last executing test programs: 3m33.265160525s ago: executing program 0 (id=24): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) 3m33.157581806s ago: executing program 0 (id=27): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000300)=r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3m32.916179329s ago: executing program 0 (id=29): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002) writev(r6, &(0x7f0000000540)=[{&(0x7f00000007c0)="03e6b107e445a7d8276efefff13dfeff50e9d3d14a90a55ec1b3726eb4c0838db63c3594182fdcdf2fcc333c99c565920c0ac34bb23dcf42331c75af98c268be29e63fe7c43ee3825d016e37c073d8ca13c3dbeca3f6165320dc79", 0x5b}, {&(0x7f0000000300)="a4", 0x1}, {&(0x7f0000000640)="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", 0x133}, {&(0x7f00000003c0)="00008287334aec085cd2b31681554c0bc55254e3cc223af9d1be9f4d121af1cc2723241f4853ed6237471e0edf1c36a4b9de2c4276", 0x35}, {&(0x7f0000000100)="6de7000018f973826fb4fc42bcce2f52e8a318536a2061", 0x17}, {&(0x7f0000000140)='G', 0x1}], 0x6) 3m32.664166583s ago: executing program 0 (id=35): perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xcf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3m32.396105447s ago: executing program 0 (id=37): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = dup(r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x10, 0x5e, 0x0, 0x4, 0x0, 0x2, 0x8001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x6}, 0x1820, 0x4, 0x8, 0x3, 0x80000001, 0x4, 0x2eb9, 0x0, 0xd205, 0x0, 0x8}, 0xffffffffffffffff, 0x9, r4, 0xa) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 3m30.659232093s ago: executing program 0 (id=49): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x40c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 3m30.640852323s ago: executing program 32 (id=49): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x40c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 2m16.743926209s ago: executing program 3 (id=548): r0 = socket(0x10, 0x80002, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = syz_pidfd_open(r1, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) 2m15.532299136s ago: executing program 3 (id=549): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0xf}, 0x2, 0xffffffff, 0x8, 0x3, 0x4, 0x100, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r1 = dup(0xffffffffffffffff) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) fallocate(r2, 0x0, 0x0, 0x8800000) sendmsg$OSF_MSG_REMOVE(r2, 0x0, 0x4000040) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x4000000}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), 0x0}, 0x20) fallocate(r3, 0x20, 0x0, 0x8000) 2m14.138424417s ago: executing program 3 (id=556): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000040)={&(0x7f0000000280)="a0462bedb0ad47eca9592a2ccf3950247289182536cb4cc9863fc1ed5d21d6b2a97f4dfc3a589ebf592cf3f4d3d377f5c347ea1ce8c8a1fc29b2e94e5976ba9221061e032709ffbbd3395946fbde3ed207b29f7df0a23960f5920ca6802dfcc2d10c8f891de141392abaec88af3e9b1b4ce966d5278a5ea68d6ac6873ef1bedb3fd5326ee816aa8f21e4d60ce8e6289b8cfda68f57096d1470e79e9b9c5b85bea66ad4f56df26ea7091d18", 0xab}, 0x1, 0x0, 0x0, 0x20004851}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 2m12.855623405s ago: executing program 3 (id=563): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000018315354fe53ad4b87e22014be67000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bd70c045d873b4f6d3d2115d463b2af19b0f8bd8df6ea3b66f809399501231bf39364def1037e0b907cd32b5a3cefc"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff0000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 2m11.83369983s ago: executing program 3 (id=572): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r0 = syz_io_uring_setup(0x233, &(0x7f0000000600)={0x0, 0xfffffffe, 0x10100, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/udplite6\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) epoll_pwait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x200, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x2000000b}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000340)={0x2, 0x80, 0x8, 0x6, 0x6, 0x5, 0x0, 0x2, 0x24008, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x20, 0x6, 0x800, 0x1, 0x5, 0x4, 0x9, 0x0, 0x8, 0x0, 0x3}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x8280, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, &(0x7f0000000140)='usrjquota=') 2m11.426565087s ago: executing program 3 (id=575): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) syz_socket_connect_nvme_tcp() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fchdir(r6) shutdown(r6, 0x2) 1m56.035517091s ago: executing program 33 (id=575): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) syz_socket_connect_nvme_tcp() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fchdir(r6) shutdown(r6, 0x2) 1.135233914s ago: executing program 4 (id=3099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1.134681914s ago: executing program 4 (id=3101): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) wait4(r2, 0x0, 0x40000000, 0x0) 1.094315674s ago: executing program 2 (id=3102): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 1.093837825s ago: executing program 4 (id=3103): r0 = syz_open_dev$hidraw(0x0, 0x0, 0x81) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x44014}, 0x400c1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) 1.035230815s ago: executing program 4 (id=3105): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000200000000009eaa1bf6941b01e4b540066e36d785d94e66b7b1b485f3e2bd4996baa8a5d3"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 1.017019835s ago: executing program 4 (id=3108): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',msize=0x0000000000001000']) 1.016466095s ago: executing program 2 (id=3109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0x2}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 967.065576ms ago: executing program 2 (id=3113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f00000001c0)='./bus\x00', 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd']) 895.174437ms ago: executing program 4 (id=3116): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="0c76d2d0f0aa6399f495ce80e009797dcf1651d4759b5086d9e5c86053411477f7b9019229752eae3a92cdaf78ed74877757dc2a838a887478970db14d14653b69fbbc0bc5", 0x45}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 846.916638ms ago: executing program 2 (id=3117): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x7ffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 818.091808ms ago: executing program 2 (id=3121): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r1, 0x407, 0x401) 646.765081ms ago: executing program 2 (id=3129): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x78, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80080, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xb}, 0x200602, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) 400.483324ms ago: executing program 6 (id=3148): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 334.848875ms ago: executing program 6 (id=3149): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) clock_getres(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 219.679077ms ago: executing program 5 (id=3153): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x48080, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2b}, @printk={@x}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 146.209228ms ago: executing program 5 (id=3157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000306010800000000000c000000000004050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x20000043}, 0x4000) 143.248548ms ago: executing program 5 (id=3158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 140.364828ms ago: executing program 1 (id=3159): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x4e) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x200000001000) 119.569849ms ago: executing program 5 (id=3160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x880, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x4, 0x800, 0x5, 0x37, 0xa, 0x8, 0x101, 0x1, 0x49, 0x9, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x40000000, 0x8, 0x5, 0x9, 0x80000001, 0x0, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0xd, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x6, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x1, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x81, 0x4, 0x6, 0x7, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x0, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0xfffffffd, 0x2, 0x80000000, 0x401, 0x1, 0x1ff, 0x81, 0x68, 0x1, 0xa5, 0x80, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x1, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x1000, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3f, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0x101, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x1000003, 0x1000, 0x5, 0x2, 0x8, 0x3, 0x3f800, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x5, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x6, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd95, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x32946e0e, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x7ff, 0x3aee, 0xffffffff, 0x8, 0xfffffffc, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x3, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0x80ffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x1, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0x3, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0x84, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xd7}}]}, 0x880}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 77.937619ms ago: executing program 1 (id=3161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r2) 77.734569ms ago: executing program 1 (id=3162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 77.328079ms ago: executing program 6 (id=3163): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 22.96571ms ago: executing program 1 (id=3164): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) 22.72404ms ago: executing program 5 (id=3165): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) 22.5333ms ago: executing program 6 (id=3166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.33402ms ago: executing program 1 (id=3167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 22.13298ms ago: executing program 6 (id=3168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000306010800000000000c000000000004050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x20000043}, 0x4000) 14.51451ms ago: executing program 5 (id=3169): bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() 2.94159ms ago: executing program 1 (id=3170): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x4c, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x44044) 0s ago: executing program 6 (id=3171): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): not match expected magic number 0xf97cff8c [ 195.265933][ T7501] SELinux: failed to load policy [ 195.315758][ T7508] program syz.1.999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.381772][ T7508] lo speed is unknown, defaulting to 1000 [ 195.526500][ T7514] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.567188][ T7516] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1002'. [ 195.657890][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.774051][ T7528] hub 9-0:1.0: USB hub found [ 195.778970][ T7528] hub 9-0:1.0: 8 ports detected [ 196.030246][ T7542] loop6: detected capacity change from 0 to 512 [ 196.077252][ T7542] journal_path: Non-blockdev passed as './bus' [ 196.083581][ T7542] EXT4-fs: error: could not find journal device path [ 196.150433][ T7544] SELinux: failed to load policy [ 196.202326][ T7544] loop5: detected capacity change from 0 to 512 [ 196.227187][ T7544] ext4: Unknown parameter 'subj_role' [ 196.240270][ T7549] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1009'. [ 196.269701][ T7544] loop5: detected capacity change from 0 to 512 [ 196.306609][ T7544] EXT4-fs (loop5): 1 orphan inode deleted [ 196.316944][ T41] __quota_error: 229 callbacks suppressed [ 196.316965][ T41] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.332591][ T41] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 196.346335][ T7544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.581175][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.054486][ T29] audit: type=1326 audit(197.078:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.203225][ T7575] siw: device registration error -23 [ 197.261886][ T29] audit: type=1326 audit(197.108:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.284839][ T29] audit: type=1326 audit(197.128:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.307688][ T29] audit: type=1326 audit(197.128:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.330595][ T29] audit: type=1326 audit(197.138:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.353443][ T29] audit: type=1326 audit(197.138:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.376344][ T29] audit: type=1326 audit(197.138:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.399303][ T29] audit: type=1326 audit(197.188:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.422178][ T29] audit: type=1326 audit(197.188:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 197.972597][ T7595] loop6: detected capacity change from 0 to 512 [ 197.992326][ T7595] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 198.018432][ T7595] EXT4-fs (loop6): 1 truncate cleaned up [ 198.024679][ T7595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.135459][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.670822][ T7612] xt_policy: output policy not valid in PREROUTING and INPUT [ 198.681651][ T7603] loop6: detected capacity change from 0 to 4096 [ 198.695165][ T7603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.723167][ T7618] siw: device registration error -23 [ 198.828232][ T7628] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 198.842043][ T7629] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.890565][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.986259][ T7635] pimreg: entered allmulticast mode [ 199.457466][ T7646] SELinux: policydb magic number 0xfffffffe does not match expected magic number 0xf97cff8c [ 199.467857][ T7646] SELinux: failed to load policy [ 199.980604][ T7675] Invalid ELF header type: 3 != 1 [ 200.133479][ T7677] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1044'. [ 200.314331][ T7676] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1044'. [ 200.613337][ T7680] Invalid ELF header type: 3 != 1 [ 200.836872][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1046'. [ 200.857958][ T7687] syzkaller0: Caught tx_queue_len zero misconfig [ 200.889297][ T7685] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.015976][ T7693] loop5: detected capacity change from 0 to 512 [ 201.035085][ T7693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.057237][ T7693] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1049: invalid block [ 201.076858][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 201.086207][ T7693] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1049: invalid indirect mapped block 4294967295 (level 1) [ 201.102631][ T7685] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.106779][ T7693] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1049: invalid indirect mapped block 4294967295 (level 1) [ 201.127848][ T7690] hsr_slave_0: left promiscuous mode [ 201.133719][ T7693] EXT4-fs (loop5): 2 truncates cleaned up [ 201.139624][ T7690] hsr_slave_1: left promiscuous mode [ 201.140005][ T7693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.180794][ T7685] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.204600][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.304333][ T7708] pimreg: entered allmulticast mode [ 201.317633][ T7685] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.355949][ T7704] siw: device registration error -23 [ 201.405574][ T7709] 9pnet_fd: Insufficient options for proto=fd [ 201.450619][ T7685] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.560203][ T7685] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.625952][ T7714] loop5: detected capacity change from 0 to 512 [ 201.651731][ T7685] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.684286][ T7714] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.717937][ T7685] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.767149][ T7714] EXT4-fs (loop5): 1 truncate cleaned up [ 201.773417][ T7714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.796968][ T7714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.878952][ T7721] loop6: detected capacity change from 0 to 164 [ 201.913237][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 201.913331][ T29] audit: type=1326 audit(201.938:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 201.969836][ T29] audit: type=1326 audit(201.968:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 201.992737][ T29] audit: type=1326 audit(201.968:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 202.015659][ T29] audit: type=1326 audit(201.968:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 202.038582][ T29] audit: type=1326 audit(201.968:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 202.061437][ T29] audit: type=1326 audit(201.968:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 202.084342][ T29] audit: type=1326 audit(201.968:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 202.107185][ T29] audit: type=1326 audit(201.968:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 202.130173][ T29] audit: type=1326 audit(201.968:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 202.153502][ T29] audit: type=1326 audit(201.968:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 202.359575][ T7736] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 202.366213][ T7736] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.374155][ T7736] vhci_hcd vhci_hcd.0: Device attached [ 202.475897][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1063'. [ 202.492971][ T7737] vhci_hcd: connection closed [ 202.493293][ T6207] vhci_hcd: stop threads [ 202.502354][ T6207] vhci_hcd: release socket [ 202.506929][ T6207] vhci_hcd: disconnect device [ 202.556942][ T1040] vhci_hcd: vhci_device speed not set [ 202.614412][ T7745] loop5: detected capacity change from 0 to 512 [ 202.627889][ T7745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.640069][ T7745] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1064: invalid block [ 202.666517][ T7745] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1064: invalid indirect mapped block 4294967295 (level 1) [ 202.687019][ T7745] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1064: invalid indirect mapped block 4294967295 (level 1) [ 202.730013][ T7745] EXT4-fs (loop5): 2 truncates cleaned up [ 202.755275][ T7745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.941060][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.065010][ T7766] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1071'. [ 203.286420][ T7775] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.339110][ T7772] lo speed is unknown, defaulting to 1000 [ 203.444155][ T7778] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1073'. [ 203.445484][ T7775] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.460233][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1074'. [ 203.586023][ T7775] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.725060][ T7775] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.869328][ T7775] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.918544][ T7785] loop6: detected capacity change from 0 to 512 [ 203.928048][ T7775] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.938290][ T7785] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 203.953713][ T7775] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.968869][ T7785] EXT4-fs (loop6): 1 truncate cleaned up [ 203.975172][ T7785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.997183][ T7775] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.003297][ T7791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.006526][ T7785] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.037957][ T7788] SELinux: failed to load policy [ 204.054221][ T7788] siw: device registration error -23 [ 204.148148][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 204.391519][ T7804] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 204.418111][ T7804] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 204.722462][ T7822] pimreg: entered allmulticast mode [ 205.056830][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.196236][ T7832] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 205.198491][ T7833] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1087'. [ 205.253305][ T7835] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1090'. [ 205.444356][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1091'. [ 205.453416][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1091'. [ 205.472730][ T7842] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1091'. [ 205.534245][ T7846] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 206.400870][ T7878] netlink: 'syz.1.1103': attribute type 2 has an invalid length. [ 206.683662][ T7882] loop5: detected capacity change from 0 to 512 [ 206.725461][ T7882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.760900][ T7882] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1105: invalid block [ 206.807694][ T7882] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1105: invalid indirect mapped block 4294967295 (level 1) [ 206.859752][ T7882] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1105: invalid indirect mapped block 4294967295 (level 1) [ 206.902858][ T7882] EXT4-fs (loop5): 2 truncates cleaned up [ 206.922776][ T7882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.029990][ T7882] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.1105: path /227/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 207.089344][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.100437][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 207.100452][ T29] audit: type=1400 audit(207.128:7763): avc: denied { read } for pid=7891 comm="syz.1.1107" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 207.129130][ T29] audit: type=1400 audit(207.128:7764): avc: denied { open } for pid=7891 comm="syz.1.1107" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 207.180212][ T29] audit: type=1326 audit(207.208:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 207.202683][ T29] audit: type=1326 audit(207.208:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 207.278506][ T29] audit: type=1326 audit(207.258:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 207.301187][ T29] audit: type=1326 audit(207.258:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 207.323524][ T29] audit: type=1326 audit(207.258:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 207.324832][ T7869] set match dimension is over the limit! [ 207.345899][ T29] audit: type=1326 audit(207.258:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 207.345948][ T29] audit: type=1326 audit(207.258:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 207.345975][ T29] audit: type=1326 audit(207.258:7772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 207.398597][ T7865] syz.2.1101 (7865) used greatest stack depth: 5856 bytes left [ 207.541142][ T7916] netlink: 'syz.2.1114': attribute type 39 has an invalid length. [ 207.556996][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1113'. [ 207.642437][ T7921] loop5: detected capacity change from 0 to 1024 [ 207.650412][ T7923] netlink: 'syz.2.1118': attribute type 3 has an invalid length. [ 207.671488][ T7921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.674214][ T7923] tipc: Started in network mode [ 207.689404][ T7923] tipc: Node identity ac14140f, cluster identity 4711 [ 207.703652][ T7923] tipc: New replicast peer: 255.255.255.255 [ 207.709853][ T7923] tipc: Enabled bearer , priority 10 [ 207.821027][ T7925] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1117'. [ 207.920583][ T7948] 9pnet_fd: Insufficient options for proto=fd [ 208.473714][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.711211][ T3450] tipc: Node number set to 2886997007 [ 208.765352][ T7968] SELinux: policydb magic number 0x747a7973 does not match expected magic number 0xf97cff8c [ 208.789988][ T7968] SELinux: failed to load policy [ 208.796242][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 209.672698][ T7989] netlink: 'syz.1.1131': attribute type 3 has an invalid length. [ 209.683944][ T7989] tipc: New replicast peer: 255.255.255.255 [ 209.690242][ T7989] tipc: Enabled bearer , priority 10 [ 209.783955][ T7991] program syz.5.1132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.888351][ T7991] lo speed is unknown, defaulting to 1000 [ 210.180967][ T8014] loop6: detected capacity change from 0 to 512 [ 210.187935][ T8011] Invalid ELF header type: 3 != 1 [ 210.214432][ T8014] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 210.237575][ T8014] EXT4-fs (loop6): orphan cleanup on readonly fs [ 210.274481][ T8014] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.1138: iget: bad i_size value: 38620345925642 [ 210.369802][ T8014] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1138: couldn't read orphan inode 15 (err -117) [ 210.464640][ T8014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.607896][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.748783][ T8033] loop5: detected capacity change from 0 to 256 [ 210.756523][ T8033] vfat: Unknown parameter '00000000000000000000' [ 210.760226][ T8035] dvmrp1: entered allmulticast mode [ 210.852630][ T8038] loop5: detected capacity change from 0 to 512 [ 210.869134][ T8038] EXT4-fs: Ignoring removed orlov option [ 210.875339][ T8038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.884667][ T8038] EXT4-fs (loop5): orphan cleanup on readonly fs [ 210.891710][ T8038] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1147: bg 0: block 248: padding at end of block bitmap is not set [ 210.906530][ T8038] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1147: Failed to acquire dquot type 1 [ 210.918542][ T8038] EXT4-fs (loop5): 1 truncate cleaned up [ 210.924965][ T8038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.943097][ T8038] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1147'. [ 211.589235][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'. [ 211.648561][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.834181][ T8066] program syz.6.1156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.846008][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 211.908993][ T8071] Illegal XDP return value 4294967282 on prog (id 920) dev N/A, expect packet loss! [ 211.915844][ T8066] lo speed is unknown, defaulting to 1000 [ 211.988642][ T8071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1158'. [ 212.063762][ T8075] netlink: 'syz.4.1159': attribute type 3 has an invalid length. [ 212.079120][ T8075] tipc: Started in network mode [ 212.084089][ T8075] tipc: Node identity ac14140f, cluster identity 4711 [ 212.091351][ T8075] tipc: New replicast peer: 255.255.255.255 [ 212.097654][ T8075] tipc: Enabled bearer , priority 10 [ 212.135675][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 212.135694][ T29] audit: type=1326 audit(212.158:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.4.