last executing test programs: 1m37.880613121s ago: executing program 4 (id=656): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4}, 0x10) 1m37.782024642s ago: executing program 4 (id=659): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000060000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1m37.576505496s ago: executing program 4 (id=662): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1m37.484322498s ago: executing program 4 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000640)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100d, 0x3a, '\x18', 0x3a, '\xf2', 0x3a, './file0/file0', 0x3a, [0x46, 0x50]}, 0x31) 1m37.405591059s ago: executing program 4 (id=666): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x24040840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 1m37.235061392s ago: executing program 4 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000360155380000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1m37.224446672s ago: executing program 32 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000360155380000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1m13.830385879s ago: executing program 5 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "98bcb94a4fdb3c8d33f986d2b6572f61fda1b1a60174e5015d5352217a274cd410ea0c76b32ac45e65b92df28b6f297396c8569e175ad27f118f7a96f5f9264a", 0x2c}, 0x48, 0xfffffffffffffffe) r3 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)={0x0, 0x0, @c}, 0x29, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) keyctl$instantiate_iov(0x14, r2, 0x0, 0x0, r3) 1m13.592556553s ago: executing program 5 (id=927): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r2, 0x1) tkill(r3, 0x14) 1m13.527731684s ago: executing program 5 (id=918): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) 1m13.471964295s ago: executing program 5 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='securityfs\x00', 0x10000, 0x0) 1m13.341627057s ago: executing program 5 (id=925): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r0 = syz_open_dev$vcsu(0x0, 0x1, 0x800) write$binfmt_register(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m13.15934428s ago: executing program 5 (id=928): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x2) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x20001000) 1m13.098251161s ago: executing program 33 (id=928): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x2) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x20001000) 4.914945354s ago: executing program 3 (id=1872): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000240)='`', 0x1) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4096, 0x7151}], 0x1) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 4.061878918s ago: executing program 3 (id=1876): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) 3.598466965s ago: executing program 0 (id=1884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 3.550739126s ago: executing program 0 (id=1897): r0 = syz_clone(0x800000, &(0x7f0000000000)="4667c2fea1bd9b8a743799232dbd46b853d651ce7b56af083065ea2557e4093d56a9d90bc8d6f2ae92b5f2d17336ebf73a634c5504244f80bfa37046fad8848f0b54e486a4314ae9a412826f3903b36f616b9350fec32004e4c928f2dba0e9052011cc157dba58", 0x67, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000003c0)="bcaa12a045ce3ccc7ecadc79f0342e2b4b37ef061efbc880543d0add22a6c15bc51da4e3671ddf5b56d8d01e7f3d7f377e74c9b774185750dc1a51a3fed69da7d8944005c10556974a0cd0b8d2825b7e28b26a82e34414f100b364f8bb6914f919f11f1f45c5510124031f1afbca028fd6a81a81048573e9657e9dc00cfebabf20678e0906b663e7") rt_sigqueueinfo(r0, 0x25, &(0x7f0000000300)={0x1e, 0x3, 0x5}) getpriority(0x0, r0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x2000) msgrcv(r2, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) stat(&(0x7f0000001c40)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff0000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 2.499511762s ago: executing program 0 (id=1890): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) syz_emit_ethernet(0x131, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) listen(r1, 0x4) close_range(0xffffffffffffffff, r1, 0x0) 2.497195322s ago: executing program 3 (id=1901): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169a82, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x4}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="950000000500000008"]) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776730"], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendfile(r0, r0, 0x0, 0x7) 2.209003176s ago: executing program 3 (id=1893): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x4}, {0x0, 0xc}}}, 0x24}}, 0x4000004) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000200)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000002c0)=r4) 1.805395492s ago: executing program 2 (id=1895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e14060868bdc7f6c817b5b948000000007a0000a71802", 0x2f}], 0x1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.804704952s ago: executing program 3 (id=1907): r0 = syz_clone(0x800000, &(0x7f0000000000)="4667c2fea1bd9b8a743799232dbd46b853d651ce7b56af083065ea2557e4093d56a9d90bc8d6f2ae92b5f2d17336ebf73a634c5504244f80bfa37046fad8848f0b54e486a4314ae9a412826f3903b36f616b9350fec32004e4c928f2dba0e9052011cc157dba58", 0x67, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000003c0)="bcaa12a045ce3ccc7ecadc79f0342e2b4b37ef061efbc880543d0add22a6c15bc51da4e3671ddf5b56d8d01e7f3d7f377e74c9b774185750dc1a51a3fed69da7d8944005c10556974a0cd0b8d2825b7e28b26a82e34414f100b364f8bb6914f919f11f1f45c5510124031f1afbca028fd6a81a81048573e9657e9dc00cfebabf20678e0906b663e7") rt_sigqueueinfo(r0, 0x25, &(0x7f0000000300)={0x1e, 0x3, 0x5}) getpriority(0x0, r0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x2000) msgrcv(r2, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) stat(&(0x7f0000001c40)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff0000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.771259193s ago: executing program 2 (id=1896): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x40021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x80, 0x0, 0x1, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.540065437s ago: executing program 0 (id=1900): unshare(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x1, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) request_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)='sy\x8akI,\xb3\f6L\xcb\xe7\xbd\x11\xa8\x052\x94.\xcf\xc62s\xf6ll\x84]\xe1\x81=\xf3\x91_m)\x81>\xab>\xaf6\x82n\x80b\xc5\t38%\xab\xdd\"4e9\xbfp\xb9\x920d\xc8S\xd0\x80\x0f\x1f\a\xac\x0f\x87|:\xee\x04\x1ba\xa5w\x18\xa1\x1c\xb15\xca\xb6P\xa7\re`Z\x8a\x8bWsI\xf4s8 \xaa\x99\xea\xcb\xb4\x83\a\t\xc6\xcf\xc5\xed\x1d=a%\xe8\x9e9\x12u\x9c\x13~\x97\xe3\x9c\x03L\xe0i\x13~}d\xd0\x82|\xe1B6d\xcaMj\x03\xb2l\x97\xce\\b\xc702\xb5\x1b\xc9V\x95Gd0\xeb\xa0\xcai\x1b\xcf\xba\xe2\xa0\xc1\xa7\x0e\xc7D\xc9\x8d\xdfk\x7fTwX\xaaaq\xfe)WG\xb5\xbb\xd6.\xd1F#[B\xb58\xed\xdc6\x13\xc6\x02\x91\xca\xac\x9e\xd8j\xa2\xffN\x11\x14\xb8\x9a\xaa4\'\xa5|\xa1\xd7\",\xf6or\",\x83y.\xc8\xd6\x8d]\xae\xa2\xe6\x90\xcb}\x8f \xaa\xce\xa9\xebz\xda~\xeb\xb0\x15\xd1\x9b\x90\xdc\xe4\x88\xc1\x17\x81\x9b\x1b\x82\xf1\r\xd4\x85Be;', 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.532146407s ago: executing program 1 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1.441221268s ago: executing program 1 (id=1903): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat(r4, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 1.391103789s ago: executing program 1 (id=1904): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 957.189526ms ago: executing program 3 (id=1905): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 956.848666ms ago: executing program 6 (id=1906): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 955.200426ms ago: executing program 0 (id=1917): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0xa, @local}, 0x10, &(0x7f00000001c0)}, 0x20000084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x800) 954.695006ms ago: executing program 1 (id=1908): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 954.391836ms ago: executing program 2 (id=1909): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0xa, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x6, 0xff, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x5}, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 770.965109ms ago: executing program 2 (id=1910): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x2a478702fbf3522d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 770.603349ms ago: executing program 6 (id=1911): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100000, 0x0, 0x3ff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x800000) 770.139728ms ago: executing program 1 (id=1922): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169a82, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x4}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="950000000500000008"]) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776730"], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendfile(r0, r0, 0x0, 0x7) 634.93844ms ago: executing program 2 (id=1913): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 634.18869ms ago: executing program 6 (id=1925): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 528.785422ms ago: executing program 2 (id=1914): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) syz_emit_ethernet(0x131, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) listen(r1, 0x4) close_range(0xffffffffffffffff, r1, 0x0) 528.384542ms ago: executing program 6 (id=1915): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000240)='`', 0x1) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4096, 0x7151}], 0x1) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 97.048889ms ago: executing program 0 (id=1916): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 96.596879ms ago: executing program 6 (id=1918): unshare(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x1, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) request_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)='sy\x8akI,\xb3\f6L\xcb\xe7\xbd\x11\xa8\x052\x94.\xcf\xc62s\xf6ll\x84]\xe1\x81=\xf3\x91_m)\x81>\xab>\xaf6\x82n\x80b\xc5\t38%\xab\xdd\"4e9\xbfp\xb9\x920d\xc8S\xd0\x80\x0f\x1f\a\xac\x0f\x87|:\xee\x04\x1ba\xa5w\x18\xa1\x1c\xb15\xca\xb6P\xa7\re`Z\x8a\x8bWsI\xf4s8 \xaa\x99\xea\xcb\xb4\x83\a\t\xc6\xcf\xc5\xed\x1d=a%\xe8\x9e9\x12u\x9c\x13~\x97\xe3\x9c\x03L\xe0i\x13~}d\xd0\x82|\xe1B6d\xcaMj\x03\xb2l\x97\xce\\b\xc702\xb5\x1b\xc9V\x95Gd0\xeb\xa0\xcai\x1b\xcf\xba\xe2\xa0\xc1\xa7\x0e\xc7D\xc9\x8d\xdfk\x7fTwX\xaaaq\xfe)WG\xb5\xbb\xd6.\xd1F#[B\xb58\xed\xdc6\x13\xc6\x02\x91\xca\xac\x9e\xd8j\xa2\xffN\x11\x14\xb8\x9a\xaa4\'\xa5|\xa1\xd7\",\xf6or\",\x83y.\xc8\xd6\x8d]\xae\xa2\xe6\x90\xcb}\x8f \xaa\xce\xa9\xebz\xda~\xeb\xb0\x15\xd1\x9b\x90\xdc\xe4\x88\xc1\x17\x81\x9b\x1b\x82\xf1\r\xd4\x85Be;', 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 94.832809ms ago: executing program 1 (id=1919): r0 = syz_clone(0x800000, &(0x7f0000000000)="4667c2fea1bd9b8a743799232dbd46b853d651ce7b56af083065ea2557e4093d56a9d90bc8d6f2ae92b5f2d17336ebf73a634c5504244f80bfa37046fad8848f0b54e486a4314ae9a412826f3903b36f616b9350fec32004e4c928f2dba0e9052011cc157dba58", 0x67, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000003c0)="bcaa12a045ce3ccc7ecadc79f0342e2b4b37ef061efbc880543d0add22a6c15bc51da4e3671ddf5b56d8d01e7f3d7f377e74c9b774185750dc1a51a3fed69da7d8944005c10556974a0cd0b8d2825b7e28b26a82e34414f100b364f8bb6914f919f11f1f45c5510124031f1afbca028fd6a81a81048573e9657e9dc00cfebabf20678e0906b663e7") rt_sigqueueinfo(r0, 0x25, &(0x7f0000000300)={0x1e, 0x3, 0x5}) getpriority(0x0, r0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x2000) msgrcv(r2, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) stat(&(0x7f0000001c40)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff0000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 0s ago: executing program 6 (id=1920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) kernel console output (not intermixed with test programs): f07eca5e929 code=0x7ffc0000 [ 99.890174][ T29] audit: type=1326 audit(1749179014.315:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 99.913575][ T29] audit: type=1326 audit(1749179014.315:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 99.937080][ T29] audit: type=1326 audit(1749179014.315:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 99.960456][ T29] audit: type=1326 audit(1749179014.315:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 99.984095][ T29] audit: type=1326 audit(1749179014.315:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 100.036344][ T7092] Driver unsupported XDP return value 0 on prog (id 802) dev N/A, expect packet loss! [ 100.178367][ T7113] SELinux: Context system_u:object_r:setfiles_exec_t:s0 is not valid (left unmapped). [ 100.470836][ T7146] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 100.490782][ T7146] SELinux: failed to load policy [ 100.501986][ T7139] loop2: detected capacity change from 0 to 512 [ 100.573606][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.589093][ T7139] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.620723][ T7139] EXT4-fs: Ignoring removed orlov option [ 100.635033][ T7139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.646238][ T7142] ÿÿÿÿÿÿ: renamed from vlan1 [ 100.684575][ T7139] EXT4-fs (loop2): can't enable nombcache during remount [ 100.759417][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.829969][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.6.995'. [ 100.890936][ T7184] loop6: detected capacity change from 0 to 2048 [ 101.080216][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.082286][ T7198] syzkaller0: entered promiscuous mode [ 101.090521][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.094290][ T7198] syzkaller0: entered allmulticast mode [ 101.203606][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 101.259493][ T7225] lo speed is unknown, defaulting to 1000 [ 101.420344][ T7245] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 101.458862][ T7244] syzkaller0: entered promiscuous mode [ 101.464505][ T7244] syzkaller0: entered allmulticast mode [ 101.847960][ T7298] loop1: detected capacity change from 0 to 128 [ 101.897003][ T7298] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.038850][ T7298] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.397922][ T7312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.756996][ T7315] syzkaller0: entered promiscuous mode [ 102.763545][ T7315] syzkaller0: entered allmulticast mode [ 102.790071][ T7312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.829719][ T7323] loop2: detected capacity change from 0 to 2048 [ 102.868351][ T7312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.887435][ T6516] Alternate GPT is invalid, using primary GPT. [ 102.893720][ T6516] loop2: p1 p2 p3 [ 102.911299][ T3006] udevd[3006]: worker [6516] terminated by signal 33 (Unknown signal 33) [ 102.920926][ T3006] udevd[3006]: worker [6516] failed while handling '/devices/virtual/block/loop2' [ 102.932795][ T7323] Alternate GPT is invalid, using primary GPT. [ 102.939162][ T7323] loop2: p1 p2 p3 [ 103.025141][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1028'. [ 103.039315][ T7312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.141867][ T7312] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.163240][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 103.163259][ T29] audit: type=1326 audit(2000000002.140:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.193772][ T7330] loop3: detected capacity change from 0 to 164 [ 103.202664][ T29] audit: type=1326 audit(2000000002.140:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.204954][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.226601][ T29] audit: type=1326 audit(2000000002.140:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.259702][ T29] audit: type=1326 audit(2000000002.140:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.260343][ T7312] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.283300][ T29] audit: type=1326 audit(2000000002.140:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.315263][ T29] audit: type=1326 audit(2000000002.140:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.338713][ T29] audit: type=1326 audit(2000000002.140:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.341020][ T3793] udevd[3793]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.362162][ T29] audit: type=1326 audit(2000000002.140:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.374116][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.395405][ T29] audit: type=1326 audit(2000000002.160:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.428899][ T29] audit: type=1326 audit(2000000002.160:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 103.453731][ T7330] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 103.463896][ T7312] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.504683][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.516589][ T7330] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 103.518985][ T3793] udevd[3793]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.544985][ T7330] Symlink component flag not implemented [ 103.550691][ T7330] Symlink component flag not implemented [ 103.556752][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.566769][ T7330] Symlink component flag not implemented (7) [ 103.572792][ T7330] Symlink component flag not implemented (116) [ 103.588620][ T7312] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.638515][ T7337] netlink: 'syz.2.1031': attribute type 3 has an invalid length. [ 104.271296][ T7368] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.319466][ T7373] netlink: 'syz.2.1044': attribute type 10 has an invalid length. [ 104.327526][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1044'. [ 104.344587][ T7368] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.369002][ T7375] loop6: detected capacity change from 0 to 512 [ 104.378622][ T7373] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 104.385596][ T7375] EXT4-fs: Ignoring removed nobh option [ 104.409189][ T7377] vlan2: entered allmulticast mode [ 104.422441][ T7375] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 104.436269][ T7375] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1047: attempt to clear invalid blocks 2 len 1 [ 104.456570][ T7368] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.515432][ T7375] EXT4-fs (loop6): Remounting filesystem read-only [ 104.528315][ T7375] EXT4-fs (loop6): 1 truncate cleaned up [ 104.536731][ T7368] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.556807][ T7375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.592218][ T7368] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.605189][ T7368] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.630476][ T7368] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.644825][ T7368] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.745244][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 104.773082][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.844588][ T7382] lo speed is unknown, defaulting to 1000 [ 104.893933][ T7388] loop6: detected capacity change from 0 to 512 [ 104.983439][ T7388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.018438][ T7388] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.108944][ T7384] lo speed is unknown, defaulting to 1000 [ 105.139552][ T36] IPVS: starting estimator thread 0... [ 105.218730][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.255035][ T7397] IPVS: using max 1968 ests per chain, 98400 per kthread [ 105.378511][ T7405] loop3: detected capacity change from 0 to 1024 [ 105.515580][ T7414] loop6: detected capacity change from 0 to 2048 [ 105.565877][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.578942][ T3793] loop6: p1 < > p4 < > [ 105.590235][ T7414] loop6: p1 < > p4 < > [ 105.641828][ T7419] loop1: detected capacity change from 0 to 1024 [ 105.655991][ T7419] ext4: Unknown parameter 'nouser_xattr' [ 105.753158][ T7429] tipc: Started in network mode [ 105.758141][ T7429] tipc: Node identity a66818a77213, cluster identity 4711 [ 105.765381][ T7429] tipc: Enabled bearer , priority 0 [ 105.776664][ T7429] syzkaller0: MTU too low for tipc bearer [ 105.782488][ T7429] tipc: Disabling bearer [ 105.880302][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1065'. [ 105.894481][ T7434] wg2: entered promiscuous mode [ 105.899521][ T7434] wg2: entered allmulticast mode [ 106.026770][ T7448] loop3: detected capacity change from 0 to 1024 [ 106.037064][ T7448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.064996][ T7448] ALSA: seq fatal error: cannot create timer (-19) [ 106.091431][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.081642][ T7472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.347875][ T7483] loop3: detected capacity change from 0 to 512 [ 107.415247][ T7483] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1081: corrupted in-inode xattr: invalid ea_ino [ 107.435296][ T7483] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1081: couldn't read orphan inode 15 (err -117) [ 107.452038][ T7483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.542327][ T7492] loop1: detected capacity change from 0 to 512 [ 107.551012][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.576361][ T7492] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 107.594912][ T7492] System zones: 0-2, 18-18, 34-35 [ 107.613581][ T7492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.629805][ T7492] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.681721][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.028425][ T7512] $Hÿ: renamed from bond0 (while UP) [ 108.036006][ T7512] $Hÿ: entered promiscuous mode [ 108.041129][ T7512] bond_slave_0: entered promiscuous mode [ 108.047057][ T7512] bond_slave_1: entered promiscuous mode [ 108.187280][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 108.187299][ T29] audit: type=1400 audit(2000000007.170:1890): avc: denied { name_bind } for pid=7515 comm="syz.0.1092" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 108.315795][ T7520] lo speed is unknown, defaulting to 1000 [ 108.473089][ T7529] loop6: detected capacity change from 0 to 512 [ 108.498960][ T7529] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 108.541412][ T7529] System zones: 0-2, 18-18, 34-35 [ 108.553240][ T7529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.566485][ T7529] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.582183][ T7525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1096'. [ 108.624559][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.712832][ T7545] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1105'. [ 108.740364][ T7547] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.780494][ T7552] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 108.806626][ T7547] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.878598][ T7547] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.960552][ T7547] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.006409][ T7570] loop1: detected capacity change from 0 to 512 [ 109.039458][ T7547] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.052011][ T7547] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.060575][ T29] audit: type=1400 audit(2000000008.020:1891): avc: denied { connect } for pid=7571 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.085729][ T7547] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.088538][ T7575] loop2: detected capacity change from 0 to 512 [ 109.098622][ T7547] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.119111][ T7575] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 109.130540][ T7575] System zones: 0-2, 18-18, 34-35 [ 109.146627][ T7575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.170888][ T7575] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.206916][ T7570] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1111: bad orphan inode 15 [ 109.288484][ T7570] ext4_test_bit(bit=14, block=5) = 0 [ 109.297897][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.309323][ T7570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.334652][ T29] audit: type=1400 audit(2000000008.310:1892): avc: denied { write } for pid=7591 comm="syz.6.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.385272][ T7566] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.407772][ T7596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.485055][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.528923][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1119'. [ 109.627850][ T7609] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1122'. [ 109.785804][ T7622] loop1: detected capacity change from 0 to 256 [ 109.801144][ T7622] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.859789][ T7628] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 109.882661][ T7625] vlan1: entered allmulticast mode [ 109.910213][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 110.015050][ T7628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.038139][ T7629] bond0 (unregistering): Released all slaves [ 110.117229][ T7639] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1133'. [ 110.133168][ T7641] No such timeout policy "syz0" [ 110.142112][ T29] audit: type=1326 audit(2000000009.120:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 110.189622][ T29] audit: type=1326 audit(2000000009.150:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 110.213320][ T29] audit: type=1326 audit(2000000009.150:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 110.236997][ T29] audit: type=1326 audit(2000000009.150:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 110.260506][ T29] audit: type=1326 audit(2000000009.150:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 110.283960][ T29] audit: type=1326 audit(2000000009.150:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 110.307431][ T29] audit: type=1326 audit(2000000009.150:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 110.334652][ T7645] loop3: detected capacity change from 0 to 512 [ 110.390297][ T7651] pim6reg1: entered promiscuous mode [ 110.395719][ T7651] pim6reg1: entered allmulticast mode [ 110.403925][ T7650] loop6: detected capacity change from 0 to 1024 [ 110.415541][ T7645] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 110.423835][ T7645] System zones: 0-2, 18-18, 34-35 [ 110.431419][ T7645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.444360][ T7645] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.446232][ T7650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.483142][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.509796][ T7650] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1138: Allocating blocks 497-513 which overlap fs metadata [ 110.524298][ T7650] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1138: Allocating blocks 497-513 which overlap fs metadata [ 110.540436][ T7647] EXT4-fs (loop6): pa ffff888106d92690: logic 48, phys. 177, len 21 [ 110.548659][ T7647] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 110.560174][ T7665] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 110.568293][ T7665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1142'. [ 110.587917][ T7665] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.596247][ T7665] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.604717][ T7665] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.614315][ T7665] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 110.623586][ T7665] team0: Failed to send options change via netlink (err -105) [ 110.631354][ T7665] team0: Port device geneve1 added [ 110.647139][ T7660] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.666332][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.724765][ T7677] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.739045][ T7660] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.753260][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'. [ 110.777240][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'. [ 110.790551][ T7680] loop2: detected capacity change from 0 to 8192 [ 110.797565][ T7680] vfat: Unknown parameter 'ÿÿÿÿ³À¶Í닃¹¬HŠ!