last executing test programs: 3.269821165s ago: executing program 3 (id=1685): r0 = epoll_create(0x5) pread64(r0, 0x0, 0x0, 0xfffffffffffffff9) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173748e7962c8626b21e72e464cf490f8729b8d589ca5c583662d1ed80bc5c84231b7eebb8c7b4968196142f28ebc8dd09838eb98deac9b7d28fd66467125eaadfb466936e7a6bc0f5b328d9fd3ed0853c9915c0aa07e83e48551e81cb8050c124544518f8c0ede3ff0778f93691ab769b2f5467b5c4d3d3f1f5c5e5c39a207db0a613416fcec3845466cb0"], 0x30}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x100001, 0x4003, 0x406, 0xcb, 0x4}, 0x1c) recvfrom$inet_nvme(r3, &(0x7f0000000180)=""/8, 0x8, 0x40010010, 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0xfffffff7, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) io_pgetevents(r6, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) io_destroy(r6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6erspan0\x00', &(0x7f0000000080)=@ethtool_ts_info}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0x1, 0x260, &(0x7f0000000980)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = msgget$private(0x0, 0x0) msgrcv(r8, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2.377444568s ago: executing program 3 (id=1704): shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r0 = syz_open_dev$sg(0x0, 0xe6, 0x4a602) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents(r2, &(0x7f0000000080)=""/172, 0xac) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) write$char_usb(r4, &(0x7f00000008c0)='-0', 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x101c0ca, &(0x7f00000001c0)=ANY=[], 0x16, 0x2cb, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x8001, 0x8, 0x8}, 0x8) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) 2.343756431s ago: executing program 3 (id=1707): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="47dec047ead5a90f1147c96a689f09026283e50b4d7224b99c0a4d5ca5ac42a0302cb0e3b5c1b5049577dde9f92e8291f27fcc770d28ebdaebef769246d6eeece8dbc644d1246f4e8c405e421e311f900e846960b17454512d46b660f649699be5f50f2c93945be120273624d090eb00"/122], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 1.918308295s ago: executing program 4 (id=1709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.86179694s ago: executing program 4 (id=1710): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 1.86043564s ago: executing program 4 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.760780258s ago: executing program 4 (id=1713): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@decl_tag={0x400e, 0x0, 0x0, 0x11, 0x2, 0xfffffff7}, @volatile={0x4000015, 0x0, 0x0, 0x9, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x8000004}]}}, 0x0, 0x42}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000010000840000000000"], 0x0, 0x41}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unlink(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.547974815s ago: executing program 2 (id=1720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.522637377s ago: executing program 1 (id=1721): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_ext_remove_space\x00', r2, 0x0, 0x6}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r3, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018002000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x2, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r5}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x8}, 0x512b, 0x5, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x1003}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r6, &(0x7f0000001a40), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffff001, '\x00', 0x0, r4, 0x3, 0x3, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.456578842s ago: executing program 3 (id=1722): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r3 = dup(r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.406947636s ago: executing program 2 (id=1723): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 1.399043277s ago: executing program 2 (id=1724): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="268cd227088129662416de2d060bd027e02060cb1b7d60e9ac7f4dfb52a87add8c6f9cc439c3aa0c8b543415a57c9f8b84d768c2bf599f050bfc678d8a1d51e789bad70ae7780e0f4aa634994cd1691ef5670a7a496a2d389f4d22c880d58d9708d0b61914eb753ac23a456531b55025fd1e83d5154644950b2c51b2da483fee855b94ba63eec4cc1809b130be48c1859621e6faa429e242557845193e9025c28671b546a45957bed4febc7a1fa0403ce9c206f1fdf2795ca60615d3573e9471ebeda6f86ba6b3ff204c11e898822e3213e174d1897e43b0229bc6485c9cab9a18eca923e76396434e808f9da87b0610", 0xf0}, {&(0x7f00000004c0)="377bba18f4fc92c8bb915bb095a01af28633226c2ef9f86cc3a262c1670cf1368d514c22567ea79f9df61d3d1612b122cd3390ce59f8599d6a370b3f97c349ccacdba2b71bf935e3f7ca1ea6eb0d5cf9b63f10923bc93b761b112b5a147ff97fe2e9cc1c7bbf43f7cff51736c0b27d4428f2a316349ca2de1bcf04e4800565b5f2523172a6ca010922165534bf8d94de226c9420e0606c3bef7034066f55e18c7e721ecdd9c18a6582632238bfd08916a92990a1b2ce3ab0220ef66dcdf8ddd65905f1a13f907ff9386e0370ac6b060fbd6607890b43", 0xd6}, {&(0x7f0000000380)="b89df249158e0e97807e0e65e51d8428c0d149cdf388fd00906b674edfac539e815a67dbb4fb75e9f67ed93010ba27b3a76deb91eae4e4f34f10f5633395c9de3c61f4d23430f5a93a8d08fd4e2007ebb77236d25781d640d3e289c92d8176a6c035b87eec4c68664ed13c2885a36ce4c92f3d2920fb56647756b6e5bd1072915b2be0e97133b6bd72c4e1e763edcb9bcb001b81a151208863133241919e70fedac63e17e0124860a5528cc3b4", 0xad}, {&(0x7f0000000c80)="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", 0x1000}], 0x4, 0xd, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x1}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$qrtr(r6, &(0x7f00000001c0)={0x2a, 0xffffffff, 0x1}, 0xc) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000005440)=""/136, &(0x7f0000005500)=0x88) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r0, 0x5408, 0x0) fchdir(r2) 1.204835833s ago: executing program 0 (id=1726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1208000, 0x0, 0xff4c, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.204239972s ago: executing program 0 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x10, 0x7, 0x4, 0x0, 0x24000000000, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xae6, 0x9}, 0x1000, 0xd6, 0x42036f46, 0x4, 0x1fd, 0x8, 0x7, 0x0, 0x2e0, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) perf_event_open(0x0, r1, 0x5, r2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000001901000000d442e630d4190475caf43c7ed9d1af5c586a52d1ffefc24ef5c60b52344aecb3ed15492196ca7938280f1ad3291c91", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.193208183s ago: executing program 2 (id=1728): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.132757908s ago: executing program 2 (id=1729): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) unshare(0x22020400) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) 1.020974838s ago: executing program 0 (id=1730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 902.383827ms ago: executing program 2 (id=1731): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5f9b, &(0x7f0000002080)={0x0, 0xf7cf, 0x10, 0x2, 0x2bf}, &(0x7f0000000440), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], 0x1) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e1885898ecbf498ff395c39576009559a276bc01a22a0baf76d47c5091036c5b4166fad7bd8325c03692da235d8ff6155dca6039658bef9e53f5a87f2a15cfde6924f2a732b6d2e8c44856d1698f29f35388fe3f5545af1cc6cdde31631c8388790e75ed81e2983f2bf416ec584d59"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$sock_bt_hci(r7, 0x800448d2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r11 = syz_usbip_server_init(0x3) write$usbip_server(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002"], 0x30) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 884.835338ms ago: executing program 3 (id=1732): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="47dec047ead5a90f1147c96a689f09026283e50b4d7224b99c0a4d5ca5ac42a0302cb0e3b5c1b5049577dde9f92e8291f27fcc770d28ebdaebef769246d6eeece8dbc644d1246f4e8c405e421e311f900e846960b17454512d46b660f649699be5f50f2c93945be120273624d090eb00"/122], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 881.416499ms ago: executing program 1 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 801.649685ms ago: executing program 1 (id=1734): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 692.057634ms ago: executing program 0 (id=1735): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x1113c0, 0x1, 0x2, 0x0, 0x2, 0x7}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x15, 0x0, 0x0, 0x0, 0x8, 0xdb, &(0x7f00000006c0)=""/219, 0x0, 0x22, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff0d}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x12) 691.725024ms ago: executing program 1 (id=1736): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x52}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, 0x0, 0x0}, 0x20) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8901, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000003c0)={0x1, 0x2, [@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) 614.98578ms ago: executing program 1 (id=1737): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 599.413631ms ago: executing program 0 (id=1738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1208000, 0x0, 0xff4c, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 583.864373ms ago: executing program 4 (id=1739): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000006c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x1, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) read$msr(r4, &(0x7f00000001c0)=""/19, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) capget(&(0x7f0000000180)={0x20080522}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 570.850364ms ago: executing program 0 (id=1740): r0 = epoll_create(0x5) pread64(r0, 0x0, 0x0, 0xfffffffffffffff9) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x30}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x100001, 0x4003, 0x406, 0xcb, 0x4}, 0x1c) recvfrom$inet_nvme(r3, &(0x7f0000000180)=""/8, 0x8, 0x40010010, 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) io_pgetevents(r5, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) io_destroy(r5) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6erspan0\x00', &(0x7f0000000080)=@ethtool_ts_info}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0x1, 0x260, &(0x7f0000000980)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = msgget$private(0x0, 0x0) msgrcv(r7, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r7, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 486.085971ms ago: executing program 1 (id=1741): r0 = epoll_create(0x5) pread64(r0, 0x0, 0x0, 0xfffffffffffffff9) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173748e7962c8626b21e72e464cf490f8729b8d589ca5c583662d1ed80bc5c84231b7eebb8c7b4968196142f28ebc8dd09838eb98deac9b7d28fd66467125eaadfb466936e7a6bc0f5b328d9fd3ed0853c9915c0aa07e83e48551e81cb8050c124544518f8c0ede3ff0778f93691ab769b2f5467b5c4d3d3f1f5c5e5c39a207db0a613416fcec3845466cb0"], 0x30}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x100001, 0x4003, 0x406, 0xcb, 0x4}, 0x1c) recvfrom$inet_nvme(r3, &(0x7f0000000180)=""/8, 0x8, 0x40010010, 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0xfffffff7, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) io_pgetevents(r6, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) io_destroy(r6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6erspan0\x00', &(0x7f0000000080)=@ethtool_ts_info}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0x1, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = msgget$private(0x0, 0x0) msgrcv(r8, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 346.785762ms ago: executing program 4 (id=1742): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0xc8) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) syz_io_uring_setup(0x161b, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x1}, &(0x7f00000000c0), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x9, &(0x7f00000003c0)={0x410, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) 0s ago: executing program 3 (id=1743): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r3 = dup(r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) kernel console output (not intermixed with test programs): p4 [ 99.295217][ T5969] loop1: p4 size 8388608 extends beyond EOD, truncated [ 99.370121][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.728'. [ 99.370189][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 99.389916][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 99.568687][ T5991] loop1: detected capacity change from 0 to 512 [ 99.641797][ T5997] loop0: detected capacity change from 0 to 2048 [ 99.680434][ T6002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.739'. [ 