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.137105][ T8077] infiniband syz2: set down [ 212.141995][ T29] audit: type=1326 audit(212.158:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.4.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.164799][ T8077] infiniband syz2: added veth0_to_bond [ 212.198834][ T29] audit: type=1326 audit(212.198:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.4.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.221840][ T29] audit: type=1326 audit(212.198:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.4.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.244907][ T29] audit: type=1326 audit(212.198:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.4.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.252618][ T8077] RDS/IB: syz2: added [ 212.273413][ T8077] smc: adding ib device syz2 with port count 1 [ 212.279929][ T8077] smc: ib device syz2 port 1 has pnetid [ 212.353396][ T29] audit: type=1326 audit(212.378:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.409684][ T29] audit: type=1326 audit(212.408:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.432654][ T29] audit: type=1326 audit(212.408:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.455551][ T29] audit: type=1326 audit(212.408:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.478470][ T29] audit: type=1326 audit(212.418:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 212.507460][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 212.647982][ T8099] siw: device registration error -23 [ 212.701740][ T8104] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1165'. [ 212.721136][ T8104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.730412][ T8104] bond_slave_0: left promiscuous mode [ 212.737202][ T8104] bond0 (unregistering): Released all slaves [ 212.904208][ T8119] tipc: Can't bind to reserved service type 1 [ 212.943135][ T8125] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1170'. [ 213.017390][ T8116] xt_connbytes: Forcing CT accounting to be enabled [ 213.110037][ T8116] set match dimension is over the limit! [ 213.216779][ T3393] tipc: Node number set to 2886997007 [ 213.433976][ T8122] Set syz1 is full, maxelem 65536 reached [ 213.815559][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1176'. [ 214.098072][ T8176] xt_hashlimit: max too large, truncated to 1048576 [ 214.208935][ T8181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8181 comm=syz.1.1183 [ 214.388462][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 214.544334][ T8204] SELinux: policydb version -1749600548 does not match my version range 15-34 [ 214.557777][ T8204] SELinux: failed to load policy [ 214.926244][ T8210] lo speed is unknown, defaulting to 1000 [ 215.290380][ T8210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.323519][ T8208] loop5: detected capacity change from 0 to 256 [ 215.382919][ T8208] FAT-fs (loop5): count of clusters too big (178174) [ 215.389707][ T8208] FAT-fs (loop5): Can't find a valid FAT filesystem [ 215.719053][ T8215] block device autoloading is deprecated and will be removed. [ 215.737467][ T8215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 215.787098][ T8223] loop2: detected capacity change from 0 to 1024 [ 215.795136][ T8220] loop5: detected capacity change from 0 to 512 [ 215.804237][ T8223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.804393][ T8223] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.831143][ T8220] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.857194][ T8223] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.880403][ T8220] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1192: iget: bad extended attribute block 1 [ 215.896519][ T8220] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1192: couldn't read orphan inode 15 (err -117) [ 215.912719][ T8220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.990452][ T3321] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 216.340630][ T8248] netlink: 'syz.5.1192': attribute type 1 has an invalid length. [ 216.348594][ T8248] __nla_validate_parse: 3 callbacks suppressed [ 216.348611][ T8248] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1192'. [ 216.682210][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1200'. [ 216.719378][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 216.772513][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.855827][ T8256] loop5: detected capacity change from 0 to 512 [ 216.910128][ T8256] EXT4-fs (loop5): 1 orphan inode deleted [ 216.936915][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 216.950403][ T8256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.035625][ T8270] loop6: detected capacity change from 0 to 128 [ 217.084384][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1207'. [ 217.093452][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'. [ 217.112294][ T8273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8273 comm=syz.5.1201 [ 217.127499][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 217.136543][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 217.146603][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 217.146619][ T29] audit: type=1326 audit(217.178:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2e12d5927 code=0x7ffc0000 [ 217.148883][ T8270] hub 2-0:1.0: USB hub found [ 217.152999][ T29] audit: type=1326 audit(217.178:8372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2e127ab39 code=0x7ffc0000 [ 217.181584][ T8270] hub 2-0:1.0: 8 ports detected [ 217.203260][ T29] audit: type=1326 audit(217.178:8373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 217.207243][ T8282] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1209'. [ 217.245014][ T8287] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8287 comm=syz.6.1207 [ 217.286175][ T29] audit: type=1326 audit(217.228:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2e12d5927 code=0x7ffc0000 [ 217.309133][ T29] audit: type=1326 audit(217.228:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2e127ab39 code=0x7ffc0000 [ 217.331934][ T29] audit: type=1326 audit(217.228:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 217.354741][ T29] audit: type=1326 audit(217.228:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2e12d5927 code=0x7ffc0000 [ 217.377756][ T29] audit: type=1326 audit(217.228:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2e127ab39 code=0x7ffc0000 [ 217.400598][ T29] audit: type=1326 audit(217.228:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 217.423336][ T29] audit: type=1326 audit(217.268:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2e12d5927 code=0x7ffc0000 [ 217.509404][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1212'. [ 217.524632][ T8307] loop6: detected capacity change from 0 to 128 [ 217.681199][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.708217][ T8335] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1221'. [ 217.722803][ T8337] loop5: detected capacity change from 0 to 512 [ 217.757964][ T8337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.765418][ T8335] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.789455][ T8335] bond_slave_0: left promiscuous mode [ 217.801734][ T8337] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 217.816824][ T8335] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.839700][ T8337] EXT4-fs (loop5): mount failed [ 217.839862][ T8335] bond_slave_1: left promiscuous mode [ 217.866536][ T8335] $Hÿ (unregistering): Released all slaves [ 217.881004][ T8352] loop2: detected capacity change from 0 to 512 [ 217.890605][ T8352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.915551][ T8356] loop5: detected capacity change from 0 to 512 [ 217.916749][ T8352] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1233: invalid block [ 217.938897][ T8352] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1233: invalid indirect mapped block 4294967295 (level 1) [ 217.960666][ T8352] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1233: invalid indirect mapped block 4294967295 (level 1) [ 217.977054][ T8356] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 217.993085][ T8352] EXT4-fs (loop2): 2 truncates cleaned up [ 217.999172][ T8356] EXT4-fs (loop5): mount failed [ 218.014941][ T8352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.042897][ T8356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8356 comm=syz.5.1224 [ 218.149075][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.160538][ T8379] set match dimension is over the limit! [ 218.393058][ T8416] SELinux: policydb version -1749600548 does not match my version range 15-34 [ 218.393259][ T8416] SELinux: failed to load policy [ 218.481896][ T8424] loop6: detected capacity change from 0 to 2048 [ 218.525137][ T8436] block device autoloading is deprecated and will be removed. [ 218.527882][ T8424] loop6: p1 < > p4 < > [ 218.757166][ T8469] bond0 (unregistering): Released all slaves [ 218.826011][ T8469] loop6: detected capacity change from 0 to 1024 [ 218.848329][ T8469] loop6: detected capacity change from 0 to 512 [ 218.890722][ T8469] EXT4-fs (loop6): 1 orphan inode deleted [ 218.899920][ T8469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.913602][ T3344] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 218.929386][ T8469] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1254: iget: bad i_size value: 360287970189639690 [ 218.945774][ T8469] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1254: iget: bad i_size value: 360287970189639690 [ 218.962064][ T8469] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1254: iget: bad i_size value: 360287970189639690 [ 218.994423][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.086272][ T8510] loop6: detected capacity change from 0 to 512 [ 219.102150][ T8510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.119320][ T8510] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1273: invalid block [ 219.147281][ T8510] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1273: invalid indirect mapped block 4294967295 (level 1) [ 219.185694][ T8510] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1273: invalid indirect mapped block 4294967295 (level 1) [ 219.204311][ T8510] EXT4-fs (loop6): 2 truncates cleaned up [ 219.210736][ T8510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.280333][ T8526] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.1273: path /100/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 219.346183][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.374665][ T8531] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.375134][ T8531] bond_slave_0: left promiscuous mode [ 219.382071][ T8531] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.382560][ T8531] bond_slave_1: left promiscuous mode [ 219.383491][ T8531] $Hÿ (unregistering): Released all slaves [ 219.457756][ T12] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 219.486756][ T12] bond1: (slave vlan3): making interface the new active one [ 219.498671][ T12] veth1: entered promiscuous mode [ 219.516156][ T12] vlan3: entered promiscuous mode [ 219.539374][ T8531] loop2: detected capacity change from 0 to 1024 [ 219.570142][ T8531] loop2: detected capacity change from 0 to 512 [ 219.577583][ T8551] loop6: detected capacity change from 0 to 512 [ 219.584273][ T8551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.619594][ T8551] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 219.635276][ T8548] lo speed is unknown, defaulting to 1000 [ 219.645067][ T8553] loop5: detected capacity change from 0 to 2048 [ 219.651789][ T8551] EXT4-fs (loop6): mount failed [ 219.651831][ T8531] EXT4-fs (loop2): 1 orphan inode deleted [ 219.652355][ T8531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.676083][ T3344] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 219.698345][ T8553] loop5: p1 < > p4 [ 219.710879][ T8553] loop5: p4 size 8388608 extends beyond EOD, truncated [ 219.727409][ T8531] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1281: iget: bad i_size value: 360287970189639690 [ 219.760879][ T8531] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1281: iget: bad i_size value: 360287970189639690 [ 219.809923][ T8531] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1281: iget: bad i_size value: 360287970189639690 [ 219.874022][ T8567] loop6: detected capacity change from 0 to 512 [ 219.890942][ T8567] EXT4-fs: Invalid want_extra_isize 1395 [ 219.911518][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.335406][ T8601] netlink: 'syz.4.1307': attribute type 27 has an invalid length. [ 220.350693][ T8596] lo speed is unknown, defaulting to 1000 [ 220.356567][ T8601] lo: left promiscuous mode [ 220.371998][ T8601] tunl0: left promiscuous mode [ 220.395345][ T8601] gre0: left promiscuous mode [ 220.410776][ T8601] gretap0: left promiscuous mode [ 220.430517][ T8601] erspan0: left promiscuous mode [ 220.445140][ T8601] ip_vti0: left promiscuous mode [ 220.455918][ T8601] ip6_vti0: left promiscuous mode [ 220.470094][ T8601] sit0: left promiscuous mode [ 220.487094][ T8601] ip6tnl0: left promiscuous mode [ 220.494104][ T8601] ip6gre0: left promiscuous mode [ 220.501169][ T8601] ip6gretap0: left promiscuous mode [ 220.507759][ T8601] bridge0: left promiscuous mode [ 220.513718][ T8601] vcan0: left promiscuous mode [ 220.519694][ T8601] nlmon0: left promiscuous mode [ 220.525313][ T8601] caif0: left promiscuous mode [ 220.532482][ T8601] geneve0: left allmulticast mode [ 220.537752][ T8601] macvtap1: left promiscuous mode [ 220.542805][ T8601] macvtap1: left allmulticast mode [ 220.634702][ T8601] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.643318][ T8601] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.651708][ T8601] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.660188][ T8601] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.697070][ T8601] geneve2: left promiscuous mode [ 220.703780][ T8601] veth0_macvtap: left allmulticast mode [ 220.710414][ T8601] macvtap2: left allmulticast mode [ 220.737339][ T8614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.744690][ T8614] IPv6: NLM_F_CREATE should be set when creating new route [ 220.751975][ T8614] IPv6: NLM_F_CREATE should be set when creating new route [ 221.178795][ T8652] loop5: detected capacity change from 0 to 512 [ 221.197397][ T8652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.224989][ T8652] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1326: invalid block [ 221.247296][ T8652] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1326: invalid indirect mapped block 4294967295 (level 1) [ 221.282332][ T8652] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1326: invalid indirect mapped block 4294967295 (level 1) [ 221.311044][ T8652] EXT4-fs (loop5): 2 truncates cleaned up [ 221.318486][ T8652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.461754][ T8669] __nla_validate_parse: 9 callbacks suppressed [ 221.461775][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1334'. [ 221.477113][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1334'. [ 221.547042][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.638875][ T8683] program syz.5.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.075766][ T8740] loop6: detected capacity change from 0 to 512 [ 222.084257][ T8740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.098081][ T8740] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1368: invalid block [ 222.111370][ T8740] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1368: invalid indirect mapped block 4294967295 (level 1) [ 222.126422][ T8740] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1368: invalid indirect mapped block 4294967295 (level 1) [ 222.146940][ T8740] EXT4-fs (loop6): 2 truncates cleaned up [ 222.156026][ T8740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.205080][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 222.205100][ T29] audit: type=1326 audit(222.228:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.234099][ T29] audit: type=1326 audit(222.228:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.256630][ T29] audit: type=1326 audit(222.228:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.279387][ T29] audit: type=1326 audit(222.228:8748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.301742][ T29] audit: type=1326 audit(222.228:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.301790][ T29] audit: type=1326 audit(222.238:8750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.301821][ T29] audit: type=1326 audit(222.238:8751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.369309][ T29] audit: type=1326 audit(222.238:8752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.369399][ T29] audit: type=1326 audit(222.238:8753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.369497][ T29] audit: type=1326 audit(222.238:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb9be969 code=0x7ffc0000 [ 222.460807][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.533528][ T8777] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 222.540476][ T8779] loop6: detected capacity change from 0 to 512 [ 222.568248][ T8779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.605345][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.817829][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1407'. [ 222.860462][ T8834] SELinux: syz.5.1409 (8834) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 222.980780][ T8851] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1416'. [ 222.989961][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1416'. [ 222.999144][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1416'. [ 223.297749][ T8908] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1441'. [ 223.300379][ T8911] netlink: 'syz.6.1442': attribute type 27 has an invalid length. [ 223.316225][ T8911] lo: left promiscuous mode [ 223.321029][ T8911] tunl0: left promiscuous mode [ 223.328549][ T8911] gre0: left promiscuous mode [ 223.350496][ T8911] gretap0: left promiscuous mode [ 223.365063][ T8911] erspan0: left promiscuous mode [ 223.373917][ T8911] ip_vti0: left promiscuous mode [ 223.391769][ T8911] ip6_vti0: left promiscuous mode [ 223.402661][ T8911] sit0: left promiscuous mode [ 223.410095][ T8911] ip6tnl0: left promiscuous mode [ 223.416498][ T8911] ip6gre0: left promiscuous mode [ 223.423484][ T8911] syz_tun: left promiscuous mode [ 223.430464][ T8911] ip6gretap0: left promiscuous mode [ 223.437414][ T8911] bridge0: left promiscuous mode [ 223.443594][ T8911] vcan0: left promiscuous mode [ 223.449306][ T8911] dummy0: left promiscuous mode [ 223.455454][ T8911] nlmon0: left promiscuous mode [ 223.461303][ T8911] caif0: left promiscuous mode [ 223.499915][ T8911] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.508610][ T8911] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.517185][ T8911] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.525660][ T8911] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.535476][ T8911] bond1: left promiscuous mode [ 223.540417][ T8911] bond1: left allmulticast mode [ 223.556011][ T8608] syz1: Port: 1 Link DOWN [ 223.668889][ T8917] lo speed is unknown, defaulting to 1000 [ 223.748062][ T8951] netlink: 'syz.6.1461': attribute type 11 has an invalid length. [ 223.770009][ T8951] netlink: 448 bytes leftover after parsing attributes in process `syz.6.1461'. [ 223.974754][ T8985] loop2: detected capacity change from 0 to 512 [ 223.993243][ T8987] netlink: 'syz.1.1478': attribute type 11 has an invalid length. [ 224.001730][ T8985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.022596][ T8991] qrtr: Invalid version 43 [ 224.029280][ T8987] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1478'. [ 224.057085][ T8985] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1477: invalid block [ 224.103491][ T8985] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1477: invalid indirect mapped block 4294967295 (level 1) [ 224.134855][ T8985] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1477: invalid indirect mapped block 4294967295 (level 1) [ 224.155431][ T8985] EXT4-fs (loop2): 2 truncates cleaned up [ 224.161741][ T8985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.244049][ T9006] netlink: 'syz.1.1487': attribute type 32 has an invalid length. [ 224.266313][ T9009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1488'. [ 224.278156][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.371461][ T9028] loop6: detected capacity change from 0 to 128 [ 224.933126][ T9094] loop6: detected capacity change from 0 to 512 [ 224.949062][ T9094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.973380][ T9094] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1526: invalid block [ 224.999692][ T9094] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1526: invalid indirect mapped block 4294967295 (level 1) [ 225.036741][ T9094] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1526: invalid indirect mapped block 4294967295 (level 1) [ 225.066945][ T9094] EXT4-fs (loop6): 2 truncates cleaned up [ 225.081785][ T9094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.165164][ T9094] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.1526: path /158/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 225.227172][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.361212][ T9150] loop6: detected capacity change from 0 to 512 [ 225.369171][ T9150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.379724][ T9150] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1551: invalid block [ 225.392106][ T9150] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1551: invalid indirect mapped block 4294967295 (level 1) [ 225.407535][ T9150] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1551: invalid indirect mapped block 4294967295 (level 1) [ 225.422677][ T9150] EXT4-fs (loop6): 2 truncates cleaned up [ 225.429146][ T9150] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.483831][ T9150] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.1551: path /161/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 225.530844][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.731448][ T9193] netlink: 'syz.6.1571': attribute type 3 has an invalid length. [ 226.198278][ T9280] loop5: detected capacity change from 0 to 164 [ 226.360169][ T9305] 9pnet_fd: Insufficient options for proto=fd [ 226.480581][ T9320] loop5: detected capacity change from 0 to 512 [ 226.513016][ T9320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.530220][ T9320] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1632: invalid block [ 226.543946][ T9320] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1632: invalid indirect mapped block 4294967295 (level 1) [ 226.560286][ T9320] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1632: invalid indirect mapped block 4294967295 (level 1) [ 226.586925][ T9320] EXT4-fs (loop5): 2 truncates cleaned up [ 226.595012][ T9320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.664888][ T9320] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.1632: path /322/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 226.700021][ T9342] __nla_validate_parse: 4 callbacks suppressed [ 226.700040][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1643'. [ 226.748221][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.832336][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1652'. [ 226.841576][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1652'. [ 226.879425][ T9374] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1655'. [ 226.901538][ T9372] loop2: detected capacity change from 0 to 512 [ 226.910424][ T9377] loop6: detected capacity change from 0 to 512 [ 226.922331][ T9372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.932115][ T9377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.943799][ T9372] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1654: invalid block [ 226.958098][ T9377] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1658: invalid block [ 226.982467][ T9372] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1654: invalid indirect mapped block 4294967295 (level 1) [ 226.998322][ T9377] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1658: invalid indirect mapped block 4294967295 (level 1) [ 227.018372][ T9372] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1654: invalid indirect mapped block 4294967295 (level 1) [ 227.032545][ T9377] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1658: invalid indirect mapped block 4294967295 (level 1) [ 227.069254][ T9372] EXT4-fs (loop2): 2 truncates cleaned up [ 227.075429][ T9372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.088140][ T9377] EXT4-fs (loop6): 2 truncates cleaned up [ 227.094314][ T9377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.178080][ T9406] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.1658: path /193/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 227.181150][ T9407] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.1654: path /302/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 227.284388][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.307403][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 227.307422][ T29] audit: type=1326 audit(227.338:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.343590][ T9418] netlink: 'syz.4.1676': attribute type 21 has an invalid length. [ 227.355484][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.366496][ T9418] netlink: 'syz.4.1676': attribute type 6 has an invalid length. [ 227.374311][ T9418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1676'. [ 227.417267][ T29] audit: type=1326 audit(227.378:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.439723][ T29] audit: type=1326 audit(227.378:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.462221][ T29] audit: type=1326 