û´1ÇÉ`w á)¯ïea뀋-˜àsàøŒ_«uŪ][_Hq¢mÍÊ5W†)‘-3?b5e]ó°C"XGê •Ž\¸ZãÇH¹Pú•X017777777777777777777770xffffffffffffffff18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 110.820550][ T7677] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.839756][ T7660] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.867519][ T7677] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.894579][ T7660] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.906739][ T7660] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.919747][ T7660] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.928979][ T7677] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.943408][ T7660] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.002584][ T7677] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.014345][ T7677] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.026592][ T7677] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.038909][ T7677] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.058560][ T7686] loop2: detected capacity change from 0 to 8192 [ 111.095473][ T7699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.148570][ T7707] loop2: detected capacity change from 0 to 512 [ 111.167710][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.237421][ T7720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1162'. [ 111.254941][ T7707] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.281578][ T7718] tipc: Enabled bearer , priority 0 [ 111.298683][ T7716] tipc: Resetting bearer [ 111.334970][ T7716] tipc: Disabling bearer [ 111.346326][ T7728] tipc: Started in network mode [ 111.351233][ T7728] tipc: Node identity ac14140f, cluster identity 4711 [ 111.359745][ T7728] tipc: New replicast peer: 0.0.255.255 [ 111.365376][ T7728] tipc: Enabled bearer , priority 10 [ 111.441554][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.566411][ T7753] $Hÿ: renamed from bond0 [ 111.572632][ T7753] $Hÿ: entered promiscuous mode [ 111.577831][ T7753] bond_slave_0: entered promiscuous mode [ 111.583916][ T7753] bond_slave_1: entered promiscuous mode [ 111.734237][ T7769] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 111.741772][ T7767] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1179'. [ 111.788512][ T7771] uprobe: syz.6.1181:7771 failed to unregister, leaking uprobe [ 111.796048][ T7774] lo speed is unknown, defaulting to 1000 [ 111.804424][ T7775] loop2: detected capacity change from 0 to 1024 [ 111.812446][ T7775] EXT4-fs: Ignoring removed nobh option [ 111.818106][ T7775] EXT4-fs: Ignoring removed bh option [ 111.839681][ T7775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.923624][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 111.943966][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.967874][ T7789] bridge_slave_1 (unregistering): left allmulticast mode [ 111.975077][ T7789] bridge_slave_1 (unregistering): left promiscuous mode [ 111.982105][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.008324][ T7794] $Hÿ: renamed from bond0 (while UP) [ 112.017060][ T7794] $Hÿ: entered promiscuous mode [ 112.027689][ T7794] bond_slave_0: entered promiscuous mode [ 112.033610][ T7794] bond_slave_1: entered promiscuous mode [ 112.218972][ T7803] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 112.250089][ T7803] SELinux: failed to load policy [ 112.358299][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1204'. [ 112.367391][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1204'. [ 112.376491][ T3423] tipc: Node number set to 2886997007 [ 112.418526][ T7806] loop3: detected capacity change from 0 to 512 [ 112.425754][ T7806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.449917][ T7806] EXT4-fs (loop3): 1 truncate cleaned up [ 112.515846][ T7806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.535736][ T7813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.594523][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.690634][ T7818] hub 8-0:1.0: USB hub found [ 112.700642][ T7818] hub 8-0:1.0: 8 ports detected [ 112.718872][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.931445][ T7842] loop2: detected capacity change from 0 to 512 [ 112.970202][ T7842] EXT4-fs (loop2): 1 orphan inode deleted [ 112.978622][ T7844] bridge_slave_0: left promiscuous mode [ 112.984419][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.992744][ T7842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.996313][ T4430] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 113.026493][ T7842] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.056794][ T7844] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 113.081617][ T7844] bond_slave_0: left promiscuous mode [ 113.090368][ T7855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 113.113490][ T7844] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 113.125417][ T7844] bond_slave_1: left promiscuous mode [ 113.134266][ T7844] team0: Port device team_slave_0 removed [ 113.153200][ T7844] team0: Port device team_slave_1 removed [ 113.160464][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.168440][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.186973][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.194573][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.196127][ T7842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7842 comm=syz.2.1209 [ 113.214381][ T7842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7842 comm=syz.2.1209 [ 113.246051][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 113.246070][ T29] audit: type=1326 audit(2000000012.230:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7852 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 113.275738][ T29] audit: type=1326 audit(2000000012.230:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7852 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 113.302167][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.335966][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 113.346359][ T7860] loop6: detected capacity change from 0 to 8192 [ 113.353123][ T7860] vfat: Unknown parameter 'ÿÿÿÿ³À¶Í닃¹¬HŠ!û´1ÇÉ`w á)¯ïea뀋-˜àsàøŒ_«uŪ][_Hq¢mÍÊ5W†)‘-3?b5e]ó°C"XGê •Ž\¸ZãÇH¹Pú•X017777777777777777777770xffffffffffffffff18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 113.423191][ T29] audit: type=1400 audit(2000000012.400:2099): avc: denied { append } for pid=7871 comm="syz.1.1218" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.587231][ T29] audit: type=1326 audit(2000000012.560:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 113.610857][ T29] audit: type=1326 audit(2000000012.560:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 113.662109][ T29] audit: type=1326 audit(2000000012.620:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41b8b4d290 code=0x7ffc0000 [ 113.685910][ T29] audit: type=1326 audit(2000000012.630:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 113.709366][ T29] audit: type=1326 audit(2000000012.630:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 113.732936][ T29] audit: type=1326 audit(2000000012.630:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 113.756478][ T29] audit: type=1326 audit(2000000012.630:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 113.782729][ T7887] hub 9-0:1.0: USB hub found [ 113.789361][ T7887] hub 9-0:1.0: 8 ports detected [ 113.799544][ T7890] usb usb1: usbfs: process 7890 (syz.6.1225) did not claim interface 0 before use [ 113.850142][ T7897] SELinux: Context Ü is not valid (left unmapped). [ 113.938146][ T7902] lo speed is unknown, defaulting to 1000 [ 114.082010][ T7910] loop2: detected capacity change from 0 to 512 [ 114.727447][ T7910] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1227: casefold flag without casefold feature [ 114.768718][ T7910] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1227: couldn't read orphan inode 15 (err -117) [ 114.788053][ T7910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.221578][ T7920] lo speed is unknown, defaulting to 1000 [ 115.287728][ T7921] loop1: detected capacity change from 0 to 8192 [ 115.311903][ T7921] vfat: Unknown parameter 'ÿÿÿÿ³À¶Í닃¹¬HŠ!û´1ÇÉ`w á)¯ïea뀋-˜àsàøŒ_«uŪ][_Hq¢mÍÊ5W†)‘-3?b5e]ó°C"XGê •Ž\¸ZãÇH¹Pú•X017777777777777777777770xffffffffffffffff18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 115.796770][ T7941] loop1: detected capacity change from 0 to 512 [ 115.817155][ T7941] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 115.865119][ T7941] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1240: bad orphan inode 15 [ 115.878226][ T7943] loop6: detected capacity change from 0 to 512 [ 115.896939][ T7941] ext4_test_bit(bit=14, block=18) = 1 [ 115.902526][ T7941] is_bad_inode(inode)=0 [ 115.906767][ T7941] NEXT_ORPHAN(inode)=1023 [ 115.911128][ T7941] max_ino=32 [ 115.914333][ T7941] i_nlink=0 [ 115.919517][ T7943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.937657][ T7941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 115.960661][ T7943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.983727][ T7941] ext2 filesystem being mounted at /259/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 116.007029][ T7943] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.076793][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.135885][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.511020][ T7958] batman_adv: batadv0: Adding interface: ip6gretap1 [ 116.517700][ T7958] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.543350][ T7958] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 116.566896][ T7958] batman_adv: batadv0: Removing interface: ip6gretap1 [ 116.591761][ T7961] pim6reg1: entered promiscuous mode [ 116.597185][ T7961] pim6reg1: entered allmulticast mode [ 116.694763][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 116.743982][ T7967] loop1: detected capacity change from 0 to 512 [ 116.770988][ T7967] EXT4-fs (loop1): 1 orphan inode deleted [ 116.782730][ T7967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.795660][ T4478] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 116.813552][ T7967] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.854231][ T7967] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1248: iget: bad i_size value: 360287970189639690 [ 116.902421][ T7967] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1248: iget: bad i_size value: 360287970189639690 [ 116.915816][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 116.943132][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.963045][ T7977] bond0: entered promiscuous mode [ 116.968236][ T7977] bond0: entered allmulticast mode [ 116.981442][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.364214][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1273'. [ 117.376158][ T8022] loop3: detected capacity change from 0 to 164 [ 117.386885][ T8022] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.416792][ T8027] netlink: 'syz.2.1270': attribute type 13 has an invalid length. [ 117.454297][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 117.463711][ T8027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.544805][ T8046] bridge0: port 3(gretap0) entered blocking state [ 117.551546][ T8046] bridge0: port 3(gretap0) entered disabled state [ 117.558954][ T8046] gretap0: entered allmulticast mode [ 117.565302][ T8046] gretap0: entered promiscuous mode [ 117.750479][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1290'. [ 117.781600][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 118.113720][ T8083] loop6: detected capacity change from 0 to 1024 [ 118.165092][ T8083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.313397][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.414242][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 118.414259][ T29] audit: type=1326 audit(2000000017.390:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.554706][ T29] audit: type=1326 audit(2000000017.430:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.578354][ T29] audit: type=1326 audit(2000000017.430:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.601791][ T29] audit: type=1326 audit(2000000017.430:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.625347][ T29] audit: type=1326 audit(2000000017.430:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.648775][ T29] audit: type=1326 audit(2000000017.430:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.672196][ T29] audit: type=1326 audit(2000000017.430:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.695705][ T29] audit: type=1326 audit(2000000017.430:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.719358][ T29] audit: type=1326 audit(2000000017.440:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 118.742938][ T29] audit: type=1326 audit(2000000017.440:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8087 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8b4e929 code=0x7ffc0000 [ 119.250107][ T8107] program syz.6.1307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.324315][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1307'. [ 119.351061][ T8110] netlink: 'syz.3.1308': attribute type 10 has an invalid length. [ 119.362118][ T8110] team0 (unregistering): Port device team_slave_0 removed [ 119.399768][ T8110] team0 (unregistering): Port device team_slave_1 removed [ 119.417365][ T8110] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.425928][ T8110] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.434762][ T8110] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.443284][ T8110] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.485097][ T8110] team0 (unregistering): Port device geneve1 removed [ 119.544297][ T8115] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.592502][ T8116] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 119.600576][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1310'. [ 119.648517][ T8115] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.659271][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 119.668387][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 119.679462][ T8116] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 119.714147][ T8124] loop3: detected capacity change from 0 to 128 [ 119.766474][ T8115] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.836109][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.836109][ T8124] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 119.850189][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.850189][ T8124] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 119.864199][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.864199][ T8124] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 119.878283][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.878283][ T8124] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 119.892349][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.892349][ T8124] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 119.906372][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.906372][ T8124] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 119.920216][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.920216][ T8124] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 119.935689][ T8115] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.936573][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.936573][ T8124] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 119.959286][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.959286][ T8124] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 119.972918][ T8124] syz.3.1313: attempt to access beyond end of device [ 119.972918][ T8124] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 120.032295][ T8115] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.045132][ T8115] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.058238][ T8115] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.071103][ T8115] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.247692][ T8151] siw: device registration error -23 [ 120.377279][ T8163] ip6tnl2: entered allmulticast mode [ 120.490165][ T8161] loop3: detected capacity change from 0 to 8192 [ 120.512294][ T8177] loop1: detected capacity change from 0 to 512 [ 120.519636][ T8161] vfat: Unknown parameter 'ÿÿÿÿ³À¶Í닃¹¬HŠ!û´1ÇÉ`w á)¯ïea뀋-˜àsàøŒ_«uŪ][_Hq¢mÍÊ5W†)‘-3?b5e]ó°C"XGê •Ž\¸ZãÇH¹Pú•X017777777777777777777770xffffffffffffffff18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 120.545177][ T8177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.562361][ T8177] EXT4-fs (loop1): 1 truncate cleaned up [ 120.586391][ T8177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.692177][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.716616][ T8185] loop6: detected capacity change from 0 to 1024 [ 120.729290][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 120.733339][ T8185] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.749280][ T8185] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.762380][ T8185] JBD2: no valid journal superblock found [ 120.768249][ T8185] EXT4-fs (loop6): Could not load journal inode [ 120.776268][ T8189] loop2: detected capacity change from 0 to 128 [ 120.798368][ T8193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=8193 comm=syz.1.1339 [ 120.824115][ T8189] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 120.833570][ T8189] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 120.842509][ T8189] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 120.851570][ T8189] Buffer I/O error on dev loop2, logical block 134, lost async page write [ 120.860688][ T8189] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 120.869373][ T8189] Buffer I/O error on dev loop2, logical block 136, lost async page write [ 120.934513][ T8207] loop3: detected capacity change from 0 to 512 [ 120.942285][ T8207] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 120.951597][ T8207] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.1342: bad orphan inode 15 [ 120.962868][ T8207] ext4_test_bit(bit=14, block=18) = 1 [ 120.968475][ T8207] is_bad_inode(inode)=0 [ 120.972943][ T8207] NEXT_ORPHAN(inode)=1023 [ 120.977458][ T8207] max_ino=32 [ 120.981222][ T8207] i_nlink=0 [ 120.985483][ T8207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 120.999926][ T8207] ext2 filesystem being mounted at /173/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 121.667645][ T8224] TCP: out of memory -- consider tuning tcp_mem [ 121.702315][ T8226] loop1: detected capacity change from 0 to 2048 [ 121.716776][ T8226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.740648][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.787078][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 121.791266][ T8234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8234 comm=syz.2.1356 [ 121.817536][ T8238] netlink: 'syz.3.1357': attribute type 1 has an invalid length. [ 121.832154][ T8238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.850941][ T8238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.858335][ T8238] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 121.869558][ T8238] bond0: (slave vti0): Error -95 calling set_mac_address [ 121.882731][ T8234] vlan2: entered allmulticast mode [ 121.888034][ T8234] bond0: entered allmulticast mode [ 121.903235][ T8244] bond0: (slave gretap1): making interface the new active one [ 121.911102][ T8244] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 122.341958][ T8264] loop6: detected capacity change from 0 to 512 [ 122.364259][ T8264] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 122.401416][ T8264] EXT4-fs (loop6): 1 truncate cleaned up [ 122.413349][ T8264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.727197][ T8272] loop2: detected capacity change from 0 to 512 [ 122.777961][ T8272] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 122.826184][ T8272] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.1368: bad orphan inode 15 [ 122.952238][ T8272] ext4_test_bit(bit=14, block=18) = 1 [ 122.957856][ T8272] is_bad_inode(inode)=0 [ 122.962049][ T8272] NEXT_ORPHAN(inode)=1023 [ 122.966550][ T8272] max_ino=32 [ 122.969778][ T8272] i_nlink=0 [ 123.015451][ T8272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 123.035352][ T8272] ext2 filesystem being mounted at /244/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 123.419086][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.444806][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 123.446050][ T8293] random: crng reseeded on system resumption [ 123.450991][ T29] audit: type=1400 audit(2000000022.420:2227): avc: denied { append } for pid=8292 comm="syz.0.1377" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.482147][ T29] audit: type=1400 audit(2000000022.420:2228): avc: denied { open } for pid=8292 comm="syz.0.1377" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.505829][ T29] audit: type=1326 audit(2000000022.440:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x0 [ 123.551531][ T29] audit: type=1400 audit(2000000022.530:2230): avc: denied { append } for pid=8300 comm="syz.1.1382" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.638789][ T8307] syzkaller0: entered allmulticast mode [ 123.645642][ T8307] syzkaller0: entered promiscuous mode [ 123.652165][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 123.663158][ T8307] syzkaller0 (unregistering): left allmulticast mode [ 123.670023][ T8307] syzkaller0 (unregistering): left promiscuous mode [ 124.237541][ T8312] __nla_validate_parse: 2 callbacks suppressed [ 124.237562][ T8312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1388'. [ 124.265455][ T8316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.277013][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 124.307703][ T8316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.320365][ T8321] netlink: 'syz.0.1385': attribute type 10 has an invalid length. [ 124.328480][ T8321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1385'. [ 124.348934][ T8321] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 124.358177][ T8321] team0: Failed to send options change via netlink (err -105) [ 124.365731][ T8321] team0: Port device geneve1 added [ 124.409098][ T8329] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 124.416994][ T8329] netlink: 'syz.1.1393': attribute type 4 has an invalid length. [ 124.424715][ T8329] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1393'. [ 124.438138][ T8329] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 124.446049][ T8329] netlink: 'syz.1.1393': attribute type 4 has an invalid length. [ 124.453991][ T8329] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1393'. [ 124.468297][ T8316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.560053][ T29] audit: type=1326 audit(2000000023.540:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 124.584997][ T29] audit: type=1326 audit(2000000023.540:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 124.608617][ T29] audit: type=1326 audit(2000000023.540:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 124.632268][ T29] audit: type=1326 audit(2000000023.540:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 124.656089][ T29] audit: type=1326 audit(2000000023.540:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 124.679566][ T29] audit: type=1326 audit(2000000023.540:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 124.706109][ T8316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.716665][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.725406][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.784292][ T8316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.798134][ T8316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.802048][ T8349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1402'. [ 124.811858][ T8316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.824102][ T8349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1402'. [ 124.838006][ T8316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.874337][ T3195] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 124.881942][ T8354] loop2: detected capacity change from 0 to 512 [ 124.888807][ T3195] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.909932][ T8354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.922866][ T8354] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.976268][ T8354] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1404: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 124.997589][ T8354] EXT4-fs (loop2): Remounting filesystem read-only [ 125.077495][ T8362] lo speed is unknown, defaulting to 1000 [ 125.141204][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.149931][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.636869][ T8372] loop6: detected capacity change from 0 to 512 [ 125.655538][ T8372] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 125.664413][ T8375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 125.688058][ T8372] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.1409: bad orphan inode 15 [ 125.715198][ T8372] ext4_test_bit(bit=14, block=18) = 1 [ 125.720645][ T8372] is_bad_inode(inode)=0 [ 125.724944][ T8372] NEXT_ORPHAN(inode)=1023 [ 125.729282][ T8372] max_ino=32 [ 125.732537][ T8372] i_nlink=0 [ 125.742005][ T8372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 125.750127][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.764120][ T8372] ext2 filesystem being mounted at /90/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 126.120852][ T8410] lo speed is unknown, defaulting to 1000 [ 126.245366][ T8357] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 126.503672][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 126.746054][ T8436] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 126.758264][ T8436] batman_adv: batadv0: Adding interface: ip6gretap1 [ 126.765038][ T8436] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.790995][ T8436] batman_adv: batadv0: Interface activated: ip6gretap1 [ 126.866321][ T8440] IPv6: sit1: Disabled Multicast RS [ 126.872796][ T8440] sit1: entered allmulticast mode [ 126.901898][ T8442] lo speed is unknown, defaulting to 1000 [ 127.053126][ T8451] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1437'. [ 127.062189][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1437'. [ 127.071315][ T8451] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1437'. [ 127.085103][ T8453] program syz.0.1440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.271639][ T8456] loop1: detected capacity change from 0 to 512 [ 127.278957][ T8456] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 127.288580][ T8456] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1441: bad orphan inode 15 [ 127.298962][ T8456] ext4_test_bit(bit=14, block=18) = 1 [ 127.304350][ T8456] is_bad_inode(inode)=0 [ 127.308563][ T8456] NEXT_ORPHAN(inode)=1023 [ 127.313078][ T8456] max_ino=32 [ 127.316412][ T8456] i_nlink=0 [ 127.320637][ T8456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 127.332950][ T8456] ext2 filesystem being mounted at /309/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 127.476194][ T8469] loop3: detected capacity change from 0 to 4096 [ 127.486947][ T8469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.520001][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.809275][ T8485] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.846912][ T8485] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.886920][ T8485] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.928203][ T8485] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.975233][ T8485] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.988581][ T8485] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.000766][ T8485] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.014079][ T8485] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.137715][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 128.158144][ T8499] loop1: detected capacity change from 0 to 512 [ 128.164730][ T8499] EXT4-fs: Ignoring removed bh option [ 128.170334][ T8499] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.177290][ T8499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.188685][ T8499] EXT4-fs (loop1): 1 truncate cleaned up [ 128.195120][ T8499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.222769][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.487575][ T8516] netem: change failed [ 128.537883][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 128.537900][ T29] audit: type=1326 audit(2000000027.520:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 128.567796][ T29] audit: type=1326 audit(2000000027.520:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 128.572090][ T8523] netlink: 'syz.0.1464': attribute type 10 has an invalid length. [ 128.591256][ T29] audit: type=1326 audit(2000000027.520:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 128.623305][ T8523] dummy0: entered promiscuous mode [ 128.631015][ T8523] bridge0: port 1(dummy0) entered blocking state [ 128.637617][ T8523] bridge0: port 1(dummy0) entered disabled state [ 128.647072][ T8523] dummy0: entered allmulticast mode [ 128.653726][ T8523] bridge0: port 1(dummy0) entered blocking state [ 128.660206][ T8523] bridge0: port 1(dummy0) entered forwarding state [ 128.683982][ T29] audit: type=1400 audit(2000000027.660:2345): avc: denied { read write } for pid=4573 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.708344][ T29] audit: type=1400 audit(2000000027.660:2346): avc: denied { open } for pid=4573 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.734959][ T29] audit: type=1400 audit(2000000027.720:2347): avc: denied { ioctl } for pid=4573 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.815192][ T29] audit: type=1400 audit(2000000027.750:2348): avc: denied { prog_load } for pid=8524 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.834987][ T29] audit: type=1400 audit(2000000027.750:2349): avc: denied { bpf } for pid=8524 comm="syz.3.1466" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.855623][ T29] audit: type=1400 audit(2000000027.750:2350): avc: denied { perfmon } for pid=8524 comm="syz.3.1466" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.877087][ T29] audit: type=1400 audit(2000000027.750:2351): avc: denied { prog_run } for pid=8524 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.937729][ T8537] netlink: 'syz.2.1471': attribute type 4 has an invalid length. [ 129.013506][ T8542] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 129.028971][ T8543] siw: device registration error -23 [ 129.059891][ T8545] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.118683][ T8545] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.166825][ T8545] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.216606][ T8545] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.650076][ T8553] loop1: detected capacity change from 0 to 2048 [ 129.715307][ T8553] loop1: p1 < > p4 [ 129.720481][ T8553] loop1: p4 size 8388608 extends beyond EOD, truncated [ 129.763533][ T8562] loop1: detected capacity change from 0 to 512 [ 129.781856][ T8562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.813611][ T8562] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.893039][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.913967][ T8567] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.966326][ T8567] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.967439][ T8574] netlink: 'syz.6.1475': attribute type 10 has an invalid length. [ 129.967452][ T8574] __nla_validate_parse: 5 callbacks suppressed [ 129.967463][ T8574] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1475'. [ 129.971238][ T8574] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 129.971352][ T8574] team0: Failed to send options change via netlink (err -105) [ 129.971369][ T8574] team0: Port device geneve1 added [ 130.009171][ T8575] netlink: 'syz.1.1481': attribute type 2 has an invalid length. [ 130.009326][ T8575] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 130.009376][ T8575] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1481'. [ 130.025156][ T8567] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.030807][ T8576] loop3: detected capacity change from 0 to 1024 [ 130.068079][ T8567] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.134678][ T8567] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.147895][ T8567] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.160329][ T8567] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.173078][ T8567] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.221976][ T8580] syzkaller0: entered promiscuous mode [ 130.227566][ T8580] syzkaller0: entered allmulticast mode [ 130.282557][ T8582] loop6: detected capacity change from 0 to 4096 [ 130.329925][ T8582] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 130.347349][ T8582] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 130.600317][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1487'. [ 130.663745][ T8584] Process accounting resumed [ 130.689937][ T8591] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1488'. [ 130.829138][ T8597] lo speed is unknown, defaulting to 1000 [ 130.904725][ T8601] loop1: detected capacity change from 0 to 512 [ 131.016236][ T8606] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 131.034616][ T8606] SELinux: failed to load policy [ 131.394197][ T8545] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.426886][ T8545] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.440432][ T8545] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.531720][ T8545] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.576959][ T8545] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.617023][ T4573] EXT4-fs unmount: 3 callbacks suppressed [ 131.617042][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.636510][ T8545] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.699300][ T8637] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1506'. [ 131.850282][ T8645] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1510'. [ 131.957804][ T8657] loop3: detected capacity change from 0 to 256 [ 131.965311][ T8657] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.248015][ T8664] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1517'. [ 132.355493][ T8669] uprobe: syz.0.1521:8669 failed to unregister, leaking uprobe [ 132.417714][ T8676] lo speed is unknown, defaulting to 1000 [ 132.497314][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 132.506981][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 132.546703][ T8685] loop6: detected capacity change from 0 to 128 [ 132.565541][ T8685] bio_check_eod: 1966 callbacks suppressed [ 132.565560][ T8685] syz.6.1527: attempt to access beyond end of device [ 132.565560][ T8685] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 132.585194][ T8685] syz.6.1527: attempt to access beyond end of device [ 132.585194][ T8685] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 132.598747][ T8685] syz.6.1527: attempt to access beyond end of device [ 132.598747][ T8685] loop6: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 132.612756][ T8685] syz.6.1527: attempt to access beyond end of device [ 132.612756][ T8685] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 132.636083][ T8685] syz.6.1527: attempt to access beyond end of device [ 132.636083][ T8685] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 132.674003][ T8685] syz.6.1527: attempt to access beyond end of device [ 132.674003][ T8685] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 132.699107][ T8687] syz.6.1527: attempt to access beyond end of device [ 132.699107][ T8687] loop6: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 132.707107][ T8685] syz.6.1527: attempt to access beyond end of device [ 132.707107][ T8685] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 132.713269][ T8687] syz.6.1527: attempt to access beyond end of device [ 132.713269][ T8687] loop6: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 132.726274][ T8685] syz.6.1527: attempt to access beyond end of device [ 132.726274][ T8685] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 133.033782][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 133.183043][ T8716] uprobe: syz.3.1540:8716 failed to unregister, leaking uprobe [ 133.752745][ T8721] loop6: detected capacity change from 0 to 256 [ 133.760010][ T8721] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.800020][ T8724] uprobe: syz.1.1552:8724 failed to unregister, leaking uprobe [ 133.811512][ T8725] loop3: detected capacity change from 0 to 512 [ 133.846903][ T8725] EXT4-fs (loop3): 1 orphan inode deleted [ 133.857409][ T8725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.870658][ T4469] __quota_error: 194 callbacks suppressed [ 133.870677][ T4469] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 133.870809][ T8725] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.876488][ T4469] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:55: Failed to release dquot type 1 [ 133.922226][ T29] audit: type=1326 audit(2000000032.880:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 133.945741][ T29] audit: type=1326 audit(2000000032.880:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 133.969259][ T29] audit: type=1326 audit(2000000032.880:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 133.992778][ T29] audit: type=1326 audit(2000000032.890:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 134.016216][ T29] audit: type=1326 audit(2000000032.890:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 134.039654][ T29] audit: type=1326 audit(2000000032.890:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 