99.700365][ T5997] loop0: p1 < > p4 [ 99.706248][ T5997] loop0: p4 size 8388608 extends beyond EOD, truncated [ 99.747710][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.184137][ T6027] loop2: detected capacity change from 0 to 512 [ 100.227896][ T29] kauditd_printk_skb: 870 callbacks suppressed [ 100.227913][ T29] audit: type=1326 audit(1754265078.111:11901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.316840][ T6037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6037 comm=syz.2.751 [ 100.318211][ T29] audit: type=1326 audit(1754265078.151:11902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.352814][ T29] audit: type=1326 audit(1754265078.151:11903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.376451][ T29] audit: type=1326 audit(1754265078.151:11904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.400174][ T29] audit: type=1326 audit(1754265078.151:11905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.423684][ T29] audit: type=1326 audit(1754265078.151:11906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.447215][ T29] audit: type=1326 audit(1754265078.151:11907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.470767][ T29] audit: type=1326 audit(1754265078.151:11908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.494218][ T29] audit: type=1326 audit(1754265078.151:11909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.517976][ T29] audit: type=1326 audit(1754265078.151:11910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 100.794495][ T6073] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 100.801153][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.808850][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 100.830159][ T6074] vhci_hcd: unknown pdu 2 [ 100.837876][ T37] vhci_hcd: stop threads [ 100.842258][ T37] vhci_hcd: release socket [ 100.846780][ T37] vhci_hcd: disconnect device [ 100.958790][ T6091] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 100.965349][ T6091] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.973098][ T6091] vhci_hcd vhci_hcd.0: Device attached [ 100.981081][ T6093] vhci_hcd: unknown pdu 2 [ 100.995013][ T3455] vhci_hcd: stop threads [ 100.999384][ T3455] vhci_hcd: release socket [ 101.004016][ T3455] vhci_hcd: disconnect device [ 101.162424][ T6099] loop0: detected capacity change from 0 to 128 [ 101.189764][ T6099] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.220000][ T6099] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.255276][ T6115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6115 comm=syz.1.782 [ 101.723031][ T6137] loop1: detected capacity change from 0 to 512 [ 101.840531][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.938028][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.797'. [ 102.024335][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.043811][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.208083][ T6180] loop2: detected capacity change from 0 to 128 [ 102.231700][ T6180] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.250721][ T6180] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.311938][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.811'. [ 102.614425][ T6209] loop1: detected capacity change from 0 to 128 [ 102.626596][ T6209] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.639467][ T6209] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.707685][ T6220] loop0: detected capacity change from 0 to 128 [ 102.717479][ T6220] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 102.725459][ T6220] FAT-fs (loop0): Filesystem has been set read-only [ 102.732740][ T6220] bio_check_eod: 46607 callbacks suppressed [ 102.732756][ T6220] syz.0.821: attempt to access beyond end of device [ 102.732756][ T6220] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 102.735481][ T6221] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 102.738796][ T6220] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 102.752344][ T6221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.759002][ T6220] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 102.766957][ T6221] vhci_hcd vhci_hcd.0: Device attached [ 102.776652][ T6220] syz.0.821: attempt to access beyond end of device [ 102.776652][ T6220] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.787319][ T6222] vhci_hcd: unknown pdu 2 [ 102.788770][ T6224] syz.0.821: attempt to access beyond end of device [ 102.788770][ T6224] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 102.802779][ T167] vhci_hcd: stop threads [ 102.805531][ T6224] buffer_io_error: 46422 callbacks suppressed [ 102.805547][ T6224] Buffer I/O error on dev loop0, logical block 2065, async page read [ 102.818701][ T167] vhci_hcd: release socket [ 102.818714][ T167] vhci_hcd: disconnect device [ 102.847368][ T6224] syz.0.821: attempt to access beyond end of device [ 102.847368][ T6224] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 102.860665][ T6224] Buffer I/O error on dev loop0, logical block 2066, async page read [ 102.868871][ T6224] syz.0.821: attempt to access beyond end of device [ 102.868871][ T6224] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 102.882122][ T6224] Buffer I/O error on dev loop0, logical block 2067, async page read [ 102.890244][ T6224] syz.0.821: attempt to access beyond end of device [ 102.890244][ T6224] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 102.903425][ T6224] Buffer I/O error on dev loop0, logical block 2068, async page read [ 102.911750][ T6224] syz.0.821: attempt to access beyond end of device [ 102.911750][ T6224] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 102.924941][ T6224] Buffer I/O error on dev loop0, logical block 2069, async page read [ 102.933072][ T6224] syz.0.821: attempt to access beyond end of device [ 102.933072][ T6224] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 102.946326][ T6224] Buffer I/O error on dev loop0, logical block 2070, async page read [ 102.954604][ T6224] syz.0.821: attempt to access beyond end of device [ 102.954604][ T6224] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 102.967801][ T6224] Buffer I/O error on dev loop0, logical block 2071, async page read [ 102.975960][ T6224] syz.0.821: attempt to access beyond end of device [ 102.975960][ T6224] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 102.989226][ T6224] Buffer I/O error on dev loop0, logical block 2072, async page read [ 102.997556][ T6220] Buffer I/O error on dev loop0, logical block 2065, async page read [ 103.006413][ T6220] Buffer I/O error on dev loop0, logical block 2066, async page read [ 103.016950][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.096896][ T6228] loop2: detected capacity change from 0 to 512 [ 103.103619][ T6228] EXT4-fs: Ignoring removed oldalloc option [ 103.121363][ T6228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.134089][ T6228] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.141417][ T6228] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.822: Failed to acquire dquot type 1 [ 103.154119][ T6228] EXT4-fs (loop2): 1 truncate cleaned up [ 103.160805][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.332063][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.794845][ T6272] loop4: detected capacity change from 0 to 2048 [ 103.806250][ T6267] loop0: detected capacity change from 0 to 128 [ 103.817074][ T6267] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.832933][ T6267] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.843926][ T3292] loop4: p1 < > p4 [ 103.848629][ T3292] loop4: p4 size 8388608 extends beyond EOD, truncated [ 103.858211][ T6272] loop4: p1 < > p4 [ 103.862799][ T6272] loop4: p4 size 8388608 extends beyond EOD, truncated [ 103.880253][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.928244][ T6278] pim6reg1: entered promiscuous mode [ 103.933769][ T6278] pim6reg1: entered allmulticast mode [ 103.941430][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 103.943592][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 104.028213][ T6286] loop3: detected capacity change from 0 to 128 [ 104.037949][ T6286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 104.045879][ T6286] FAT-fs (loop3): Filesystem has been set read-only [ 104.055661][ T6286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 104.063600][ T6286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 104.245898][ T6301] bridge0: port 3(gretap0) entered blocking state [ 104.253078][ T6301] bridge0: port 3(gretap0) entered disabled state [ 104.262299][ T6301] gretap0: entered allmulticast mode [ 104.289390][ T6301] gretap0: entered promiscuous mode [ 104.366323][ T6309] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6309 comm=syz.2.854 [ 104.533438][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.625171][ T6325] loop2: detected capacity change from 0 to 128 [ 104.700496][ T6325] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.714038][ T6325] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.835040][ T6343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.865'. [ 104.906520][ T6349] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6349 comm=syz.0.868 [ 105.071769][ T6361] loop3: detected capacity change from 0 to 128 [ 105.082464][ T6361] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.104830][ T6361] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.137941][ T6375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.877'. [ 105.327703][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.344079][ T6390] sit0: entered allmulticast mode [ 105.404993][ T6390] sit0: entered promiscuous mode [ 105.494231][ T6401] loop0: detected capacity change from 0 to 512 [ 105.589400][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'. [ 105.626850][ T6406] loop1: detected capacity change from 0 to 2048 [ 105.659457][ T6410] loop0: detected capacity change from 0 to 128 [ 105.912066][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.921819][ T6410] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.939938][ T6406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 105.964618][ T6410] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.017725][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.037061][ T6419] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.890: inline data xattr refers to an external xattr inode [ 106.248784][ T6425] loop0: detected capacity change from 0 to 128 [ 106.258484][ T6425] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.280745][ T6435] loop3: detected capacity change from 0 to 512 [ 106.299423][ T6425] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.450064][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 106.474499][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.902'. [ 106.886903][ T29] kauditd_printk_skb: 985 callbacks suppressed [ 106.886921][ T29] audit: type=1326 audit(1754265084.771:12894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 106.922708][ T29] audit: type=1326 audit(1754265084.771:12895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 106.946171][ T29] audit: type=1326 audit(1754265084.771:12896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 106.969980][ T29] audit: type=1326 audit(1754265084.771:12897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 106.993669][ T29] audit: type=1326 audit(1754265084.771:12898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 107.017625][ T29] audit: type=1326 audit(1754265084.771:12899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 107.041159][ T29] audit: type=1326 audit(1754265084.771:12900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 107.064954][ T29] audit: type=1326 audit(1754265084.771:12901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 107.088513][ T29] audit: type=1326 audit(1754265084.771:12902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 107.112341][ T29] audit: type=1326 audit(1754265084.771:12903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65e6c35b27 code=0x7ffc0000 [ 107.164044][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.176018][ T6481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.915'. [ 108.419693][ T6529] loop3: detected capacity change from 0 to 128 [ 108.446644][ T6529] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.471896][ T6538] loop4: detected capacity change from 0 to 2048 [ 108.476749][ T6540] netlink: 'syz.1.937': attribute type 13 has an invalid length. [ 108.494734][ T6529] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.523889][ T3292] loop4: p1 < > p4 [ 108.544858][ T3292] loop4: p4 size 8388608 extends beyond EOD, truncated [ 108.554699][ T6540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.572964][ T6538] loop4: p1 < > p4 [ 