audit(227.378:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.484623][ T29] audit: type=1326 audit(227.378:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.507133][ T29] audit: type=1326 audit(227.378:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.529468][ T29] audit: type=1326 audit(227.378:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.551968][ T29] audit: type=1326 audit(227.378:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.574305][ T29] audit: type=1326 audit(227.378:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.596626][ T29] audit: type=1326 audit(227.378:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12de969 code=0x7ffc0000 [ 227.643926][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 227.653059][ T9441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1685'. [ 227.662084][ T9441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1685'. [ 227.755451][ T9466] loop6: detected capacity change from 0 to 512 [ 227.773694][ T9466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.795492][ T9466] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1696: invalid block [ 227.809167][ T9466] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1696: invalid indirect mapped block 4294967295 (level 1) [ 227.823625][ T9466] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1696: invalid indirect mapped block 4294967295 (level 1) [ 227.838796][ T9466] EXT4-fs (loop6): 2 truncates cleaned up [ 227.845012][ T9466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.909536][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.111330][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 228.410985][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 228.484553][ T9591] loop5: detected capacity change from 0 to 512 [ 228.494583][ T9591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.507135][ T9591] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1753: invalid block [ 228.519718][ T9591] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1753: invalid indirect mapped block 4294967295 (level 1) [ 228.534533][ T9591] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1753: invalid indirect mapped block 4294967295 (level 1) [ 228.549620][ T9591] EXT4-fs (loop5): 2 truncates cleaned up [ 228.555797][ T9591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.620444][ T9591] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.1753: path /344/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 228.659588][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.679736][ T9616] netlink: 'syz.2.1765': attribute type 2 has an invalid length. [ 228.828620][ T9640] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 229.015588][ T9666] netlink: 'syz.5.1788': attribute type 1 has an invalid length. [ 229.153991][ T9687] program syz.5.1798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.164346][ T9687] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 229.304531][ T9705] SELinux: security_context_str_to_sid (ðƒªøÞ»ê‹lN§ù}ĽwL&bþüYªòK±BB«Æ2¢îk­?j›1öÁØp¾-£§X!úA‚:ÁÅÌ?q´§) failed with errno=-22 [ 229.498770][ T9733] loop6: detected capacity change from 0 to 1024 [ 229.506175][ T9733] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 229.517273][ T9733] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 229.528916][ T9733] JBD2: no valid journal superblock found [ 229.534684][ T9733] EXT4-fs (loop6): Could not load journal inode [ 229.690038][ T9753] loop5: detected capacity change from 0 to 512 [ 229.708992][ T9753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.741310][ T9753] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1825: invalid block [ 229.766457][ T9765] loop6: detected capacity change from 0 to 128 [ 229.768184][ T9753] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1825: invalid indirect mapped block 4294967295 (level 1) [ 229.798014][ T9765] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 229.831504][ T9753] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1825: invalid indirect mapped block 4294967295 (level 1) [ 229.883033][ T9753] EXT4-fs (loop5): 2 truncates cleaned up [ 229.890435][ T9753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.909695][ T6207] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 229.968570][ T9753] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.1825: path /365/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 230.108424][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.221027][ T9810] program syz.1.1851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.361706][ T9836] loop2: detected capacity change from 0 to 128 [ 230.375008][ T9836] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 230.407198][ T3344] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 230.450191][ T9855] SELinux: Context @ is not valid (left unmapped). [ 230.546110][ T9876] 9pnet_fd: Insufficient options for proto=fd [ 230.556997][ T3344] vlan3: left promiscuous mode [ 230.583081][ T9878] unsupported nlmsg_type 40 [ 230.731664][ T9907] loop5: detected capacity change from 0 to 1764 [ 230.795771][ T9918] loop6: detected capacity change from 0 to 1024 [ 230.826560][ T9918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.841769][ T9925] loop5: detected capacity change from 0 to 512 [ 230.854652][ T9925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.868042][ T9918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.903684][ T9925] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1903: invalid block [ 230.930808][ T9925] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1903: invalid indirect mapped block 4294967295 (level 1) [ 230.951060][ T9925] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1903: invalid indirect mapped block 4294967295 (level 1) [ 230.965757][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.976280][ T9925] EXT4-fs (loop5): 2 truncates cleaned up [ 230.994161][ T9925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.056262][ T9953] netlink: 'syz.6.1916': attribute type 39 has an invalid length. [ 231.066745][ T9955] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.1903: path /379/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 231.144298][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.232165][ T9974] IPVS: Error connecting to the multicast addr [ 231.919898][T10093] __nla_validate_parse: 18 callbacks suppressed [ 231.919916][T10093] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1982'. [ 232.015272][T10099] loop6: detected capacity change from 0 to 2048 [ 232.044217][T10099] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.083666][T10099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.151805][T10099] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 232.227752][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.299082][T10122] loop2: detected capacity change from 0 to 512 [ 232.317421][T10126] loop6: detected capacity change from 0 to 512 [ 232.329607][T10122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.345254][T10126] EXT4-fs: Ignoring removed bh option [ 232.350840][T10126] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.377470][T10122] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1997: invalid block [ 232.396931][T10122] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1997: invalid indirect mapped block 4294967295 (level 1) [ 232.426951][T10122] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1997: invalid indirect mapped block 4294967295 (level 1) [ 232.429146][T10135] loop5: detected capacity change from 0 to 128 [ 232.458216][T10122] EXT4-fs (loop2): 2 truncates cleaned up [ 232.464499][T10122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.473986][T10135] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 232.484934][T10135] FAT-fs (loop5): Filesystem has been set read-only [ 232.508898][T10126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.543771][T10135] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 232.551796][T10135] syz.5.2001: attempt to access beyond end of device [ 232.551796][T10135] loop5: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 232.552459][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 232.552483][ T29] audit: type=1400 audit(232.578:9111): avc: denied { setattr } for pid=10125 comm="syz.6.1995" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.607860][T10139] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.1997: path /378/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 232.666224][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.687816][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.707256][ T29] audit: type=1326 audit(232.598:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 232.730309][ T29] audit: type=1326 audit(232.598:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 232.812300][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 232.821560][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 232.827832][ T29] audit: type=1400 audit(232.848:9114): avc: denied { setopt } for pid=10152 comm="syz.6.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.870620][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 232.996236][T10179] No such timeout policy "syz0" [ 233.110273][T10196] 9pnet: Could not find request transport: r [ 233.129053][T10201] loop2: detected capacity change from 0 to 512 [ 233.165124][T10201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.199972][T10201] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2030: invalid block [ 233.223103][T10201] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2030: invalid indirect mapped block 4294967295 (level 1) [ 233.237530][T10201] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2030: invalid indirect mapped block 4294967295 (level 1) [ 233.253344][T10201] EXT4-fs (loop2): 2 truncates cleaned up [ 233.259977][T10201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.278791][T10215] netlink: 'syz.5.2037': attribute type 1 has an invalid length. [ 233.279489][ T29] audit: type=1326 audit(233.298:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 233.286566][T10215] netlink: 'syz.5.2037': attribute type 2 has an invalid length. [ 233.309053][ T29] audit: type=1326 audit(233.298:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 233.309090][ T29] audit: type=1326 audit(233.308:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 233.309115][ T29] audit: type=1326 audit(233.308:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 233.317207][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2037'. [ 233.339318][ T29] audit: type=1326 audit(233.308:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 233.415510][ T29] audit: type=1326 audit(233.308:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 233.497465][T10224] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.2030: path /383/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 233.602053][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.618862][T10238] loop6: detected capacity change from 0 to 512 [ 233.636917][T10240] loop5: detected capacity change from 0 to 2048 [ 233.643394][T10238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.670101][T10240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.676359][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2051'. [ 233.692616][T10238] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2047: invalid block [ 233.715182][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.715531][T10238] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2047: invalid indirect mapped block 4294967295 (level 1) [ 233.757898][T10238] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2047: invalid indirect mapped block 4294967295 (level 1) [ 233.792884][T10257] loop5: detected capacity change from 0 to 512 [ 233.801365][T10238] EXT4-fs (loop6): 2 truncates cleaned up [ 233.817976][T10238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.838926][T10257] EXT4-fs (loop5): 1 orphan inode deleted [ 233.847344][T10257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.867107][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 233.879468][T10238] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.2047: path /265/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 233.888925][T10269] loop2: detected capacity change from 0 to 256 [ 233.912153][T10257] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.2053: iget: bad i_size value: 360287970189639690 [ 233.941820][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.973033][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.040540][T10288] loop6: detected capacity change from 0 to 512 [ 234.057611][T10288] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.076562][T10288] EXT4-fs (loop6): 1 truncate cleaned up [ 234.082949][T10288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.106215][T10288] SELinux: Context : is not valid (left unmapped). [ 234.147917][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.239604][T10304] lo speed is unknown, defaulting to 1000 [ 234.275589][T10318] smc: net device bond0 applied user defined pnetid SYZ2 [ 234.282887][T10318] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 234.361565][T10328] loop5: detected capacity change from 0 to 1024 [ 234.370197][T10328] EXT4-fs: Ignoring removed orlov option [ 234.384165][T10328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.434649][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.511855][T10347] loop2: detected capacity change from 0 to 1024 [ 234.536519][T10347] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 234.563936][T10347] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 234.573915][T10347] EXT4-fs (loop2): orphan cleanup on readonly fs [ 234.587147][T10347] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.2096: Invalid inode table block 0 in block_group 0 [ 234.618130][T10347] EXT4-fs (loop2): Remounting filesystem read-only [ 234.640833][T10347] EXT4-fs (loop2): 1 truncate cleaned up [ 234.652834][T10347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.722349][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.813432][T10374] SELinux: Context Ü is not valid (left unmapped). [ 234.839219][T10378] loop2: detected capacity change from 0 to 512 [ 234.846355][T10378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.857528][T10378] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2108: invalid block [ 234.870327][T10378] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2108: invalid indirect mapped block 4294967295 (level 1) [ 234.885509][T10378] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2108: invalid indirect mapped block 4294967295 (level 1) [ 234.900228][T10378] EXT4-fs (loop2): 2 truncates cleaned up [ 234.902312][T10383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.906778][T10378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.961770][T10378] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.2108: path /393/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 235.009488][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.065607][T10395] loop2: detected capacity change from 0 to 128 [ 235.388436][T10436] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.415305][T10440] loop5: detected capacity change from 0 to 164 [ 235.424617][T10440] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 235.451157][T10445] netlink: 'syz.4.2140': attribute type 39 has an invalid length. [ 235.847103][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2158'. [ 235.856226][T10486] tipc: Enabling of bearer rejected, failed to enable media [ 236.074822][T10505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2166'. [ 236.120239][T10509] loop2: detected capacity change from 0 to 512 [ 236.143404][T10509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.167118][T10509] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2167: invalid block [ 236.183849][T10509] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2167: invalid indirect mapped block 4294967295 (level 1) [ 236.208330][T10509] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2167: invalid indirect mapped block 4294967295 (level 1) [ 236.237705][T10509] EXT4-fs (loop2): 2 truncates cleaned up [ 236.252390][T10509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.315032][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.327436][T10528] loop6: detected capacity change from 0 to 512 [ 236.343274][T10535] loop5: detected capacity change from 0 to 512 [ 236.350877][T10535] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.360075][T10535] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 236.376519][T10528] EXT4-fs (loop6): 1 orphan inode deleted [ 236.383029][T10528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.395735][ T62] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 236.414137][T10535] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 236.436470][T10535] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 236.459001][T10535] System zones: 0-2, 18-18, 34-35 [ 236.484185][T10535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.501130][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.555621][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.620530][T10564] netlink: 'syz.2.2189': attribute type 39 has an invalid length. [ 236.674582][T10570] loop6: detected capacity change from 0 to 1024 [ 236.690461][T10570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.763045][T10582] netlink: 'syz.5.2197': attribute type 3 has an invalid length. [ 236.784879][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.844943][T10588] loop5: detected capacity change from 0 to 512 [ 236.862267][T10588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.887860][T10588] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2201: invalid block [ 236.906195][T10588] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2201: invalid indirect mapped block 4294967295 (level 1) [ 236.921363][T10588] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2201: invalid indirect mapped block 4294967295 (level 1) [ 236.936005][T10588] EXT4-fs (loop5): 2 truncates cleaned up [ 236.942957][T10588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.022252][T10588] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.2201: path /441/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 237.090375][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.207998][T10625] netlink: 'syz.1.2217': attribute type 3 has an invalid length. [ 237.324523][T10640] ip6erspan0: entered promiscuous mode [ 237.503352][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'. [ 237.580765][T10665] loop2: detected capacity change from 0 to 764 [ 237.602444][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 237.602510][ T29] audit: type=1326 audit(237.628:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633014][ T29] audit: type=1326 audit(237.628:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633134][ T29] audit: type=1326 audit(237.628:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633174][ T29] audit: type=1326 audit(237.628:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633198][ T29] audit: type=1326 audit(237.628:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633230][ T29] audit: type=1326 audit(237.628:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633304][ T29] audit: type=1326 audit(237.628:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633336][ T29] audit: type=1326 audit(237.628:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633362][ T29] audit: type=1326 audit(237.628:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.633431][ T29] audit: type=1326 audit(237.628:9269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.6.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 237.663969][T10665] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 237.666290][T10665] Symlink component flag not implemented [ 237.666296][T10665] Symlink component flag not implemented [ 237.666320][T10665] Symlink component flag not implemented (128) [ 237.666332][T10665] Symlink component flag not implemented (122) [ 238.231878][T10720] lo speed is unknown, defaulting to 1000 [ 238.279710][T10728] loop5: detected capacity change from 0 to 512 [ 238.294243][T10728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.317146][T10728] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2261: invalid block [ 238.345066][T10728] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2261: invalid indirect mapped block 4294967295 (level 1) [ 238.402630][T10728] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2261: invalid indirect mapped block 4294967295 (level 1) [ 238.425130][T10728] EXT4-fs (loop5): 2 truncates cleaned up [ 238.431642][T10728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.505122][T10742] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.2261: path /445/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 238.547211][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2269'. [ 238.601479][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.969682][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 239.014482][T10807] loop2: detected capacity change from 0 to 512 [ 239.033144][T10807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.052826][T10807] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2297: invalid block [ 239.065388][T10807] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2297: invalid indirect mapped block 4294967295 (level 1) [ 239.070269][T10815] loop6: detected capacity change from 0 to 128 [ 239.086740][T10807] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2297: invalid indirect mapped block 4294967295 (level 1) [ 239.102582][T10815] EXT4-fs: Ignoring removed nobh option [ 239.108525][T10807] EXT4-fs (loop2): 2 truncates cleaned up [ 239.115471][T10807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.138859][T10815] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.191873][ T6144] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.209118][T10827] loop5: detected capacity change from 0 to 512 [ 239.223285][T10829] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.2297: path /426/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 239.269265][T10827] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2306: bg 0: block 393: padding at end of block bitmap is not set [ 239.290359][T10827] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 239.290779][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.300950][T10827] EXT4-fs (loop5): 2 truncates cleaned up [ 239.315440][T10827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.351197][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.432377][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'. [ 239.441686][T10847] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'. [ 239.463887][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'. [ 239.470858][T10864] loop6: detected capacity change from 0 to 512 [ 239.486767][T10864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.523638][T10864] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2322: invalid block [ 239.546280][T10864] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2322: invalid indirect mapped block 4294967295 (level 1) [ 239.577299][T10864] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2322: invalid indirect mapped block 4294967295 (level 1) [ 239.597192][T10864] EXT4-fs (loop6): 2 truncates cleaned up [ 239.606166][T10864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.657590][T10864] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.2322: path /321/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 239.701923][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.741048][T10892] loop5: detected capacity change from 0 to 512 [ 239.752336][T10892] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.783173][T10892] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 239.783362][T10899] bond0: entered promiscuous mode [ 239.796345][T10899] bond0: entered allmulticast mode [ 239.797058][T10892] EXT4-fs (loop5): orphan cleanup on readonly fs [ 239.803851][T10899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.816844][T10892] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.837806][T10899] bond0 (unregistering): Released all slaves [ 239.844513][T10892] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 239.860114][T10892] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2336: bg 0: block 40: padding at end of block bitmap is not set [ 239.882212][T10892] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 239.894830][T10909] 9pnet_fd: Insufficient options for proto=fd [ 239.905687][T10892] EXT4-fs (loop5): 1 truncate cleaned up [ 240.017148][T10917] loop6: detected capacity change from 0 to 512 [ 240.039192][T10917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.057739][T10917] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2345: invalid block [ 240.070088][T10917] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2345: invalid indirect mapped block 4294967295 (level 1) [ 240.084525][T10917] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2345: invalid indirect mapped block 4294967295 (level 1) [ 240.099799][T10917] EXT4-fs (loop6): 2 truncates cleaned up [ 240.298746][T10936] loop6: detected capacity change from 0 to 512 [ 240.307736][T10936] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.318228][T10936] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 240.331741][T10936] EXT4-fs (loop6): orphan cleanup on readonly fs [ 240.340334][T10936] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 240.356228][T10936] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 240.364522][T10936] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2353: bg 0: block 40: padding at end of block bitmap is not set [ 240.380234][T10936] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 240.389491][T10936] EXT4-fs (loop6): 1 truncate cleaned up [ 240.452727][T10951] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2360'. [ 240.608771][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2366'. [ 240.626788][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2366'. [ 240.683696][T10970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10970 comm=syz.6.2369 [ 240.723981][T10972] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2370'. [ 241.130413][T11021] 9pnet: Could not find request transport: 0xffffffffffffffff [ 241.595829][T11082] program syz.1.2416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.707616][T11088] usb usb8: usbfs: process 11088 (syz.2.2419) did not claim interface 0 before use [ 241.836181][T11105] netlink: 'syz.1.2427': attribute type 1 has an invalid length. [ 241.965370][T11136] loop6: detected capacity