134.063147][ T29] audit: type=1326 audit(2000000032.890:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 134.086614][ T29] audit: type=1326 audit(2000000032.890:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 134.110089][ T29] audit: type=1326 audit(2000000032.890:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 134.155134][ T8735] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.195012][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.205510][ T8735] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.242863][ T8742] loop3: detected capacity change from 0 to 128 [ 134.251454][ T8742] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.264708][ T8742] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.269197][ T8745] loop1: detected capacity change from 0 to 128 [ 134.282113][ T8745] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.295010][ T8745] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.305614][ T8735] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.329215][ T4573] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.367229][ T8735] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.412831][ T8735] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.424108][ T8735] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.436671][ T8735] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.459616][ T8735] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.472098][ T8755] loop1: detected capacity change from 0 to 512 [ 134.480020][ T8755] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.490010][ T8755] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.502617][ T8755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 134.512465][ T8755] System zones: 1-12 [ 134.525287][ T8755] EXT4-fs (loop1): 1 truncate cleaned up [ 134.531843][ T8755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.585875][ T8767] hub 9-0:1.0: USB hub found [ 134.615573][ T8767] hub 9-0:1.0: 8 ports detected [ 134.699465][ T8781] pim6reg1: entered promiscuous mode [ 134.704916][ T8781] pim6reg1: entered allmulticast mode [ 134.820936][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.872547][ T8788] tipc: Enabled bearer , priority 0 [ 134.890018][ T8786] tipc: Resetting bearer [ 134.921976][ T8786] tipc: Disabling bearer [ 134.969148][ T10] IPVS: starting estimator thread 0... [ 135.065251][ T8799] IPVS: using max 2304 ests per chain, 115200 per kthread [ 135.767303][ T8812] __nla_validate_parse: 2 callbacks suppressed [ 135.767375][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 135.785218][ T8814] hub 9-0:1.0: USB hub found [ 135.790099][ T8814] hub 9-0:1.0: 8 ports detected [ 135.865817][ T8818] loop1: detected capacity change from 0 to 256 [ 135.906179][ T8821] lo speed is unknown, defaulting to 1000 [ 136.126231][ T8840] : renamed from bond0 [ 136.505996][ T8856] pim6reg1: entered promiscuous mode [ 136.511366][ T8856] pim6reg1: entered allmulticast mode [ 136.552817][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 136.617816][ T8863] lo speed is unknown, defaulting to 1000 [ 136.666156][ T8866] loop1: detected capacity change from 0 to 512 [ 136.677580][ T8867] loop2: detected capacity change from 0 to 256 [ 136.696798][ T8866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.706173][ T8867] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.732636][ T8866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.752207][ T8866] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.822434][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.990781][ T8880] loop1: detected capacity change from 0 to 512 [ 137.004457][ T8880] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.084635][ T8880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.102284][ T8880] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.121238][ T8890] loop6: detected capacity change from 0 to 512 [ 137.131255][ T8892] team0: No ports can be present during mode change [ 137.147019][ T8890] EXT4-fs (loop6): 1 orphan inode deleted [ 137.153586][ T8890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.165161][ T4478] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 137.167233][ T8890] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.200154][ T8890] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1605: iget: bad i_size value: 360287970189639690 [ 137.214584][ T8890] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1605: iget: bad i_size value: 360287970189639690 [ 137.247179][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.473793][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.546542][ T8920] loop1: detected capacity change from 0 to 128 [ 137.595803][ T8927] loop1: detected capacity change from 0 to 512 [ 137.603908][ T8927] EXT4-fs (loop1): unable to read superblock [ 137.626509][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 137.667987][ T8927] bond0: entered promiscuous mode [ 137.673079][ T8927] bond0: entered allmulticast mode [ 137.696608][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.160437][ T8951] loop6: detected capacity change from 0 to 256 [ 138.182814][ T8951] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.231448][ T8955] lo speed is unknown, defaulting to 1000 [ 138.723651][ T8963] loop1: detected capacity change from 0 to 512 [ 138.731288][ T8963] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.742821][ T8963] EXT4-fs (loop1): 1 truncate cleaned up [ 138.749122][ T8963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.863123][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.885858][ T8976] bridge0: port 1(gretap0) entered blocking state [ 138.892438][ T8976] bridge0: port 1(gretap0) entered disabled state [ 138.899176][ T8976] gretap0: entered allmulticast mode [ 138.905518][ T8976] gretap0: entered promiscuous mode [ 138.924447][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 138.924465][ T29] audit: type=1326 audit(2000000037.900:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 138.954490][ T29] audit: type=1326 audit(2000000037.900:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 138.978059][ T29] audit: type=1326 audit(2000000037.900:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 139.001589][ T29] audit: type=1326 audit(2000000037.910:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 139.025065][ T29] audit: type=1326 audit(2000000037.910:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 139.048803][ T29] audit: type=1326 audit(2000000037.910:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 139.072295][ T29] audit: type=1326 audit(2000000037.910:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 139.095866][ T29] audit: type=1326 audit(2000000037.910:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 139.167540][ T29] audit: type=1326 audit(2000000038.080:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 139.191139][ T29] audit: type=1326 audit(2000000038.090:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85c42e929 code=0x7ffc0000 [ 139.215964][ T8984] loop2: detected capacity change from 0 to 512 [ 139.250047][ T8984] EXT4-fs (loop2): 1 orphan inode deleted [ 139.257382][ T8984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.270117][ T4478] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 139.273134][ T8993] loop6: detected capacity change from 0 to 128 [ 139.312924][ T8993] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.319639][ T8984] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.326839][ T8993] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.354288][ T8984] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1640: iget: bad i_size value: 360287970189639690 [ 139.368998][ T8984] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1640: iget: bad i_size value: 360287970189639690 [ 139.417095][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.481182][ T9000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.493695][ T9000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.505760][ T9000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.509098][ T6788] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.518244][ T9000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.580202][ T9003] batman_adv: batadv0: Adding interface: ip6gretap2 [ 139.587051][ T9003] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.612948][ T9003] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 139.629543][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.637081][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.646053][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.653541][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.682506][ T9003] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 139.689782][ T9003] batman_adv: batadv0: Removing interface: ip6gretap1 [ 139.700739][ T10] IPVS: starting estimator thread 0... [ 139.715682][ T9003] batman_adv: batadv0: Removing interface: ip6gretap2 [ 139.795112][ T9007] IPVS: using max 1680 ests per chain, 84000 per kthread [ 140.300620][ T9021] batman_adv: batadv0: Adding interface: ip6gretap1 [ 140.307304][ T9021] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.333270][ T9021] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 140.375252][ T9022] batman_adv: batadv0: Removing interface: ip6gretap1 [ 140.486400][ T9026] loop3: detected capacity change from 0 to 256 [ 140.508586][ T9026] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.699653][ T9037] lo speed is unknown, defaulting to 1000 [ 141.368808][ T9045] loop3: detected capacity change from 0 to 1024 [ 141.387115][ T9045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.412719][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.536068][ T9058] loop6: detected capacity change from 0 to 512 [ 141.564248][ T9058] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.617198][ T9058] EXT4-fs (loop6): 1 truncate cleaned up [ 141.623518][ T9058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.713205][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.683516][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1680'. [ 142.726826][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'. [ 144.095590][ T9121] loop2: detected capacity change from 0 to 512 [ 144.106532][ T9121] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.135971][ T9121] EXT4-fs (loop2): 1 truncate cleaned up [ 144.147045][ T9121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.191091][ T9125] loop3: detected capacity change from 0 to 128 [ 144.243502][ T9125] bio_check_eod: 128 callbacks suppressed [ 144.243523][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.243523][ T9125] loop3: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 144.262916][ T9125] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 144.353356][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.353356][ T9125] loop3: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 144.366976][ T9125] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 144.434055][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.434055][ T9125] loop3: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 144.447668][ T9125] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 144.511474][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.524940][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.524940][ T9125] loop3: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 144.538426][ T9125] Buffer I/O error on dev loop3, logical block 134, lost async page write [ 144.584891][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.584891][ T9125] loop3: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 144.598382][ T9125] Buffer I/O error on dev loop3, logical block 135, lost async page write [ 144.634897][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.634897][ T9125] loop3: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 144.648374][ T9125] Buffer I/O error on dev loop3, logical block 136, lost async page write [ 144.685051][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.685051][ T9125] loop3: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 144.754633][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.754633][ T9125] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 144.784956][ T9125] syz.3.1693: attempt to access beyond end of device [ 144.784956][ T9125] loop3: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 144.827381][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1697'. [ 144.903900][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1697'. [ 145.128862][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9144 comm=syz.3.1702 [ 145.175609][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1702'. [ 145.235886][ T9144] vlan1: entered allmulticast mode [ 145.241062][ T9144] bond0: entered allmulticast mode [ 145.329621][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 145.329692][ T29] audit: type=1400 audit(2000000044.310:3038): avc: denied { create } for pid=9146 comm="syz.3.1703" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.387878][ T9151] loop6: detected capacity change from 0 to 128 [ 145.392765][ T29] audit: type=1400 audit(2000000044.340:3039): avc: denied { mounton } for pid=9146 