108.577799][ T6538] loop4: p4 size 8388608 extends beyond EOD, truncated [ 108.623533][ T6542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.627152][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.631606][ T6542] team0: Port device bond2 added [ 108.658402][ T6542] loop2: detected capacity change from 0 to 512 [ 108.670017][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.688037][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.698919][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.777486][ T6554] loop2: detected capacity change from 0 to 1024 [ 108.795174][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.811475][ T6554] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.890245][ T6558] loop0: detected capacity change from 0 to 512 [ 109.770045][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.772016][ T6565] loop1: detected capacity change from 0 to 2048 [ 109.788262][ T6563] pim6reg1: entered promiscuous mode [ 109.793637][ T6563] pim6reg1: entered allmulticast mode [ 109.804347][ T6565] loop1: p1 < > p3 p4 < > [ 109.809886][ T6565] loop1: p3 start 4284289 is beyond EOD, truncated [ 109.828801][ C0] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 109.884707][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.937860][ T6574] loop3: detected capacity change from 0 to 2048 [ 109.992013][ T3292] loop3: p1 < > p4 [ 109.998843][ T3292] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.143044][ T6565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6565 comm=syz.1.946 [ 110.215022][ T6574] loop3: p1 < > p4 [ 110.215616][ T6574] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.265008][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.304832][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.598767][ T6615] loop4: detected capacity change from 0 to 2048 [ 110.665496][ T3292] loop4: p1 < > p3 p4 < > [ 110.681395][ T3292] loop4: p3 start 4284289 is beyond EOD, truncated [ 110.711129][ T6615] loop4: p1 < > p3 p4 < > [ 110.728212][ T6615] loop4: p3 start 4284289 is beyond EOD, truncated [ 110.782240][ T6623] loop0: detected capacity change from 0 to 2048 [ 110.818059][ C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 110.833619][ T6627] syzkaller0: entered promiscuous mode [ 110.839117][ T6627] syzkaller0: entered allmulticast mode [ 110.888480][ T6623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 111.002075][ T6638] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.967: inline data xattr refers to an external xattr inode [ 111.056568][ T6615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6615 comm=syz.4.965 [ 111.155549][ T6646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.976'. [ 111.170866][ T6648] loop4: detected capacity change from 0 to 128 [ 111.191881][ T6648] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.304402][ T6648] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.362790][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.551322][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 111.831088][ T6675] loop0: detected capacity change from 0 to 2048 [ 111.901425][ T6675] loop0: p1 < > p3 p4 < > [ 111.910276][ T6675] loop0: p3 start 4284289 is beyond EOD, truncated [ 111.937546][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 111.971020][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.987'. [ 112.184450][ T6694] loop3: detected capacity change from 0 to 1024 [ 112.210002][ T6694] /dev/loop3: Can't open blockdev [ 112.323702][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 112.323783][ T29] audit: type=1326 audit(1754265090.211:13243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.358774][ T6675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6675 comm=syz.0.984 [ 112.384599][ T29] audit: type=1326 audit(1754265090.241:13244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.408297][ T29] audit: type=1326 audit(1754265090.251:13245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.431745][ T29] audit: type=1326 audit(1754265090.251:13246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.455482][ T29] audit: type=1326 audit(1754265090.251:13247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.459872][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 112.479042][ T29] audit: type=1326 audit(1754265090.251:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.512514][ T29] audit: type=1326 audit(1754265090.251:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.536163][ T29] audit: type=1326 audit(1754265090.251:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.559691][ T29] audit: type=1326 audit(1754265090.251:13251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.583473][ T29] audit: type=1326 audit(1754265090.251:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 112.886451][ T6730] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 112.894423][ T6730] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1003'. [ 112.937445][ T6733] netlink: 'syz.0.1003': attribute type 13 has an invalid length. [ 112.968123][ T6733] sit0: left promiscuous mode [ 112.973022][ T6733] sit0: left allmulticast mode [ 113.014209][ T6733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.032166][ T6730] wg1: entered promiscuous mode [ 113.037171][ T6730] wg1: entered allmulticast mode [ 113.206000][ T6748] loop0: detected capacity change from 0 to 2048 [ 113.262308][ T6748] loop0: p1 < > p4 [ 113.266875][ T6748] loop0: p4 size 8388608 extends beyond EOD, truncated [ 113.423073][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 113.436130][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 113.562489][ T6762] netlink: 'syz.0.1015': attribute type 10 has an invalid length. [ 113.570413][ T6762] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1015'. [ 113.610790][ T6762] netlink: 'syz.0.1015': attribute type 13 has an invalid length. [ 113.660985][ T6762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.696865][ T6768] loop4: detected capacity change from 0 to 1024 [ 113.714753][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 113.748722][ T6770] loop1: detected capacity change from 0 to 256 [ 113.781337][ T6768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.839072][ T6780] loop0: detected capacity change from 0 to 128 [ 113.862964][ T6768] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.888575][ T6780] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 113.896630][ T6780] FAT-fs (loop0): Filesystem has been set read-only [ 113.932796][ T6780] bio_check_eod: 87648 callbacks suppressed [ 113.932813][ T6780] syz.0.1022: attempt to access beyond end of device [ 113.932813][ T6780] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 113.963169][ T6780] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 113.971090][ T6780] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 114.010280][ T6780] syz.0.1022: attempt to access beyond end of device [ 114.010280][ T6780] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.032937][ T6780] syz.0.1022: attempt to access beyond end of device [ 114.032937][ T6780] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.069922][ T6787] loop2: detected capacity change from 0 to 128 [ 114.079640][ T6780] syz.0.1022: attempt to access beyond end of device [ 114.079640][ T6780] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.104616][ T6787] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.120498][ T6790] syz.0.1022: attempt to access beyond end of device [ 114.120498][ T6790] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 114.133916][ T6790] buffer_io_error: 87102 callbacks suppressed [ 114.133935][ T6790] Buffer I/O error on dev loop0, logical block 2065, async page read [ 114.216435][ T6790] syz.0.1022: attempt to access beyond end of device [ 114.216435][ T6790] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 114.230168][ T6790] Buffer I/O error on dev loop0, logical block 2066, async page read [ 114.250833][ T6787] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.378157][ T6790] syz.0.1022: attempt to access beyond end of device [ 114.378157][ T6790] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 114.391614][ T6790] Buffer I/O error on dev loop0, logical block 2067, async page read [ 114.403754][ T6797] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6797 comm=syz.1.1027 [ 114.491959][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.504563][ T6790] syz.0.1022: attempt to access beyond end of device [ 114.504563][ T6790] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 114.517866][ T6790] Buffer I/O error on dev loop0, logical block 2068, async page read [ 114.526895][ T6790] syz.0.1022: attempt to access beyond end of device [ 114.526895][ T6790] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 114.540342][ T6790] Buffer I/O error on dev loop0, logical block 2069, async page read [ 114.548572][ T6790] syz.0.1022: attempt to access beyond end of device [ 114.548572][ T6790] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 114.561840][ T6790] Buffer I/O error on dev loop0, logical block 2070, async page read [ 114.576742][ T6790] Buffer I/O error on dev loop0, logical block 2071, async page read [ 114.591885][ T6790] Buffer I/O error on dev loop0, logical block 2072, async page read [ 114.592826][ T6800] pim6reg1: entered promiscuous mode [ 114.601578][ T6780] Buffer I/O error on dev loop0, logical block 2065, async page read [ 114.605454][ T6800] pim6reg1: entered allmulticast mode [ 114.624252][ T6780] Buffer I/O error on dev loop0, logical block 2066, async page read [ 114.698993][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.961507][ T6820] loop1: detected capacity change from 0 to 512 [ 115.002886][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1037'. [ 115.090403][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.120803][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.409091][ T6847] loop1: detected capacity change from 0 to 8192 [ 115.447544][ T6845] loop4: detected capacity change from 0 to 128 [ 115.458707][ T6849] loop0: detected capacity change from 0 to 512 [ 115.459321][ T6845] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.514365][ T6845] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.643229][ T6859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6859 comm=syz.0.1051 [ 115.759203][ T6870] netlink: 'syz.2.1056': attribute type 10 has an invalid length. [ 115.767131][ T6870] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1056'. [ 115.845442][ T6875] netlink: 'syz.2.1056': attribute type 13 has an invalid length. [ 115.874128][ T6875] sit0: left promiscuous mode [ 115.878919][ T6875] sit0: left allmulticast mode [ 115.931030][ T6875] bridge0: port 3(gretap0) entered blocking state [ 115.937637][ T6875] bridge0: port 3(gretap0) entered forwarding state [ 115.944517][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.951657][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.959052][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.966161][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.979085][ T6875] bridge0: left allmulticast mode [ 115.998881][ T6875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.024214][ T6870] wg1: entered promiscuous mode [ 116.029258][ T6870] wg1: entered allmulticast mode [ 116.065467][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.073597][ T6877] team0: Port device bond1 added [ 116.157398][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.270760][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 116.282822][ T6892] loop4: detected capacity change from 0 to 256 [ 116.317957][ T6896] loop2: detected capacity change from 0 to 2048 [ 116.386337][ T6902] loop1: detected capacity change from 0 to 512 [ 116.404884][ T3292] loop2: p1 < > p4 [ 116.420399][ T3292] loop2: p4 size 8388608 extends beyond EOD, truncated [ 116.452867][ T6896] loop2: p1 < > p4 [ 116.457354][ T6896] loop2: p4 size 8388608 extends beyond EOD, truncated [ 116.509239][ T2990] loop2: p1 < > p4 [ 116.521948][ T2990] loop2: p4 size 8388608 extends beyond EOD, truncated [ 116.551460][ T6906] pim6reg1: entered promiscuous mode [ 116.556876][ T6906] pim6reg1: entered allmulticast mode [ 116.601113][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 116.602877][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 116.697697][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 116.701050][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 116.741685][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 116.752780][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 116.840266][ T6923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6923 comm=syz.0.1077 [ 116.874101][ T6927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.899820][ T6934] loop1: detected capacity change from 0 to 2048 [ 116.907760][ T6927] team0: Port device bond2 added [ 116.950330][ T3292] loop1: p1 < > p3 p4 < > [ 116.964530][ T6939] loop2: detected capacity change from 0 to 512 [ 116.973720][ T3292] loop1: p3 start 4284289 is beyond EOD, truncated [ 117.003499][ T6934] loop1: p1 < > p3 p4 < > [ 117.012086][ T6934] loop1: p3 start 4284289 is beyond EOD, truncated [ 117.024946][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 117.189512][ T6934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6934 comm=syz.1.1081 [ 117.248097][ T6956] loop2: detected capacity change from 0 to 512 [ 117.254974][ T6956] EXT4-fs: Ignoring removed oldalloc option [ 117.317692][ T6956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.343198][ T6956] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.350255][ T6956] __quota_error: 262 callbacks suppressed [ 117.350276][ T6956] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 117.365510][ T6956] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 117.374945][ T6956] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1086: Failed to acquire dquot type 1 [ 117.387603][ T6956] EXT4-fs (loop2): 1 truncate cleaned up [ 117.394203][ T6956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.560759][ T29] audit: type=1326 audit(1754265095.401:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 117.584438][ T29] audit: type=1326 audit(1754265095.411:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 117.608042][ T29] audit: type=1326 audit(1754265095.411:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 117.631565][ T29] audit: type=1326 audit(1754265095.411:13518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 117.655292][ T29] audit: type=1326 audit(1754265095.411:13519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c2245d4d0 code=0x7ffc0000 [ 117.679017][ T29] audit: type=1326 audit(1754265095.421:13520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c2245d4d0 code=0x7ffc0000 [ 117.702673][ T29] audit: type=1326 audit(1754265095.421:13521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 117.726365][ T29] audit: type=1326 audit(1754265095.421:13522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 118.041726][ T6961] pim6reg1: entered promiscuous mode [ 118.047099][ T6961] pim6reg1: entered allmulticast mode [ 118.198101][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 118.220736][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.270834][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 118.282047][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.765893][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.827471][ T6980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1099'. [ 118.937573][ T6988] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1103'. [ 118.969176][ T6991] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6991 comm=syz.2.1104 [ 118.995632][ T6988] loop1: detected capacity change from 0 to 2048 [ 119.050876][ T3292] loop1: p1 < > p3 p4 < > [ 119.056212][ T3292] loop1: p3 start 4284289 is beyond EOD, truncated [ 119.089437][ T6988] loop1: p1 < > p3 p4 < > [ 119.110935][ T6988] loop1: p3 start 4284289 is beyond EOD, truncated [ 119.131277][ C0] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 119.541681][ T6988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6988 comm=syz.1.1103 [ 119.565161][ T7007] sit0: left promiscuous mode [ 119.618571][ T7023] sit0: entered promiscuous mode [ 119.802566][ T7007] kfree: port 1(team0) entered blocking state [ 119.808724][ T7007] kfree: port 1(team0) entered disabled state [ 119.854573][ T7007] team0: entered allmulticast mode [ 119.859848][ T7007] team_slave_0: entered allmulticast mode [ 119.865610][ T7007] team_slave_1: entered allmulticast mode [ 119.871486][ T7007] bond1: entered allmulticast mode [ 119.876690][ T7007] bond2: entered allmulticast mode [ 119.919377][ T7007] team0: entered promiscuous mode [ 119.924522][ T7007] team_slave_0: entered promiscuous mode [ 119.930313][ T7007] team_slave_1: entered promiscuous mode [ 119.936037][ T7007] bond1: entered promiscuous mode [ 119.941224][ T7007] bond2: entered promiscuous mode [ 120.031250][ T7032] loop2: detected capacity change from 0 to 512 [ 120.120018][ T7036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1119'. [ 120.226979][ T7039] loop2: detected capacity change from 0 to 128 [ 120.287557][ T7039] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.303117][ T7039] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.536376][ T7044] loop1: detected capacity change from 0 to 2048 [ 120.583453][ T7044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 120.681438][ T7045] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1120: inline data xattr refers to an external xattr inode [ 120.918387][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.966031][ T7061] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1124'. [ 121.015673][ T7061] loop2: detected capacity change from 0 to 2048 [ 121.060980][ T3292] loop2: p1 < > p3 p4 < > [ 121.072024][ T3292] loop2: p3 start 4284289 is beyond EOD, truncated [ 121.091666][ T7061] loop2: p1 < > p3 p4 < > [ 121.098384][ T7061] loop2: p3 start 4284289 is beyond EOD, truncated [ 121.129221][ C0] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 121.156389][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 121.330035][ T7061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7061 comm=syz.2.1124 [ 121.384359][ T7075] sit0: entered allmulticast mode [ 121.396761][ T7075] sit0: entered promiscuous mode [ 122.037465][ T7090] loop3: detected capacity change from 0 to 512 [ 122.044699][ T7090] EXT4-fs: Ignoring removed oldalloc option [ 122.684272][ T7090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.731806][ T7090] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.739061][ T7090] __quota_error: 136 callbacks suppressed [ 122.739079][ T7090] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 122.754287][ T7090] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 122.763780][ T7090] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1134: Failed to acquire dquot type 1 [ 122.776307][ T7090] EXT4-fs (loop3): 1 truncate cleaned up [ 122.782916][ T7090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.387109][ T7107] loop1: detected capacity change from 0 to 2048 [ 123.484639][ T4581] loop1: p1 < > p3 p4 < > [ 123.520449][ T4581] loop1: p3 start 4284289 is beyond EOD, truncated [ 123.538720][ T7112] loop0: detected capacity change from 0 to 128 [ 123.577637][ T7112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 123.585704][ T7112] FAT-fs (loop0): Filesystem has been set read-only [ 123.642538][ T7112] bio_check_eod: 3418 callbacks suppressed [ 123.642559][ T7112] syz.0.1142: attempt to access beyond end of device [ 123.642559][ T7112] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 123.673456][ T29] audit: type=1326 audit(1754265101.561:13659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2299eb69 code=0x7ffc0000 [ 123.774873][ T29] audit: type=1326 audit(1754265101.591:13660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f2a2299eb69 code=0x7ffc0000 [ 123.798656][ T29] audit: type=1326 audit(1754265101.591:13661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2299eb69 code=0x7ffc0000 [ 123.822336][ T29] audit: type=1326 audit(1754265101.591:13662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f2a2299eb69 code=0x7ffc0000 [ 123.846072][ T29] audit: type=1326 audit(1754265101.591:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2299eb69 code=0x7ffc0000 [ 123.883230][ T7112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 123.891148][ T7112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 123.962906][ T7112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 124.004870][ T7112] syz.0.1142: attempt to access beyond end of device [ 124.004870][ T7112] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 124.054896][ T7117] syz.0.1142: attempt to access beyond end of device [ 124.054896][ T7117] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 124.068290][ T7117] buffer_io_error: 3414 callbacks suppressed [ 124.068308][ T7117] Buffer I/O error on dev loop0, logical block 2065, async page read [ 124.112074][ T7112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 124.112203][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.120069][ T7112] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 124.137077][ T7117] syz.0.1142: attempt to access beyond end of device [ 124.137077][ T7117] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 124.150381][ T7117] Buffer I/O error on dev loop0, logical block 2066, async page read [ 124.159357][ T7117] syz.0.1142: attempt to access beyond end of device [ 124.159357][ T7117] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 124.172836][ T7117] Buffer I/O error on dev loop0, logical block 2067, async page read [ 124.176437][ T7107] loop1: p1 < > p3 p4 < > [ 124.181556][ T7117] syz.0.1142: attempt to access beyond end of device [ 124.181556][ T7117] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 124.198756][ T7117] Buffer I/O error on dev loop0, logical block 2068, async page read [ 124.207065][ T7117] syz.0.1142: attempt to access beyond end of device [ 124.207065][ T7117] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 124.220404][ T7117] Buffer I/O error on dev loop0, logical block 2069, async page read [ 124.272622][ T7107] loop1: p3 start 4284289 is beyond EOD, truncated [ 124.329886][ T7117] syz.0.1142: attempt to access beyond end of device [ 124.329886][ T7117] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 124.343329][ T7117] Buffer I/O error on dev loop0, logical block 2070, async page read [ 124.442316][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 124.449174][ T7117] syz.0.1142: attempt to access beyond end of device [ 124.449174][ T7117] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 124.464568][ T7117] Buffer I/O error on dev loop0, logical block 2071, async page read [ 124.473529][ T7117] syz.0.1142: attempt to access beyond end of device [ 124.473529][ T7117] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 124.486877][ T7117] Buffer I/O error on dev loop0, logical block 2072, async page read [ 124.496044][ T7112] Buffer I/O error on dev loop0, logical block 2065, async page read [ 124.504307][ T7112] Buffer I/O error on dev loop0, logical block 2066, async page read [ 124.522452][ T7139] loop3: detected capacity change from 0 to 256 [ 124.608808][ T7145] loop1: detected capacity change from 0 to 512 [ 124.625901][ T7137] syzkaller0: entered promiscuous mode [ 124.631755][ T7137] syzkaller0: entered allmulticast mode [ 124.687042][ T7148] pim6reg1: entered promiscuous mode [ 124.692496][ T7148] pim6reg1: entered allmulticast mode [ 124.710917][ T7143] loop0: detected capacity change from 0 to 128 [ 124.720025][ T7143] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.733309][ T7143] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.791971][ T7159] loop1: detected capacity change from 0 to 512 [ 124.798856][ T7159] EXT4-fs: Ignoring removed oldalloc option [ 124.806512][ T7159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.818166][ T7159] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.825025][ T7159] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 124.834457][ T7159] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 124.843884][ T7159] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1156: Failed to acquire dquot type 1 [ 124.855990][ T7159] EXT4-fs (loop1): 1 truncate cleaned up [ 124.862842][ T7159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.108605][ T7164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7164 comm=syz.3.1158 [ 125.297692][ T29] audit: type=1107 audit(1754265103.081:13664): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 125.417536][ T7174] loop2: detected capacity change from 0 to 128 [ 125.482112][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.508264][ T7174] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.600279][ T7174] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.875835][ T7183] sit0: left promiscuous mode [ 125.887969][ T7194] loop0: detected capacity change from 0 to 512 [ 126.028094][ T7195] sit0: entered promiscuous mode [ 126.074215][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.472316][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.825495][ T7214] loop2: detected capacity change from 0 to 128 [ 126.996718][ T7222] bridge0: port 3(gretap0) entered blocking state [ 127.004707][ T7222] bridge0: port 3(gretap0) entered disabled state [ 127.016477][ T7222] gretap0: entered