0x22e/0x440 [ 223.395743][ C0] __napi_poll+0x63/0x3c0 [ 223.400099][ C0] net_rx_action+0x3a1/0x7f0 [ 223.404720][ C0] handle_softirqs+0xbf/0x280 [ 223.409420][ C0] do_softirq+0x5e/0x90 [ 223.413614][ C0] __local_bh_enable_ip+0x6e/0x70 [ 223.418663][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 223.423632][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 223.429396][ C0] process_scheduled_works+0x4db/0xa20 [ 223.434879][ C0] worker_thread+0x51d/0x6f0 [ 223.439492][ C0] kthread+0x4ae/0x520 [ 223.443588][ C0] ret_from_fork+0x4b/0x60 [ 223.448038][ C0] ret_from_fork_asm+0x1a/0x30 [ 223.452875][ C0] [ 223.455209][ C0] read-write to 0xffff88812514ebf0 of 8 bytes by interrupt on cpu 0: [ 223.463300][ C0] can_send+0x5b6/0x6d0 [ 223.467479][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 223.472184][ C0] can_rcv_filter+0xbf/0x4c0 [ 223.476794][ C0] can_receive+0x182/0x1f0 [ 223.481230][ C0] canfd_rcv+0xe7/0x180 [ 223.485409][ C0] __netif_receive_skb+0x123/0x280 [ 223.490638][ C0] process_backlog+0x22e/0x440 [ 223.495433][ C0] __napi_poll+0x63/0x3c0 [ 223.499795][ C0] net_rx_action+0x3a1/0x7f0 [ 223.504428][ C0] handle_softirqs+0xbf/0x280 [ 223.509129][ C0] run_ksoftirqd+0x1c/0x30 [ 223.513581][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 223.518543][ C0] kthread+0x4ae/0x520 [ 223.522641][ C0] ret_from_fork+0x4b/0x60 [ 223.527090][ C0] ret_from_fork_asm+0x1a/0x30 [ 223.531881][ C0] [ 223.534220][ C0] value changed: 0x0000000000010b0a -> 0x0000000000010b0b [ 223.541418][ C0] [ 223.543753][ C0] Reported by Kernel Concurrency Sanitizer on: [ 223.549932][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 223.560552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 223.570630][ C0] ================================================================== [ 223.596532][ C1] ================================================================== [ 223.604647][ C1] BUG: KCSAN: data-race in can_send / can_send [ 223.610825][ C1] [ 223.613159][ C1] read-write to 0xffff88812514eb90 of 8 bytes by interrupt on cpu 0: [ 223.621240][ C1] can_send+0x5a2/0x6d0 [ 223.625416][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 223.630119][ C1] can_rcv_filter+0xbf/0x4c0 [ 223.634734][ C1] can_receive+0x182/0x1f0 [ 223.639169][ C1] canfd_rcv+0xe7/0x180 [ 223.643342][ C1] __netif_receive_skb+0x123/0x280 [ 223.648474][ C1] process_backlog+0x22e/0x440 [ 223.653262][ C1] __napi_poll+0x63/0x3c0 [ 223.657620][ C1] net_rx_action+0x3a1/0x7f0 [ 223.662236][ C1] handle_softirqs+0xbf/0x280 [ 223.666937][ C1] do_softirq+0x5e/0x90 [ 223.671117][ C1] __local_bh_enable_ip+0x6e/0x70 [ 223.676162][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 223.681117][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 223.686774][ C1] process_scheduled_works+0x4db/0xa20 [ 223.692261][ C1] worker_thread+0x51d/0x6f0