comm="syz.3.1703" path="/260/file0" dev="tmpfs" ino=1411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.453238][ T29] audit: type=1400 audit(2000000044.430:3040): avc: denied { unlink } for pid=4573 comm="syz-executor" name="file0" dev="tmpfs" ino=1411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.493292][ T9153] loop3: detected capacity change from 0 to 2048 [ 145.502339][ T29] audit: type=1400 audit(2000000044.470:3041): avc: denied { create } for pid=9154 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.522039][ T29] audit: type=1400 audit(2000000044.470:3042): avc: denied { connect } for pid=9154 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.549819][ T9153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.588415][ T9151] syz.6.1705: attempt to access beyond end of device [ 145.588415][ T9151] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 145.607778][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.718475][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1712'. [ 145.839670][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 146.186110][ T9182] batman_adv: batadv0: Adding interface: ip6gretap1 [ 146.192796][ T9182] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.218487][ T9182] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 146.241776][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.286524][ T9185] loop1: detected capacity change from 0 to 512 [ 146.335715][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.344587][ T9185] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1715: casefold flag without casefold feature [ 146.357694][ T9185] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1715: couldn't read orphan inode 15 (err -117) [ 146.370808][ T9185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.423860][ T9182] batman_adv: batadv0: Removing interface: ip6gretap1 [ 146.476967][ T9192] siw: device registration error -23 [ 146.669014][ T9198] ip6tnl1: entered allmulticast mode [ 146.692584][ T29] audit: type=1400 audit(2000000045.660:3043): avc: denied { name_bind } for pid=9196 comm="syz.0.1722" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 147.036539][ T9210] loop6: detected capacity change from 0 to 128 [ 147.064588][ T29] audit: type=1400 audit(2000000045.780:3044): avc: denied { read write } for pid=9193 comm="syz.2.1721" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.088457][ T29] audit: type=1400 audit(2000000045.780:3045): avc: denied { open } for pid=9193 comm="syz.2.1721" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.112083][ T29] audit: type=1400 audit(2000000046.040:3046): avc: denied { append } for pid=9211 comm="syz.3.1727" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.198215][ T9210] Buffer I/O error on dev loop6, logical block 131, lost async page write [ 147.227672][ T9214] syzkaller0: entered allmulticast mode [ 147.237068][ T9210] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 147.264397][ T9214] syzkaller0: entered promiscuous mode [ 147.277555][ T9210] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 147.295895][ T9214] syzkaller0 (unregistering): left allmulticast mode [ 147.302690][ T9214] syzkaller0 (unregistering): left promiscuous mode [ 147.314199][ T9210] Buffer I/O error on dev loop6, logical block 134, lost async page write [ 147.361998][ T29] audit: type=1400 audit(2000000046.120:3047): avc: denied { ioctl } for pid=9211 comm="syz.3.1727" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.499665][ T9220] loop3: detected capacity change from 0 to 512 [ 147.522506][ T9220] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.547513][ T9220] EXT4-fs (loop3): 1 truncate cleaned up [ 147.577464][ T9220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.675464][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.783464][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.791969][ T9225] loop2: detected capacity change from 0 to 128 [ 147.918018][ T9239] loop6: detected capacity change from 0 to 128 [ 147.965923][ T9240] siw: device registration error -23 [ 148.023243][ T9239] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.035916][ T9239] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.539851][ T6788] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.972070][ T9264] batman_adv: batadv0: Adding interface: ip6gretap1 [ 149.978784][ T9264] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.004476][ T9264] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 150.043511][ T9264] batman_adv: batadv0: Removing interface: ip6gretap1 [ 150.199647][ T9278] loop6: detected capacity change from 0 to 512 [ 150.297555][ T9275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1749'. [ 150.357375][ T9278] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.1745: casefold flag without casefold feature [ 150.370380][ T9278] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1745: couldn't read orphan inode 15 (err -117) [ 150.384968][ T9278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.581103][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'. [ 151.107975][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 151.107992][ T29] audit: type=1400 audit(2000000050.090:3084): avc: denied { read write } for pid=9292 comm="syz.3.1754" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.109371][ T3422] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 151.114181][ T29] audit: type=1400 audit(2000000050.090:3085): avc: denied { open } for pid=9292 comm="syz.3.1754" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.182585][ T9295] loop1: detected capacity change from 0 to 1024 [ 151.209954][ T9295] EXT4-fs: Ignoring removed nobh option [ 151.215657][ T9295] EXT4-fs: Ignoring removed bh option [ 151.239588][ T3422] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.269932][ T9295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.111091][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.192319][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.209900][ T29] audit: type=1400 audit(2000000051.190:3086): avc: denied { ioctl } for pid=9313 comm="syz.3.1761" path="socket:[26797]" dev="sockfs" ino=26797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.296395][ T9320] loop1: detected capacity change from 0 to 128 [ 152.323015][ T9323] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1765'. [ 152.333059][ T29] audit: type=1326 audit(2000000051.320:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 152.356664][ T29] audit: type=1326 audit(2000000051.320:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 152.382427][ T29] audit: type=1326 audit(2000000051.370:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 152.385839][ T9325] bio_check_eod: 397 callbacks suppressed [ 152.385858][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.385858][ T9325] loop1: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 152.405903][ T29] audit: type=1326 audit(2000000051.370:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 152.411637][ T9325] buffer_io_error: 2 callbacks suppressed [ 152.411654][ T9325] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 152.425065][ T29] audit: type=1326 audit(2000000051.370:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 152.467263][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.467263][ T9325] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 152.496203][ T29] audit: type=1326 audit(2000000051.480:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 152.499723][ T9325] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 152.534900][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1765'. [ 152.543927][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.543927][ T9325] loop1: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 152.557483][ T9325] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 152.558346][ T29] audit: type=1326 audit(2000000051.510:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e2b2e929 code=0x7ffc0000 [ 152.594036][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.594036][ T9325] loop1: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 152.607526][ T9325] Buffer I/O error on dev loop1, logical block 134, lost async page write [ 152.617043][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.617043][ T9325] loop1: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 152.630533][ T9325] Buffer I/O error on dev loop1, logical block 135, lost async page write [ 152.639443][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.639443][ T9325] loop1: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 152.652896][ T9325] Buffer I/O error on dev loop1, logical block 136, lost async page write [ 152.661617][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.661617][ T9325] loop1: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 152.675338][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.675338][ T9325] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 152.697873][ T9325] syz.1.1760: attempt to access beyond end of device [ 152.697873][ T9325] loop1: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 152.778101][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.786726][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.923703][ T9352] loop6: detected capacity change from 0 to 4096 [ 152.969715][ T9352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.148513][ T9358] lo speed is unknown, defaulting to 1000 [ 153.161510][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.520072][ T9361] loop2: detected capacity change from 0 to 512 [ 153.566435][ T9361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.590973][ T9363] program syz.3.1780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.796083][ T9361] EXT4-fs (loop2): 1 truncate cleaned up [ 153.802189][ T9361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.960432][ T9385] loop1: detected capacity change from 0 to 1024 [ 155.005250][ T9385] ext4: Unknown parameter 'nouser_xattr' [ 155.214963][ T9396] netlink: 'syz.1.1798': attribute type 10 has an invalid length. [ 155.222913][ T9396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1798'. [ 155.244875][ T9396] dummy0: entered promiscuous mode [ 155.252010][ T9396] bridge0: port 2(dummy0) entered blocking state [ 155.258455][ T9396] bridge0: port 2(dummy0) entered disabled state [ 155.266657][ T9396] dummy0: entered allmulticast mode [ 155.296304][ T9405] loop1: detected capacity change from 0 to 128 [ 155.330987][ T9361] syz.2.1778 (9361) used greatest stack depth: 5824 bytes left [ 155.340264][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.342160][ T9408] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.359245][ T9409] syz.1.1789: attempt to access beyond end of device [ 155.359245][ T9409] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 155.420884][ T9414] loop1: detected capacity change from 0 to 512 [ 155.437238][ T9414] EXT4-fs (loop1): 1 orphan inode deleted [ 155.443704][ T9414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.456759][ T4432] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 155.468605][ T9414] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.688652][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.711406][ T9427] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.755436][ T9432] program syz.2.1797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.766309][ T9427] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.816333][ T9427] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.876272][ T9427] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.952627][ T9427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.964196][ T9427] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.975751][ T9427] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.987909][ T9427] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.138868][ T9441] netlink: 'syz.2.1802': attribute type 10 has an invalid length. [ 156.146944][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1802'. [ 156.156286][ T9441] dummy0: entered promiscuous mode [ 156.162608][ T9441] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 156.548722][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 156.554905][ T29] audit: type=1400 audit(2000000055.530:3184): avc: denied { write } for pid=9462 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.676205][ T9469] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.716872][ T9469] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.766589][ T9469] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.827195][ T9469] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.893923][ T9469] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.906039][ T9469] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.917573][ T9469] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.930057][ T9469] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.263380][ T9473] program syz.1.1813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.308983][ T9483] netlink: 'syz.3.1826': attribute type 4 has an invalid length. [ 157.319882][ T3616] lo speed is unknown, defaulting to 1000 [ 157.325783][ T3616] syz0: Port: 1 Link DOWN [ 157.607779][ T29] audit: type=1326 