allmulticast mode [ 127.028994][ T7214] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.041436][ T7222] gretap0: entered promiscuous mode [ 127.049458][ T7222] bridge0: port 3(gretap0) entered blocking state [ 127.056510][ T7222] bridge0: port 3(gretap0) entered forwarding state [ 127.058533][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 127.075978][ T7214] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.108026][ T7227] loop1: detected capacity change from 0 to 256 [ 127.403774][ T7230] sit0: entered allmulticast mode [ 127.428283][ T7252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7252 comm=syz.4.1188 [ 127.458837][ T7248] sit0: entered promiscuous mode [ 127.472178][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.544866][ T7257] pim6reg1: entered promiscuous mode [ 127.550609][ T7257] pim6reg1: entered allmulticast mode [ 127.597425][ T7230] kfree: port 1(team0) entered blocking state [ 127.603847][ T7230] kfree: port 1(team0) entered disabled state [ 127.612070][ T7230] team0: entered allmulticast mode [ 127.617257][ T7230] team_slave_0: entered allmulticast mode [ 127.623050][ T7230] team_slave_1: entered allmulticast mode [ 127.628867][ T7230] bond1: entered allmulticast mode [ 127.649842][ T7230] team0: entered promiscuous mode [ 127.655026][ T7230] team_slave_0: entered promiscuous mode [ 127.660787][ T7230] team_slave_1: entered promiscuous mode [ 127.666517][ T7230] bond1: entered promiscuous mode [ 127.695658][ T7261] loop4: detected capacity change from 0 to 1024 [ 127.722465][ T7261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.785358][ T7261] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.381712][ T7284] loop2: detected capacity change from 0 to 128 [ 128.407869][ T7284] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.455856][ T7284] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.521618][ T7289] pim6reg1: entered promiscuous mode [ 128.527078][ T7289] pim6reg1: entered allmulticast mode [ 128.658601][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.688930][ T7298] loop3: detected capacity change from 0 to 2048 [ 128.711989][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 128.727032][ T7300] loop4: detected capacity change from 0 to 256 [ 128.734016][ T4581] loop3: p1 < > p4 [ 128.738966][ T4581] loop3: p4 size 8388608 extends beyond EOD, truncated [ 128.755711][ T7298] loop3: p1 < > p4 [ 128.761716][ T7298] loop3: p4 size 8388608 extends beyond EOD, truncated [ 128.837100][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 128.870986][ T7313] loop4: detected capacity change from 0 to 2048 [ 128.898383][ T7313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 128.930137][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 128.930153][ T29] audit: type=1326 audit(1754265106.821:13742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 128.962650][ T29] audit: type=1326 audit(1754265106.831:13743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 128.986500][ T29] audit: type=1326 audit(1754265106.831:13744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 129.011249][ T29] audit: type=1326 audit(1754265106.831:13745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 129.034812][ T29] audit: type=1326 audit(1754265106.831:13746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 129.058681][ T29] audit: type=1326 audit(1754265106.831:13747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 129.061517][ T7323] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.1211: inline data xattr refers to an external xattr inode [ 129.082332][ T29] audit: type=1326 audit(1754265106.831:13748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 129.121004][ T29] audit: type=1326 audit(1754265106.831:13749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 129.144904][ T29] audit: type=1326 audit(1754265106.831:13750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 129.168504][ T29] audit: type=1326 audit(1754265106.831:13751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 129.208759][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.387995][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 129.408458][ T7338] loop3: detected capacity change from 0 to 256 [ 129.421423][ T7342] netlink: 'syz.2.1222': attribute type 10 has an invalid length. [ 129.429304][ T7342] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1222'. [ 129.440867][ T7342] netlink: 'syz.2.1222': attribute type 13 has an invalid length. [ 129.483092][ T7342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.541791][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.549608][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.564056][ T7349] bridge0: entered allmulticast mode [ 129.593701][ T7349] bridge_slave_1: left allmulticast mode [ 129.599539][ T7349] bridge_slave_1: left promiscuous mode [ 129.605598][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.615259][ T7349] bridge_slave_0: left allmulticast mode [ 129.621134][ T7349] bridge_slave_0: left promiscuous mode [ 129.627108][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.698838][ T7356] loop2: detected capacity change from 0 to 128 [ 129.712066][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 129.748615][ T7356] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.771930][ T7356] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.866960][ T7364] syzkaller0: entered promiscuous mode [ 129.872518][ T7364] syzkaller0: entered allmulticast mode [ 129.973069][ T7375] loop3: detected capacity change from 0 to 128 [ 129.982409][ T7375] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 129.990528][ T7375] FAT-fs (loop3): Filesystem has been set read-only [ 129.997838][ T7375] bio_check_eod: 8 callbacks suppressed [ 129.997855][ T7375] syz.3.1235: attempt to access beyond end of device [ 129.997855][ T7375] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 130.017249][ T7375] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 130.025233][ T7375] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 130.034933][ T7375] syz.3.1235: attempt to access beyond end of device [ 130.034933][ T7375] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 130.055775][ T7377] syz.3.1235: attempt to access beyond end of device [ 130.055775][ T7377] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 130.069133][ T7377] buffer_io_error: 6 callbacks suppressed [ 130.069149][ T7377] Buffer I/O error on dev loop3, logical block 2065, async page read [ 130.083672][ T7377] syz.3.1235: attempt to access beyond end of device [ 130.083672][ T7377] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 130.086087][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 130.097037][ T7377] Buffer I/O error on dev loop3, logical block 2066, async page read [ 130.117199][ T7377] syz.3.1235: attempt to access beyond end of device [ 130.117199][ T7377] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 130.130619][ T7377] Buffer I/O error on dev loop3, logical block 2067, async page read [ 130.140344][ T7377] syz.3.1235: attempt to access beyond end of device [ 130.140344][ T7377] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 130.153665][ T7377] Buffer I/O error on dev loop3, logical block 2068, async page read [ 130.156782][ T7380] loop1: detected capacity change from 0 to 256 [ 130.165090][ T7377] syz.3.1235: attempt to access beyond end of device [ 130.165090][ T7377] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 130.171851][ T7373] loop0: detected capacity change from 0 to 128 [ 130.181578][ T7377] Buffer I/O error on dev loop3, logical block 2069, async page read [ 130.212207][ T7377] syz.3.1235: attempt to access beyond end of device [ 130.212207][ T7377] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 130.226377][ T7377] Buffer I/O error on dev loop3, logical block 2070, async page read [ 130.236014][ T7377] syz.3.1235: attempt to access beyond end of device [ 130.236014][ T7377] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 130.249354][ T7377] Buffer I/O error on dev loop3, logical block 2071, async page read [ 130.250220][ T7373] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.259050][ T7377] syz.3.1235: attempt to access beyond end of device [ 130.259050][ T7377] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 130.282871][ T7377] Buffer I/O error on dev loop3, logical block 2072, async page read [ 130.291128][ T7375] Buffer I/O error on dev loop3, logical block 2065, async page read [ 130.294537][ T7373] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.299224][ T7375] Buffer I/O error on dev loop3, logical block 2066, async page read [ 130.415532][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.425122][ T7389] loop1: detected capacity change from 0 to 512 [ 130.499288][ T7395] loop2: detected capacity change from 0 to 2048 [ 130.550022][ T7395] loop2: p1 < > p4 [ 130.555187][ T7395] loop2: p4 size 8388608 extends beyond EOD, truncated [ 130.568408][ T2990] loop2: p1 < > p4 [ 130.575247][ T2990] loop2: p4 size 8388608 extends beyond EOD, truncated [ 130.638884][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.650212][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.672576][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.682668][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.749984][ T7406] loop2: detected capacity change from 0 to 1024 [ 130.772562][ T7406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.812565][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.827276][ T7406] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.944872][ T7421] loop0: detected capacity change from 0 to 512 [ 131.011161][ T7426] loop0: detected capacity change from 0 to 2048 [ 131.141466][ T3292] loop0: p1 < > p4 [ 131.164570][ T3292] loop0: p4 size 8388608 extends beyond EOD, truncated [ 131.402555][ T7435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7435 comm=syz.1.1257 [ 131.432015][ T7426] loop0: p1 < > p4 [ 131.442654][ T7426] loop0: p4 size 8388608 extends beyond EOD, truncated [ 131.455871][ T7439] loop1: detected capacity change from 0 to 2048 [ 131.488866][ T7439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 131.565674][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 131.576363][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 131.587295][ T7455] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1259: inline data xattr refers to an external xattr inode [ 131.598628][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 131.617179][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 131.629167][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 131.680626][ T7458] loop0: detected capacity change from 0 to 256 [ 131.716007][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 131.728381][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.743075][ T7456] loop4: detected capacity change from 0 to 128 [ 131.759406][ T7456] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.804983][ T7456] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.875886][ T7476] loop0: detected capacity change from 0 to 2048 [ 131.908339][ T7470] loop2: detected capacity change from 0 to 128 [ 131.916285][ T4581] loop0: p1 < > p3 p4 < > [ 131.925858][ T4581] loop0: p3 start 4284289 is beyond EOD, truncated [ 131.937476][ T7470] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.959630][ T7476] loop0: p1 < > p3 p4 < > [ 131.962920][ T7470] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.975235][ T7476] loop0: p3 start 4284289 is beyond EOD, truncated [ 131.986315][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 132.053942][ T7476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7476 comm=syz.0.1271 [ 132.110256][ T7492] bridge0: port 3(gretap0) entered disabled state [ 132.117317][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.124918][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.135513][ T7492] bridge0: entered allmulticast mode [ 132.145117][ T7494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1275'. [ 132.157429][ T7492] gretap0: left allmulticast mode [ 132.162714][ T7492] gretap0: left promiscuous mode [ 132.168124][ T7492] bridge0: port 3(gretap0) entered disabled state [ 132.178235][ T7492] bridge_slave_1: left allmulticast mode [ 132.184652][ T7492] bridge_slave_1: left promiscuous mode [ 132.190759][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.201619][ T7492] bridge_slave_0: left allmulticast mode [ 132.207481][ T7492] bridge_slave_0: left promiscuous mode [ 132.213364][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.287237][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 132.452003][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.491480][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 