change from 0 to 512 [ 241.976492][T11136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.987806][T11136] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2436: invalid block [ 242.000168][T11136] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2436: invalid indirect mapped block 4294967295 (level 1) [ 242.018316][T11136] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2436: invalid indirect mapped block 4294967295 (level 1) [ 242.033177][T11136] EXT4-fs (loop6): 2 truncates cleaned up [ 242.100166][T11136] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.2436: path /346/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 242.399791][T11200] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 242.823987][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 242.824004][ T29] audit: type=1326 audit(242.848:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 242.834051][T11235] __nla_validate_parse: 3 callbacks suppressed [ 242.834073][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2479'. [ 242.882991][ T29] audit: type=1326 audit(242.878:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 242.905604][ T29] audit: type=1326 audit(242.878:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 242.928113][ T29] audit: type=1326 audit(242.878:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 242.950588][ T29] audit: type=1326 audit(242.908:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 242.972983][ T29] audit: type=1326 audit(242.908:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 242.995458][ T29] audit: type=1326 audit(242.908:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 243.017980][ T29] audit: type=1326 audit(242.908:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 243.040411][ T29] audit: type=1326 audit(242.908:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 243.062870][ T29] audit: type=1326 audit(242.908:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm=C7FD4C exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 243.091004][T11243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2483'. [ 243.522275][T11285] netlink: 404 bytes leftover after parsing attributes in process `syz.6.2501'. [ 243.833409][T11321] ./file0: Can't lookup blockdev [ 243.948229][T11339] No source specified [ 244.014871][T11343] loop5: detected capacity change from 0 to 512 [ 244.032201][T11343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.057683][T11343] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2525: invalid block [ 244.089432][T11343] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2525: invalid indirect mapped block 4294967295 (level 1) [ 244.106067][T11343] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2525: invalid indirect mapped block 4294967295 (level 1) [ 244.121241][T11343] EXT4-fs (loop5): 2 truncates cleaned up [ 244.222248][T11366] loop5: detected capacity change from 0 to 512 [ 244.239424][T11366] EXT4-fs: Ignoring removed oldalloc option [ 244.275378][T11366] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2533: Parent and EA inode have the same ino 15 [ 244.308492][T11362] lo speed is unknown, defaulting to 1000 [ 244.319516][T11366] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2533: Parent and EA inode have the same ino 15 [ 244.347637][T11366] EXT4-fs (loop5): 1 orphan inode deleted [ 244.807414][T11408] 8021q: VLANs not supported on lo [ 244.859937][T11415] serio: Serial port ptm0 [ 245.163814][T11459] IPv6: Can't replace route, no match found [ 245.228049][T11465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2578'. [ 245.395894][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 245.517987][T11503] loop5: detected capacity change from 0 to 512 [ 245.563986][T11509] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2597'. [ 245.822071][T11525] lo speed is unknown, defaulting to 1000 [ 245.886002][T11538] loop5: detected capacity change from 0 to 512 [ 245.895826][T11538] EXT4-fs: Ignoring removed nobh option [ 245.928510][T11538] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 3: comm syz.5.2610: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 245.952396][T11538] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem [ 245.965031][T11549] loop2: detected capacity change from 0 to 512 [ 245.972652][T11538] EXT4-fs warning (device loop5): ext4_rename_delete:3726: inode #2: comm syz.5.2610: Deleting old file: nlink 4, error=-117 [ 246.002474][T11549] EXT4-fs (loop2): 1 orphan inode deleted [ 246.014247][T11130] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 246.048683][T11557] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 246.062307][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2618'. [ 246.194717][T11584] sd 0:0:1:0: device reset [ 246.239868][T11590] loop5: detected capacity change from 0 to 512 [ 246.379356][T11602] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 246.441861][T11613] loop5: detected capacity change from 0 to 512 [ 246.459479][ T1040] Process accounting resumed [ 246.465570][T11613] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 246.483548][T11613] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2643: invalid indirect mapped block 2683928664 (level 1) [ 246.507025][T11613] EXT4-fs (loop5): Remounting filesystem read-only [ 246.514249][T11613] EXT4-fs (loop5): 1 truncate cleaned up [ 246.527058][T11624] SELinux: policydb version 358682821 does not match my version range 15-34 [ 246.536026][T11624] SELinux: failed to load policy [ 246.607526][T11640] loop6: detected capacity change from 0 to 512 [ 246.614948][T11640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.625472][T11640] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2655: invalid block [ 246.638460][T11640] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2655: invalid indirect mapped block 4294967295 (level 1) [ 246.653801][T11640] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2655: invalid indirect mapped block 4294967295 (level 1) [ 246.672223][T11640] EXT4-fs (loop6): 2 truncates cleaned up [ 246.730343][T11640] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.2655: path /402/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 246.805679][T11658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11658 comm=syz.5.2662 [ 246.836319][T11661] netlink: 'syz.1.2664': attribute type 1 has an invalid length. [ 246.844193][T11661] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.2664'. [ 246.909598][T11673] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.008073][T11683] loop6: detected capacity change from 0 to 512 [ 247.018851][T11683] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.2675: corrupted in-inode xattr: invalid ea_ino [ 247.039879][T11683] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2675: couldn't read orphan inode 15 (err -117) [ 247.076349][T11692] syzkaller1: entered promiscuous mode [ 247.081934][T11692] syzkaller1: entered allmulticast mode [ 247.117925][T11694] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 247.129850][T11694] vhci_hcd: invalid port number 96 [ 247.135096][T11694] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 247.179345][T11706] loop5: detected capacity change from 0 to 512 [ 247.187821][T11706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.196640][T11705] loop2: detected capacity change from 0 to 512 [ 247.207682][T11706] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2686: invalid block [ 247.220019][T11705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.228888][T11706] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2686: invalid indirect mapped block 4294967295 (level 1) [ 247.243174][T11706] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2686: invalid indirect mapped block 4294967295 (level 1) [ 247.248108][T11705] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2685: invalid block [ 247.269580][T11706] EXT4-fs (loop5): 2 truncates cleaned up [ 247.276500][T11705] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2685: invalid indirect mapped block 4294967295 (level 1) [ 247.290997][T11705] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2685: invalid indirect mapped block 4294967295 (level 1) [ 247.306179][T11705] EXT4-fs (loop2): 2 truncates cleaned up [ 247.336470][T11717] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.2686: path /525/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 247.518817][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'. [ 247.527899][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'. [ 247.830390][T11790] loop2: detected capacity change from 0 to 512 [ 247.874236][T11790] EXT4-fs (loop2): 1 orphan inode deleted [ 247.887796][T11128] __quota_error: 267 callbacks suppressed [ 247.887813][T11128] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 247.903438][T11128] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1 [ 247.950119][T11790] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.2724: iget: bad i_size value: 360287970189639690 [ 248.013059][T11790] EXT4-fs (loop2): shut down requested (0) [ 248.123275][T11794] lo speed is unknown, defaulting to 1000 [ 248.267373][ T29] audit: type=1326 audit(248.298:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11829 comm="syz.4.2742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x0 [ 248.464412][ T29] audit: type=1326 audit(248.488:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 248.467751][T11849] Falling back ldisc for ptm0. [ 248.550663][T11853] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.552837][ T29] audit: type=1326 audit(248.518:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 248.581451][ T29] audit: type=1326 audit(248.518:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 248.604465][ T29] audit: type=1326 audit(248.518:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 248.627489][ T29] audit: type=1326 audit(248.528:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 248.650467][ T29] audit: type=1326 audit(248.528:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 248.673513][ T29] audit: type=1326 audit(248.528:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 248.696509][ T29] audit: type=1326 audit(248.528:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f940a7be969 code=0x7ffc0000 [ 249.248355][T11879] loop5: detected capacity change from 0 to 2048 [ 249.328218][T11879] Alternate GPT is invalid, using primary GPT. [ 249.334652][T11879] loop5: p1 p2 p3 [ 249.505054][T11895] __nla_validate_parse: 1 callbacks suppressed [ 249.505076][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'. [ 249.520373][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'. [ 249.572154][T11900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2771'. [ 249.707901][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x1 [ 249.715349][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.722775][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.730304][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.737724][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.749186][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.756757][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.764221][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x2 [ 249.771814][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.779307][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.786772][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.794172][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.801673][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.809126][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.816514][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.824046][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.831476][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.838954][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.846340][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.853751][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.861303][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.868721][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.876137][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.883569][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.891021][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.898435][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.905897][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.913314][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.920725][ T8608] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 249.933299][ T8608] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 250.616366][T11988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2811'. [ 250.781006][T12007] lo speed is unknown, defaulting to 1000 [ 250.817900][T12018] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2825'. [ 251.315657][T12058] SELinux: failed to load policy [ 251.376801][T12062] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2845'. [ 251.411333][T12066] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2847'. [ 251.447311][T12071] loop5: detected capacity change from 0 to 512 [ 251.456232][T12071] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.491930][T12071] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2849: bg 0: block 248: padding at end of block bitmap is not set [ 251.509742][T12071] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2849: Failed to acquire dquot type 1 [ 251.521643][T12071] EXT4-fs (loop5): 1 truncate cleaned up [ 251.579906][T12084] dvmrp1: left allmulticast mode [ 251.587299][T12084] pimreg: left allmulticast mode [ 251.707318][T12102] loop5: detected capacity change from 0 to 512 [ 251.719290][T12102] EXT4-fs: Ignoring removed oldalloc option [ 251.737885][T12102] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2863: Parent and EA inode have the same ino 15 [ 251.751473][T12102] EXT4-fs (loop5): Remounting filesystem read-only [ 251.758037][T12102] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 251.769362][T12102] EXT4-fs (loop5): 1 orphan inode deleted [ 251.869166][T12115] loop5: detected capacity change from 0 to 512 [ 251.886532][T12115] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.900209][T12115] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2868: invalid block [ 251.924992][T12126] vcan0: entered allmulticast mode [ 251.934977][T12115] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2868: invalid indirect mapped block 4294967295 (level 1) [ 251.951341][T12126] vcan0: left allmulticast mode [ 251.959909][T12115] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2868: invalid indirect mapped block 4294967295 (level 1) [ 251.982659][T12115] EXT4-fs (loop5): 2 truncates cleaned up [ 252.028024][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'. [ 252.048219][T12142] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.2868: path /560/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 252.420216][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2904'. [ 252.429527][T12194] pim6reg: entered allmulticast mode [ 252.435588][T12194] pim6reg: left allmulticast mode [ 252.455511][T12196] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2906'. [ 252.611150][T12224] netlink: 'syz.1.2919': attribute type 21 has an invalid length. [ 252.702436][T12234] lo speed is unknown, defaulting to 1000 [ 252.776306][T12237] futex_wake_op: syz.4.2925 tries to shift op by -1; fix this program [ 252.936312][T12251] lo speed is unknown, defaulting to 1000 [ 252.955679][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 252.955697][ T29] audit: type=1400 audit(252.978:10061): avc: denied { create } for pid=12250 comm="syz.4.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.981847][ T29] audit: type=1400 audit(253.008:10062): avc: denied { getopt } for pid=12250 comm="syz.4.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.033004][ T29] audit: type=1400 audit(253.058:10063): avc: denied { read write } for pid=12255 comm="syz.5.2934" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.056230][ T29] audit: type=1400 audit(253.058:10064): avc: denied { open } for pid=12255 comm="syz.5.2934" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.086300][ T29] audit: type=1326 audit(253.108:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 253.109502][ T29] audit: type=1326 audit(253.108:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 253.144299][ T29] audit: type=1326 audit(253.168:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 253.167326][ T29] audit: type=1326 audit(253.168:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 253.190436][ T29] audit: type=1326 audit(253.168:10069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 253.213582][ T29] audit: type=1326 audit(253.168:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf5cce969 code=0x7ffc0000 [ 253.262652][T12271] loop2: detected capacity change from 0 to 128 [ 253.266917][T12269] macsec1: entered promiscuous mode [ 253.274275][T12269] gretap0: entered promiscuous mode [ 253.283823][T12269] gretap0: left promiscuous mode [ 253.323714][T12273] vhci_hcd: invalid port number 96 [ 253.329018][T12273] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 253.400192][T12287] loop5: detected capacity change from 0 to 512 [ 253.413097][T12287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.426196][T12287] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2949: invalid block [ 253.450189][T12287] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2949: invalid indirect mapped block 4294967295 (level 1) [ 253.507423][T12287] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2949: invalid indirect mapped block 4294967295 (level 1) [ 253.551339][T12287] EXT4-fs (loop5): 2 truncates cleaned up [ 253.868630][T12347] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 253.955039][T12363] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 253.964527][T12364] loop2: detected capacity change from 0 to 512 [ 253.978311][T12364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.003137][T12364] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2983: invalid block [ 254.028683][T12364] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2983: invalid indirect mapped block 4294967295 (level 1) [ 254.058955][T12364] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2983: invalid indirect mapped block 4294967295 (level 1) [ 254.085715][T12364] EXT4-fs (loop2): 2 truncates cleaned up [ 254.115547][T12364] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.2983: path /529/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 254.259050][T12390] loop5: detected capacity change from 0 to 1024 [ 254.266204][T12390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.286238][T12390] EXT4-fs mount: 41 callbacks suppressed [ 254.286251][T12390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.374365][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.442768][T12415] loop5: detected capacity change from 0 to 512 [ 254.471926][T12415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.488117][T12415] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3004: invalid block [ 254.501408][T12415] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3004: invalid indirect mapped block 4294967295 (level 1) [ 254.517218][T12415] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3004: invalid indirect mapped block 4294967295 (level 1) [ 254.532209][T12415] EXT4-fs (loop5): 2 truncates cleaned up [ 254.538874][T12415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.554285][T12415] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.5.3004: path /571/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 254.623517][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.665276][T12432] __nla_validate_parse: 2 callbacks suppressed [ 254.665294][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3010'. [ 254.930185][T12462] vlan0: entered allmulticast mode [ 254.939243][T12458] lo speed is unknown, defaulting to 1000 [ 255.315783][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3034'. [ 255.663933][T12515] loop2: detected capacity change from 0 to 256 [ 255.750423][T12526] loop5: detected capacity change from 0 to 128 [ 255.774043][T12526] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.915463][ T3607] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.141908][T12571] loop2: detected capacity change from 0 to 1024 [ 256.186971][T12571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.221238][T12571] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 256.291901][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.337449][T12585] binfmt_misc: register: failed to install interpreter file ./file0 [ 256.433940][T12600] loop5: detected capacity change from 0 to 512 [ 256.446285][T12600] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 256.458882][T12600] EXT4-fs (loop5): 1 truncate cleaned up [ 256.466426][T12600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.496022][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.600551][T12632] loop5: detected capacity change from 0 to 512 [ 256.607677][T12632] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 256.628168][T12632] EXT4-fs (loop5): 1 truncate cleaned up [ 256.634209][T12632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.661468][T12640] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3103'. [ 256.671649][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.743284][T12652] netlink: 'syz.2.3109': attribute type 3 has an invalid length. [ 256.767909][T12654] loop5: detected capacity change from 0 to 2048 [ 256.778480][T12654] EXT4-fs (loop5): failed to initialize system zone (-117) [ 256.795975][T12654] EXT4-fs (loop5): mount failed [ 256.806511][T12662] 9pnet_fd: Insufficient options for proto=fd [ 257.016398][T12691] SELinux: policydb version 0 does not match my version range 15-34 [ 257.036893][T12691] SELinux: failed to load policy [ 257.112771][T12701] syzkaller1: entered promiscuous mode [ 257.118338][T12701] syzkaller1: entered allmulticast mode [ 257.305096][T12726] loop5: detected capacity change from 0 to 1024 [ 257.312615][T12726] EXT4-fs: Ignoring removed orlov option [ 257.319222][T12726] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 257.348679][T12726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.363460][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3147'. [ 257.373882][T12726] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.3143: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 257.398547][T12726] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.3143: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 257.469192][ T3607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.690248][T12768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3164'. [ 257.763158][ T3305] ================================================================== [ 257.771275][ T3305] BUG: KCSAN: data-race in __mark_inode_dirty / move_expired_inodes [ 257.779269][ T3305] [ 257.781592][ T3305] read-write to 0xffff88810655f5c0 of 4 bytes by task 62 on cpu 0: [ 257.789481][ T3305] move_expired_inodes+0x17a/0x400 [ 257.794604][ T3305] queue_io+0xd9/0x2c0 [ 257.798683][ T3305] wb_writeback+0x226/0x5c0 [ 257.803194][ T3305] wb_workfn+0x4c9/0x910 [ 257.807449][ T3305] process_scheduled_works+0x4ce/0x9d0 [ 257.812934][ T3305] worker_thread+0x582/0x770 [ 257.817538][ T3305] kthread+0x486/0x510 [ 257.821622][ T3305] ret_from_fork+0xda/0x150 [ 257.826140][ T3305] ret_from_fork_asm+0x1a/0x30 [ 257.830927][ T3305] [ 257.833247][ T3305] read to 0xffff88810655f5c0 of 4 bytes by task 3305 on cpu 1: [ 257.840785][ T3305] __mark_inode_dirty+0x18e/0x760 [ 257.845811][ T3305] mark_buffer_dirty+0x133/0x210 [ 257.850759][ T3305] block_page_mkwrite+0x287/0x3d0 [ 257.855783][ T3305] ext4_page_mkwrite+0x76b/0xba0 [ 257.860730][ T3305] do_wp_page+0xe48/0x23d0 [ 257.865147][ T3305] handle_mm_fault+0x77d/0x2c00 [ 257.869996][ T3305] do_user_addr_fault+0x636/0x1090 [ 257.875122][ T3305] exc_page_fault+0x62/0xa0 [ 257.879628][ T3305] asm_exc_page_fault+0x26/0x30 [ 257.884481][ T3305] [ 257.886804][ T3305] value changed: 0x00000028 -> 0x0001002a [ 257.892518][ T3305] [ 257.894836][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 257.900994][ T3305] CPU: 1 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 257.913235][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.923299][ T3305] ================================================================== [ 257.993396][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 257.993413][ T29] audit: type=1400 audit(258.018:10523): avc: denied { read write } for pid=12783 comm="syz.1.3172" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 257.995303][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 257.999764][ T29] audit: type=1400 audit(258.018:10524): avc: denied { open } for pid=12783 comm="syz.1.3172" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 258.022722][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.061732][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.069949][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.078126][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.086230][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.094413][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.102526][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.110657][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.118817][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.126968][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.135051][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.143161][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.151248][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.159395][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.167627][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.175755][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.183869][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.192053][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.200143][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.208227][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.216377][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.224542][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.232636][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.240788][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.248893][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.257010][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.265082][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.273164][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 258.281615][ T8608] hid-generic FFFF:FFFFFFFC:20000001.0004: hidraw0: HID va0.69 Device [syz0] on syz1