audit(2000000056.590:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 157.633129][ T29] audit: type=1326 audit(2000000056.620:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 157.656651][ T29] audit: type=1326 audit(2000000056.620:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 157.680327][ T29] audit: type=1326 audit(2000000056.620:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 157.703777][ T29] audit: type=1326 audit(2000000056.620:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 157.727393][ T29] audit: type=1326 audit(2000000056.620:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 157.750935][ T29] audit: type=1326 audit(2000000056.620:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 157.774511][ T29] audit: type=1326 audit(2000000056.620:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 157.798090][ T29] audit: type=1326 audit(2000000056.620:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 158.186629][ T9515] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.226456][ T9515] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.276571][ T9515] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.303347][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1827'. [ 158.312446][ T9519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1827'. [ 158.321441][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1827'. [ 158.330623][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1827'. [ 158.341368][ T9515] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.402300][ T9515] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.414090][ T9515] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.426849][ T9515] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.439181][ T9515] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.487979][ T9523] netlink: 'syz.6.1829': attribute type 4 has an invalid length. [ 158.980821][ T9529] program syz.6.1831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.997511][ T9528] loop2: detected capacity change from 0 to 2048 [ 159.018815][ T9528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.059266][ T9528] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.132060][ T9535] lo speed is unknown, defaulting to 1000 [ 159.247215][ T4432] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 345: padding at end of block bitmap is not set [ 159.279216][ T4432] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 556 with error 117 [ 159.282715][ T9525] lo speed is unknown, defaulting to 1000 [ 159.291958][ T4432] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.291958][ T4432] [ 159.384201][ T9554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1846'. [ 159.393461][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1846'. [ 159.402673][ T9554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1846'. [ 159.458049][ T9554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1846'. [ 159.655683][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1837'. [ 159.701260][ T9558] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 159.847502][ T9562] loop1: detected capacity change from 0 to 512 [ 159.867026][ T9562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.878198][ T9562] EXT4-fs (loop1): 1 truncate cleaned up [ 159.884385][ T9562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.990911][ T4432] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 572 with max blocks 2 with error 28 [ 160.003457][ T4432] EXT4-fs (loop2): This should not happen!! Data will be lost [ 160.003457][ T4432] [ 160.013418][ T4432] EXT4-fs (loop2): Total free blocks count 0 [ 160.019495][ T4432] EXT4-fs (loop2): Free/Dirty block details [ 160.025529][ T4432] EXT4-fs (loop2): free_blocks=0 [ 160.030513][ T4432] EXT4-fs (loop2): dirty_blocks=16 [ 160.035717][ T4432] EXT4-fs (loop2): Block reservation details [ 160.919985][ T9582] loop6: detected capacity change from 0 to 128 [ 160.939671][ T9583] program syz.2.1847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.967953][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.047818][ T9588] bio_check_eod: 68 callbacks suppressed [ 161.047836][ T9588] syz.6.1845: attempt to access beyond end of device [ 161.047836][ T9588] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 161.085605][ T9588] syz.6.1845: attempt to access beyond end of device [ 161.085605][ T9588] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 161.117286][ T9588] syz.6.1845: attempt to access beyond end of device [ 161.117286][ T9588] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 161.152622][ T9588] syz.6.1845: attempt to access beyond end of device [ 161.152622][ T9588] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 161.164109][ T9577] Process accounting resumed [ 161.213322][ T9595] loop3: detected capacity change from 0 to 128 [ 161.230825][ T9596] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.276733][ T9596] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.310589][ T9601] syz.3.1862: attempt to access beyond end of device [ 161.310589][ T9601] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 161.324318][ T9601] syz.3.1862: attempt to access beyond end of device [ 161.324318][ T9601] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 161.338069][ T9601] syz.3.1862: attempt to access beyond end of device [ 161.338069][ T9601] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 161.355688][ T9601] syz.3.1862: attempt to access beyond end of device [ 161.355688][ T9601] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 161.372026][ T9596] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.377105][ T9601] syz.3.1862: attempt to access beyond end of device [ 161.377105][ T9601] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 161.413517][ T9601] syz.3.1862: attempt to access beyond end of device [ 161.413517][ T9601] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 161.436596][ T9596] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.498949][ T9608] loop3: detected capacity change from 0 to 2048 [ 161.545356][ T9608] loop3: p1 < > p4 [ 161.549904][ T9608] loop3: p4 size 8388608 extends beyond EOD, truncated [ 161.845579][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 161.845593][ T29] audit: type=1326 audit(2000000060.830:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 161.876635][ T29] audit: type=1326 audit(2000000060.850:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 161.900205][ T29] audit: type=1326 audit(2000000060.850:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 161.923649][ T29] audit: type=1326 audit(2000000060.850:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 161.947235][ T29] audit: type=1326 audit(2000000060.850:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 161.970674][ T29] audit: type=1326 audit(2000000060.850:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 161.994307][ T29] audit: type=1326 audit(2000000060.850:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 162.017781][ T29] audit: type=1326 audit(2000000060.850:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 162.041339][ T29] audit: type=1326 audit(2000000060.850:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 162.064751][ T29] audit: type=1326 audit(2000000060.860:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eca5e929 code=0x7ffc0000 [ 162.350994][ T9596] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.363951][ T9596] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.375510][ T9596] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.386916][ T9596] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.585012][ T9668] netlink: 'syz.2.1887': attribute type 2 has an invalid length. [ 163.593662][ T9668] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 163.608172][ T9668] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1887'. [ 163.725903][ T9671] binfmt_misc: register: failed to install interpreter file ./file2 [ 163.870921][ T9680] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.928036][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1880'. [ 163.937267][ T9677] IPVS: Unknown mcast interface: vcan0 [ 163.957166][ T9680] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.001615][ T9674] Process accounting resumed [ 164.017107][ T9680] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.057132][ T9687] loop2: detected capacity change from 0 to 512 [ 164.087410][ T9680] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.163594][ T9680] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.176706][ T9680] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.190274][ T9680] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.204005][ T9680] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.238385][ T9696] siw: device registration error -23 [ 164.330648][ T9701] loop6: detected capacity change from 0 to 1024 [ 164.339649][ T9701] EXT4-fs: Ignoring removed nobh option [ 164.345411][ T9701] EXT4-fs: Ignoring removed bh option [ 164.382712][ T9701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.157352][ T9713] program syz.3.1901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.318915][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.370587][ T9721] loop6: detected capacity change from 0 to 2048 [ 165.436118][ T9721] loop6: p1 < > p4 [ 165.441901][ T9721] loop6: p4 size 8388608 extends beyond EOD, truncated [ 165.566368][ T9725] team0 (unregistering): Port device team_slave_0 removed [ 165.651429][ T9725] team0 (unregistering): Port device team_slave_1 removed [ 165.688001][ T9725] team0 (unregistering): Port device geneve1 removed [ 165.835565][ T9729] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1895'. [ 166.124658][ T9742] netlink: 'syz.0.1900': attribute type 2 has an invalid length. [ 166.133517][ T9742] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 166.142273][ T9742] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1900'. [ 166.212607][ T9745] syzkaller0: entered promiscuous mode [ 166.218384][ T9745] syzkaller0: entered allmulticast mode [ 166.265814][ T9732] Process accounting resumed [ 166.682788][ T9753] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1906'. [ 166.869906][ T9761] program syz.1.1922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.871032][ T9763] loop3: detected capacity change from 0 to 1024 [ 166.886393][ T9763] EXT4-fs: Ignoring removed nobh option [ 166.892088][ T9763] EXT4-fs: Ignoring removed bh option [ 166.898476][ T9766] loop2: detected capacity change from 0 to 2048 [ 166.906762][ T9763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.955307][ T9766] loop2: p1 < > p4 [ 166.959856][ T9766] loop2: p4 size 8388608 extends beyond EOD, truncated [ 167.030482][ T9776] loop2: detected capacity change from 0 to 4096 [ 167.043094][ T9776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.063879][ T9776] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 167.075733][ T9776] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 167.098932][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.175680][ T9782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.546117][ T9788] netlink: 'syz.6.1918': attribute type 2 has an invalid length. [ 167.554565][ T9788] netlink: 'syz.6.1918': attribute type 1 has an invalid length. [ 167.563810][ T9788] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1918'. [ 167.660591][ T9763] ================================================================== [ 167.668738][ T9763] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 167.676838][ T9763] [ 167.679182][ T9763] write to 0xffff8881283fd6a8 of 8 bytes by task 9772 on cpu 1: [ 167.686836][ T9763] filemap_splice_read+0x47e/0x6b0 [ 167.691979][ T9763] ext4_file_splice_read+0x8f/0xb0 [ 167.697130][ T9763] splice_direct_to_actor+0x26c/0x680 [ 167.702554][ T9763] do_splice_direct+0xda/0x150 [ 167.707366][ T9763] do_sendfile+0x380/0x650 [ 167.712250][ T9763] __x64_sys_sendfile64+0x105/0x150 [ 167.713881][ T9797] siw: device registration error -23 [ 167.717469][ T9763] x64_sys_call+0xb39/0x2fb0 [ 167.717501][ T9763] do_syscall_64+0xd2/0x200 [ 167.731901][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.737835][ T9763] [ 167.740176][ T9763] write to 0xffff8881283fd6a8 of 8 bytes by task 9763 on cpu 0: [ 167.747830][ T9763] filemap_splice_read+0x47e/0x6b0 [ 167.752977][ T9763] ext4_file_splice_read+0x8f/0xb0 [ 167.758127][ T9763] splice_direct_to_actor+0x26c/0x680 [ 167.763542][ T9763] do_splice_direct+0xda/0x150 [ 167.768364][ T9763] do_sendfile+0x380/0x650 [ 167.772818][ T9763] __x64_sys_sendfile64+0x105/0x150 [ 167.778061][ T9763] x64_sys_call+0xb39/0x2fb0 [ 167.782706][ T9763] do_syscall_64+0xd2/0x200 [ 167.787257][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.793187][ T9763] [ 167.795533][ T9763] value changed: 0x0000000000000576 -> 0x0000000000000577 [ 167.802674][ T9763] [ 167.805021][ T9763] Reported by Kernel Concurrency Sanitizer on: [ 167.811280][ T9763] CPU: 0 UID: 0 PID: 9763 Comm: syz.3.1905 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 167.823392][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.833480][ T9763] ================================================================== [ 167.877882][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.