132.503075][ T7510] loop4: detected capacity change from 0 to 256 [ 132.579053][ T7516] pim6reg1: entered promiscuous mode [ 132.584446][ T7516] pim6reg1: entered allmulticast mode [ 132.628359][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.662401][ T7520] loop0: detected capacity change from 0 to 2048 [ 132.711478][ T7524] loop1: detected capacity change from 0 to 2048 [ 132.720903][ T7520] loop0: p1 < > p3 p4 < > [ 132.726950][ T7520] loop0: p3 start 4284289 is beyond EOD, truncated [ 132.737985][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 132.750629][ T3292] loop1: p1 < > p4 [ 132.761207][ T3292] loop1: p4 size 8388608 extends beyond EOD, truncated [ 132.782346][ T7524] loop1: p1 < > p4 [ 132.810159][ T7524] loop1: p4 size 8388608 extends beyond EOD, truncated [ 132.878949][ T2990] loop1: p1 < > p4 [ 132.884394][ T2990] loop1: p4 size 8388608 extends beyond EOD, truncated [ 132.937337][ T7520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7520 comm=syz.0.1286 [ 133.014073][ T7532] loop1: detected capacity change from 0 to 2048 [ 133.044022][ T7532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 133.135449][ T7541] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1289: inline data xattr refers to an external xattr inode [ 133.232929][ T7534] loop2: detected capacity change from 0 to 128 [ 133.274345][ T7534] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.321680][ T7534] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.353796][ T7558] loop3: detected capacity change from 0 to 8192 [ 133.526555][ T7570] loop0: detected capacity change from 0 to 2048 [ 133.581615][ T3292] loop0: p1 < > p4 [ 133.588664][ T3292] loop0: p4 size 8388608 extends beyond EOD, truncated [ 133.611195][ T7570] loop0: p1 < > p4 [ 133.618928][ T7570] loop0: p4 size 8388608 extends beyond EOD, truncated [ 133.657900][ T2990] loop0: p1 < > p4 [ 133.664739][ T2990] loop0: p4 size 8388608 extends beyond EOD, truncated [ 133.839476][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 133.861238][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.998051][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 133.998067][ T29] audit: type=1400 audit(1754265111.881:14054): avc: denied { relabelfrom } for pid=7579 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.024372][ T29] audit: type=1400 audit(1754265111.881:14055): avc: denied { relabelto } for pid=7579 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.281126][ T7601] sit0: left promiscuous mode [ 134.359836][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 134.378077][ T7593] sit0: entered promiscuous mode [ 134.402071][ T7604] loop1: detected capacity change from 0 to 256 [ 134.518993][ T29] audit: type=1326 audit(1754265112.401:14056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 134.542930][ T29] audit: type=1326 audit(1754265112.401:14057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 134.543085][ T7615] loop2: detected capacity change from 0 to 512 [ 134.600033][ T29] audit: type=1326 audit(1754265112.471:14058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 134.623638][ T29] audit: type=1326 audit(1754265112.471:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 134.647741][ T29] audit: type=1326 audit(1754265112.471:14060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 134.649048][ T7619] loop3: detected capacity change from 0 to 128 [ 134.671334][ T29] audit: type=1326 audit(1754265112.471:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 134.702107][ T29] audit: type=1326 audit(1754265112.471:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 134.714388][ T7619] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 134.725774][ T29] audit: type=1326 audit(1754265112.471:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 134.733658][ T7619] FAT-fs (loop3): Filesystem has been set read-only [ 134.747369][ T7619] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 134.772269][ T7619] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 135.008321][ T7619] bio_check_eod: 41797 callbacks suppressed [ 135.008341][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.008341][ T7619] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 135.028951][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.028951][ T7619] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 135.043580][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.043580][ T7619] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 135.059417][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.059417][ T7619] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 135.072834][ T7619] buffer_io_error: 41797 callbacks suppressed [ 135.072850][ T7619] Buffer I/O error on dev loop3, logical block 2072, async page read [ 135.089448][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.089448][ T7619] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 135.102765][ T7619] Buffer I/O error on dev loop3, logical block 2065, async page read [ 135.115059][ T7648] loop2: detected capacity change from 0 to 128 [ 135.122211][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.122211][ T7619] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 135.135720][ T7619] Buffer I/O error on dev loop3, logical block 2066, async page read [ 135.144797][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.144797][ T7619] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 135.158392][ T7619] Buffer I/O error on dev loop3, logical block 2067, async page read [ 135.167886][ T7648] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.176099][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.176099][ T7619] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 135.193595][ T7619] Buffer I/O error on dev loop3, logical block 2068, async page read [ 135.209902][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.209902][ T7619] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 135.211204][ T7648] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.223348][ T7619] Buffer I/O error on dev loop3, logical block 2069, async page read [ 135.242216][ T7619] syz.3.1318: attempt to access beyond end of device [ 135.242216][ T7619] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 135.255748][ T7619] Buffer I/O error on dev loop3, logical block 2070, async page read [ 135.264178][ T7619] Buffer I/O error on dev loop3, logical block 2071, async page read [ 135.272563][ T7619] Buffer I/O error on dev loop3, logical block 2072, async page read [ 135.280850][ T7619] Buffer I/O error on dev loop3, logical block 2065, async page read [ 135.787587][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.797011][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.807756][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.811514][ T7676] bridge0: entered allmulticast mode [ 135.843800][ T7681] loop2: detected capacity change from 0 to 128 [ 135.866964][ T7681] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 135.874949][ T7681] FAT-fs (loop2): Filesystem has been set read-only [ 135.882288][ T7681] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 135.890171][ T7681] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 135.955159][ T7686] loop0: detected capacity change from 0 to 128 [ 136.025779][ T7686] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.061856][ T7686] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.081526][ T7690] loop1: detected capacity change from 0 to 1024 [ 136.122235][ T7690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.135201][ T7690] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.670541][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.916087][ T7713] pim6reg1: entered promiscuous mode [ 136.921901][ T7713] pim6reg1: entered allmulticast mode [ 136.962096][ T7718] netlink: 'syz.0.1351': attribute type 10 has an invalid length. [ 136.970188][ T7718] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1351'. [ 136.988449][ T7718] netlink: 'syz.0.1351': attribute type 13 has an invalid length. [ 137.007204][ T7718] sit0: left promiscuous mode [ 137.011981][ T7718] sit0: left allmulticast mode [ 137.030399][ T7718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.052073][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.139171][ T7734] loop1: detected capacity change from 0 to 512 [ 137.178775][ T7730] loop2: detected capacity change from 0 to 2048 [ 137.240868][ T7730] loop2: p1 < > p4 [ 137.245517][ T7730] loop2: p4 size 8388608 extends beyond EOD, truncated [ 137.417113][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 137.420454][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 137.454798][ T7767] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 137.462763][ T7767] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1372'. [ 137.476466][ T7767] netlink: 'syz.3.1372': attribute type 13 has an invalid length. [ 137.494237][ T7767] sit0: left promiscuous mode [ 137.499168][ T7767] sit0: left allmulticast mode [ 137.516546][ T7767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.568169][ T7772] loop4: detected capacity change from 0 to 512 [ 137.733313][ T7786] loop4: detected capacity change from 0 to 2048 [ 137.796887][ T7786] loop4: p1 < > p4 [ 137.810102][ T7786] loop4: p4 size 8388608 extends beyond EOD, truncated [ 137.888625][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 137.899335][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 137.982011][ T7800] loop2: detected capacity change from 0 to 512 [ 138.225567][ T7810] loop2: detected capacity change from 0 to 8192 [ 138.366879][ T7826] loop1: detected capacity change from 0 to 512 [ 138.377420][ T7819] loop3: detected capacity change from 0 to 128 [ 138.404482][ T7819] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.483844][ T7819] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.689329][ T7842] loop1: detected capacity change from 0 to 128 [ 138.709321][ T7842] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 138.718222][ T7842] FAT-fs (loop1): Filesystem has been set read-only [ 138.736299][ T7842] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 138.744229][ T7842] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 139.020154][ T7857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1411'. [ 139.077929][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.119566][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 139.119584][ T29] audit: type=1326 audit(1754265117.001:14411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 139.149401][ T29] audit: type=1326 audit(1754265117.001:14412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 139.173481][ T29] audit: type=1326 audit(1754265117.061:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 139.197030][ T29] audit: type=1326 audit(1754265117.061:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 139.220588][ T29] audit: type=1326 audit(1754265117.061:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 139.245504][ T29] audit: type=1326 audit(1754265117.131:14416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 139.269236][ T29] audit: type=1326 audit(1754265117.131:14417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 139.292855][ T29] audit: type=1326 audit(1754265117.131:14418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 139.392276][ T29] audit: type=1326 audit(1754265117.281:14419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7871 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2299eb69 code=0x7ffc0000 [ 139.418263][ T29] audit: type=1326 audit(1754265117.301:14420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7871 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2a2299eb69 code=0x7ffc0000 [ 139.532351][ T7873] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 139.538915][ T7873] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.546662][ T7873] vhci_hcd vhci_hcd.0: Device attached [ 139.586917][ T7874] vhci_hcd: unknown pdu 2 [ 139.592173][ T37] vhci_hcd: stop threads [ 139.596641][ T37] vhci_hcd: release socket [ 139.601250][ T37] vhci_hcd: disconnect device [ 139.647419][ T7877] loop1: detected capacity change from 0 to 8192 [ 140.817659][ T7927] loop0: detected capacity change from 0 to 512 [ 140.858224][ T7929] loop2: detected capacity change from 0 to 2048 [ 140.922159][ T7929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 140.984607][ T7938] loop0: detected capacity change from 0 to 8192 [ 140.995294][ T7942] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.1436: inline data xattr refers to an external xattr inode [ 141.071092][ T7941] loop4: detected capacity change from 0 to 128 [ 141.084471][ T7941] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.097819][ T7941] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.219680][ T7936] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.351683][ T7961] pim6reg1: entered promiscuous mode [ 141.357082][ T7961] pim6reg1: entered allmulticast mode [ 141.516326][ T7975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 141.522895][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.530649][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 141.538251][ T7976] vhci_hcd: unknown pdu 2 [ 141.545255][ T37] vhci_hcd: stop threads [ 141.549705][ T37] vhci_hcd: release socket [ 141.554179][ T37] vhci_hcd: disconnect device [ 141.577195][ T7979] loop0: detected capacity change from 0 to 2048 [ 141.640117][ T3292] loop0: p1 < > p4 [ 141.644854][ T3292] loop0: p4 size 8388608 extends beyond EOD, truncated [ 141.655441][ T7979] loop0: p1 < > p4 [ 141.660453][ T7979] loop0: p4 size 8388608 extends beyond EOD, truncated [ 141.663425][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 141.779314][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 141.790190][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 141.812668][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.260428][ T7994] loop4: detected capacity change from 0 to 8192 [ 142.478706][ T7999] loop0: detected capacity change from 0 to 2048 [ 142.567921][ T3292] loop0: p1 < > p3 p4 < > [ 142.573227][ T3292] loop0: p3 start 4284289 is beyond EOD, truncated [ 142.589626][ T7999] loop0: p1 < > p3 p4 < > [ 142.602169][ T7999] loop0: p3 start 4284289 is beyond EOD, truncated [ 142.616790][ T8001] loop2: detected capacity change from 0 to 512 [ 142.624376][ T2990] loop0: p1 < > p3 p4 < > [ 142.630789][ T2990] loop0: p3 start 4284289 is beyond EOD, truncated [ 142.659775][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 142.792339][ T7999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7999 comm=syz.0.1459 [ 142.793679][ T8011] loop2: detected capacity change from 0 to 2048 [ 142.860000][ T8011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 142.915041][ T8022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1466'. [ 142.964866][ T8028] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.1463: inline data xattr refers to an external xattr inode [ 142.980103][ T8023] syzkaller0: entered promiscuous mode [ 142.985608][ T8023] syzkaller0: entered allmulticast mode [ 143.003989][ T8020] loop3: detected capacity change from 0 to 128 [ 143.020460][ T8020] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.033512][ T8020] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.343167][ T8053] loop0: detected capacity change from 0 to 2048 [ 143.420114][ T3292] loop0: p1 < > p4 [ 143.424866][ T3292] loop0: p4 size 8388608 extends beyond EOD, truncated [ 143.436338][ T8053] loop0: p1 < > p4 [ 143.441216][ T8053] loop0: p4 size 8388608 extends beyond EOD, truncated [ 143.457818][ T2990] loop0: p1 < > p4 [ 143.464024][ T2990] loop0: p4 size 8388608 extends beyond EOD, truncated [ 143.520158][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 143.530357][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 143.546047][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 143.551298][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 143.612652][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 143.632356][ T8060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1479'. [ 143.702298][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.785616][ T8073] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 143.792203][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.799919][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 143.812063][ T8074] vhci_hcd: unknown pdu 2 [ 143.822094][ T390] vhci_hcd: stop threads [ 143.826391][ T390] vhci_hcd: release socket [ 143.830946][ T390] vhci_hcd: disconnect device [ 143.907477][ T8080] pim6reg1: entered promiscuous mode [ 143.913553][ T8080] pim6reg1: entered allmulticast mode [ 144.092328][ T8097] loop0: detected capacity change from 0 to 512 [ 144.099195][ T8097] EXT4-fs: Ignoring removed oldalloc option [ 144.137816][ T29] kauditd_printk_skb: 1111 callbacks suppressed [ 144.137835][ T29] audit: type=1326 audit(1754265122.021:15532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2191ee5b27 code=0x7ffc0000 [ 144.171148][ T29] audit: type=1326 audit(1754265122.051:15533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2191e8ad69 code=0x7ffc0000 [ 144.194907][ T29] audit: type=1326 audit(1754265122.051:15534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2191ee5b27 code=0x7ffc0000 [ 144.218333][ T29] audit: type=1326 audit(1754265122.051:15535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2191e8ad69 code=0x7ffc0000 [ 144.241764][ T29] audit: type=1326 audit(1754265122.051:15536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 144.313332][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 144.338246][ T8101] loop1: detected capacity change from 0 to 256 [ 144.360423][ T29] audit: type=1326 audit(1754265122.151:15537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2191ee5b27 code=0x7ffc0000 [ 144.383918][ T29] audit: type=1326 audit(1754265122.151:15538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2191e8ad69 code=0x7ffc0000 [ 144.407467][ T29] audit: type=1326 audit(1754265122.151:15539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 144.431286][ T29] audit: type=1326 audit(1754265122.171:15540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2191ee5b27 code=0x7ffc0000 [ 144.454725][ T29] audit: type=1326 audit(1754265122.171:15541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2191e8ad69 code=0x7ffc0000 [ 144.557808][ T8097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.610287][ T8097] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.617342][ T8097] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1491: Failed to acquire dquot type 1 [ 144.630444][ T8097] EXT4-fs (loop0): 1 truncate cleaned up [ 144.637142][ T8097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.219309][ T8113] loop1: detected capacity change from 0 to 8192 [ 145.884292][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.118961][ T8135] loop1: detected capacity change from 0 to 128 [ 146.133500][ T8135] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 146.141494][ T8135] FAT-fs (loop1): Filesystem has been set read-only [ 146.150837][ T8135] bio_check_eod: 113216 callbacks suppressed [ 146.150854][ T8135] syz.1.1506: attempt to access beyond end of device [ 146.150854][ T8135] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 146.173004][ T8135] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 146.180977][ T8135] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 146.190769][ T8135] syz.1.1506: attempt to access beyond end of device [ 146.190769][ T8135] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.204380][ T8136] syz.1.1506: attempt to access beyond end of device [ 146.204380][ T8136] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 146.217828][ T8136] buffer_io_error: 111919 callbacks suppressed [ 146.217846][ T8136] Buffer I/O error on dev loop1, logical block 2065, async page read [ 146.235159][ T8136] syz.1.1506: attempt to access beyond end of device [ 146.235159][ T8136] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 146.248494][ T8136] Buffer I/O error on dev loop1, logical block 2066, async page read [ 146.256986][ T8136] syz.1.1506: attempt to access beyond end of device [ 146.256986][ T8136] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 146.270335][ T8136] Buffer I/O error on dev loop1, logical block 2067, async page read [ 146.279684][ T8136] syz.1.1506: attempt to access beyond end of device [ 146.279684][ T8136] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 146.292979][ T8136] Buffer I/O error on dev loop1, logical block 2068, async page read [ 146.301572][ T8136] syz.1.1506: attempt to access beyond end of device [ 146.301572][ T8136] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 146.315009][ T8136] Buffer I/O error on dev loop1, logical block 2069, async page read [ 146.323667][ T8136] syz.1.1506: attempt to access beyond end of device [ 146.323667][ T8136] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 146.337180][ T8136] Buffer I/O error on dev loop1, logical block 2070, async page read [ 146.351189][ T8136] syz.1.1506: attempt to access beyond end of device [ 146.351189][ T8136] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 146.364530][ T8136] Buffer I/O error on dev loop1, logical block 2071, async page read [ 146.374874][ T8136] syz.1.1506: attempt to access beyond end of device [ 146.374874][ T8136] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 146.388238][ T8136] Buffer I/O error on dev loop1, logical block 2072, async page read [ 146.396518][ T8135] Buffer I/O error on dev loop1, logical block 2065, async page read [ 146.414338][ T8135] Buffer I/O error on dev loop1, logical block 2066, async page read [ 146.701816][ T8151] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 146.708463][ T8151] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 146.716206][ T8151] vhci_hcd vhci_hcd.0: Device attached [ 146.797726][ T8152] vhci_hcd: connection closed [ 146.797912][ T12] vhci_hcd: stop threads [ 146.807025][ T12] vhci_hcd: release socket [ 146.811485][ T12] vhci_hcd: disconnect device [ 147.000039][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1515'. [ 147.013852][ T8158] sit0: left promiscuous mode [ 147.156085][ T8158] sit0: entered promiscuous mode [ 147.198076][ T8175] loop2: detected capacity change from 0 to 2048 [ 147.235763][ T3292] loop2: p1 < > p3 p4 < > [ 147.241794][ T3292] loop2: p3 start 4284289 is beyond EOD, truncated [ 147.252683][ T8175] loop2: p1 < > p3 p4 < > [ 147.260422][ T8175] loop2: p3 start 4284289 is beyond EOD, truncated [ 147.275171][ C1] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 147.403552][ T8158] GPL: port 1(team0) entered blocking state [ 147.409582][ T8158] GPL: port 1(team0) entered disabled state [ 147.482882][ T8175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8175 comm=syz.2.1519 [ 147.518609][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 147.611179][ T8158] team0: entered allmulticast mode [ 147.616379][ T8158] team_slave_0: entered allmulticast mode [ 147.622194][ T8158] team_slave_1: entered allmulticast mode [ 147.628326][ T8158] bond1: entered allmulticast mode [ 147.633614][ T8158] bond2: entered allmulticast mode [ 147.690106][ T8189] loop2: detected capacity change from 0 to 1024 [ 147.756848][ T8189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.805032][ T8158] team0: entered promiscuous mode [ 147.810248][ T8158] team_slave_0: entered promiscuous mode [ 147.816056][ T8158] team_slave_1: entered promiscuous mode [ 147.816086][ T8189] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.832406][ T8158] bond1: entered promiscuous mode [ 147.837527][ T8158] bond2: entered promiscuous mode [ 148.642942][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.873326][ T8244] sit0: entered allmulticast mode [ 148.946976][ T8228] sit0: entered allmulticast mode [ 148.965934][ T8253] loop1: detected capacity change from 0 to 1024 [ 148.999245][ T8251] sit0: entered promiscuous mode [ 149.032919][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 149.039807][ T8253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.068140][ T8254] sit0: entered promiscuous mode [ 149.080807][ T8256] loop2: detected capacity change from 0 to 256 [ 149.084996][ T8253] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.620532][ T8263] loop4: detected capacity change from 0 to 8192 [ 149.880526][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.964319][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 149.964339][ T29] audit: type=1326 audit(1754265127.851:15897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.066082][ T29] audit: type=1326 audit(1754265127.851:15898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.089863][ T29] audit: type=1326 audit(1754265127.851:15899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.094323][ T8284] loop1: detected capacity change from 0 to 2048 [ 150.113759][ T29] audit: type=1326 audit(1754265127.851:15900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.143569][ T29] audit: type=1326 audit(1754265127.851:15901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.167127][ T29] audit: type=1326 audit(1754265127.851:15902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.190715][ T29] audit: type=1326 audit(1754265127.851:15903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.214564][ T29] audit: type=1326 audit(1754265127.851:15904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.238239][ T29] audit: type=1326 audit(1754265127.851:15905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.261899][ T29] audit: type=1326 audit(1754265127.851:15906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 150.322802][ T3292] loop1: p1 < > p3 p4 < > [ 150.329831][ T3292] loop1: p3 start 4284289 is beyond EOD, truncated [ 150.369994][ T8284] loop1: p1 < > p3 p4 < > [ 150.375293][ T8284] loop1: p3 start 4284289 is beyond EOD, truncated [ 150.384990][ T8293] loop0: detected capacity change from 0 to 512 [ 150.561667][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 150.593908][ T8299] loop0: detected capacity change from 0 to 256 [ 150.604256][ T8301] loop3: detected capacity change from 0 to 2048 [ 150.661099][ T3292] loop3: p1 < > p4 [ 150.681363][ T3292] loop3: p4 size 8388608 extends beyond EOD, truncated [ 150.709815][ T8301] loop3: p1 < > p4 [ 150.718531][ T8301] loop3: p4 size 8388608 extends beyond EOD, truncated [ 150.797542][ T8284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8284 comm=syz.1.1558 [ 150.817409][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 150.890725][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 151.110522][ T8310] sit0: left promiscuous mode [ 151.179809][ T8323] pim6reg1: entered promiscuous mode [ 151.185162][ T8323] pim6reg1: entered allmulticast mode [ 151.251723][ T8330] loop0: detected capacity change from 0 to 8192 [ 151.354975][ T8326] sit0: entered promiscuous mode [ 151.778726][ T8339] sit0: left promiscuous mode [ 151.814492][ T8336] sit0: entered promiscuous mode [ 152.153121][ T8349] loop0: detected capacity change from 0 to 2048 [ 152.199901][ T4581] loop0: p1 < > p3 p4 < > [ 152.209315][ T4581] loop0: p3 start 4284289 is beyond EOD, truncated [ 152.232048][ T8349] loop0: p1 < > p3 p4 < > [ 152.242060][ T8349] loop0: p3 start 4284289 is beyond EOD, truncated [ 152.267088][ T8351] loop4: detected capacity change from 0 to 128 [ 152.274281][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 0 [ 152.295311][ T8352] loop1: detected capacity change from 0 to 128 [ 152.324011][ T8352] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.337762][ T8351] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.387159][ T8352] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.466160][ T8349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8349 comm=syz.0.1579 [ 152.525239][ T8351] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.553752][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 152.568162][ T8374] loop0: detected capacity change from 0 to 512 [ 152.596063][ T8370] loop2: detected capacity change from 0 to 128 [ 152.624984][ T8370] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.646665][ T8370] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.764196][ T8385] pim6reg1: entered promiscuous mode [ 152.769608][ T8385] pim6reg1: entered allmulticast mode [ 152.923680][ T8390] loop3: detected capacity change from 0 to 2048 [ 152.955312][ T8390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 152.976084][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.012974][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.024109][ T8398] loop1: detected capacity change from 0 to 128 [ 153.043128][ T8399] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.1590: inline data xattr refers to an external xattr inode [ 153.070676][ T8402] sit0: left promiscuous mode [ 153.085999][ T8398] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 153.094142][ T8398] FAT-fs (loop1): Filesystem has been set read-only [ 153.125441][ T8398] bio_check_eod: 34424 callbacks suppressed [ 153.125462][ T8398] syz.1.1593: attempt to access beyond end of device [ 153.125462][ T8398] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 153.150741][ T8398] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 153.158624][ T8398] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 153.168651][ T8404] syz.1.1593: attempt to access beyond end of device [ 153.168651][ T8404] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 153.182167][ T8404] buffer_io_error: 34422 callbacks suppressed [ 153.182223][ T8404] Buffer I/O error on dev loop1, logical block 2065, async page read [ 153.199979][ T8404] syz.1.1593: attempt to access beyond end of device [ 153.199979][ T8404] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 153.213325][ T8404] Buffer I/O error on dev loop1, logical block 2066, async page read [ 153.231457][ T8402] sit0: entered promiscuous mode [ 153.231622][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.246036][ T8404] syz.1.1593: attempt to access beyond end of device [ 153.246036][ T8404] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 153.259536][ T8404] Buffer I/O error on dev loop1, logical block 2067, async page read [ 153.292641][ T8404] syz.1.1593: attempt to access beyond end of device [ 153.292641][ T8404] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 153.306039][ T8404] Buffer I/O error on dev loop1, logical block 2068, async page read [ 153.319731][ T8404] syz.1.1593: attempt to access beyond end of device [ 153.319731][ T8404] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 153.333120][ T8404] Buffer I/O error on dev loop1, logical block 2069, async page read [ 153.357290][ T8407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1595'. [ 153.361796][ T8404] syz.1.1593: attempt to access beyond end of device [ 153.361796][ T8404] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 153.379839][ T8404] Buffer I/O error on dev loop1, logical block 2070, async page read [ 153.405829][ T8404] syz.1.1593: attempt to access beyond end of device [ 153.405829][ T8404] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 153.419355][ T8404] Buffer I/O error on dev loop1, logical block 2071, async page read [ 153.428037][ T8407] loop2: detected capacity change from 0 to 2048 [ 153.444662][ T8404] syz.1.1593: attempt to access beyond end of device [ 153.444662][ T8404] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 153.458158][ T8404] Buffer I/O error on dev loop1, logical block 2072, async page read [ 153.476982][ T8398] syz.1.1593: attempt to access beyond end of device [ 153.476982][ T8398] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 153.490425][ T8398] Buffer I/O error on dev loop1, logical block 2065, async page read [ 153.499477][ T3292] loop2: p1 < > p3 p4 < > [ 153.505320][ T3292] loop2: p3 start 4284289 is beyond EOD, truncated [ 153.517433][ T8407] loop2: p1 < > p3 p4 < > [ 153.519955][ T8398] Buffer I/O error on dev loop1, logical block 2066, async page read [ 153.524287][ T8407] loop2: p3 start 4284289 is beyond EOD, truncated [ 153.869619][ T8410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8410 comm=syz.2.1595 [ 153.876564][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 153.958789][ T8418] loop3: detected capacity change from 0 to 512 [ 154.045958][ T8423] pim6reg1: entered promiscuous mode [ 154.051415][ T8423] pim6reg1: entered allmulticast mode [ 154.318455][ T8440] loop1: detected capacity change from 0 to 128 [ 154.330553][ T8448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1608'. [ 154.361723][ T8440] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.395141][ T8448] loop2: detected capacity change from 0 to 2048 [ 154.403718][ T8440] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.423852][ T8451] pim6reg1: entered promiscuous mode [ 154.429385][ T8451] pim6reg1: entered allmulticast mode [ 154.443375][ T8448] loop2: p1 < > p3 p4 < > [ 154.453992][ T8448] loop2: p3 start 4284289 is beyond EOD, truncated [ 154.589293][ T8460] loop4: detected capacity change from 0 to 512 [ 154.607564][ T8448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8448 comm=syz.2.1608 [ 154.891175][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'. [ 154.912769][ T8479] loop2: detected capacity change from 0 to 256 [ 154.972676][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 154.972694][ T29] audit: type=1326 audit(1754265132.861:15977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.3.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 155.041431][ T8487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1623'. [ 155.053358][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.058420][ T29] audit: type=1326 audit(1754265132.891:15978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.3.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 155.085982][ T29] audit: type=1326 audit(1754265132.891:15979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.3.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 155.109645][ T29] audit: type=1326 audit(1754265132.891:15980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.3.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f65e6c3d61f code=0x7ffc0000 [ 155.133440][ T29] audit: type=1326 audit(1754265132.891:15981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.3.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 155.157142][ T29] audit: type=1326 audit(1754265132.891:15982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.3.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 155.180981][ T29] audit: type=1326 audit(1754265132.891:15983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.3.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e6c3eb69 code=0x7ffc0000 [ 155.248088][ T8491] loop2: detected capacity change from 0 to 512 [ 155.286297][ T8487] loop3: detected capacity change from 0 to 2048 [ 155.350176][ T4581] loop3: p1 < > p3 p4 < > [ 155.355195][ T4581] loop3: p3 start 4284289 is beyond EOD, truncated [ 155.367317][ T8487] loop3: p1 < > p3 p4 < > [ 155.374286][ T8487] loop3: p3 start 4284289 is beyond EOD, truncated [ 155.425998][ T8495] loop2: detected capacity change from 0 to 128 [ 155.459742][ T8495] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.505271][ T8495] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.521840][ T29] audit: type=1326 audit(1754265133.401:15984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 155.546076][ T29] audit: type=1326 audit(1754265133.401:15985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 155.569907][ T29] audit: type=1326 audit(1754265133.411:15986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f2c2245eb69 code=0x7ffc0000 [ 155.692974][ T2990] loop3: p1 < > p3 p4 < > [ 155.698346][ T2990] loop3: p3 start 4284289 is beyond EOD, truncated [ 155.728241][ T8511] loop0: detected capacity change from 0 to 128 [ 155.749057][ T8511] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.772992][ T8511] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.909819][ T8529] netlink: 'syz.1.1634': attribute type 10 has an invalid length. [ 155.917887][ T8529] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1634'. [ 155.982721][ T8529] netlink: 'syz.1.1634': attribute type 13 has an invalid length. [ 155.987107][ T8533] loop4: detected capacity change from 0 to 2048 [ 156.002119][ T8533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 156.007584][ T8529] sit0: left promiscuous mode [ 156.018948][ T8529] sit0: left allmulticast mode [ 156.030445][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.037725][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.045184][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.052362][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.060248][ T8529] bridge0: left allmulticast mode [ 156.072846][ T8539] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.1636: inline data xattr refers to an external xattr inode [ 156.088582][ T8529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.152355][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.284919][ T8557] loop1: detected capacity change from 0 to 512 [ 156.345146][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.498513][ T8578] sit0: entered allmulticast mode [ 156.595299][ T8573] sit0: left promiscuous mode [ 156.644180][ T8568] sit0: entered allmulticast mode [ 156.702815][ T8573] sit0: entered promiscuous mode [ 156.800383][ T8587] sit0: entered promiscuous mode [ 156.822250][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 156.940694][ T8596] loop0: detected capacity change from 0 to 128 [ 156.967388][ T8596] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.012627][ T8596] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.380029][ T8619] pim6reg1: entered promiscuous mode [ 157.385452][ T8619] pim6reg1: entered allmulticast mode [ 157.596043][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.632431][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 157.666570][ T8639] loop0: detected capacity change from 0 to 256 [ 158.052732][ T8668] pim6reg1: entered promiscuous mode [ 158.058089][ T8668] pim6reg1: entered allmulticast mode [ 158.113070][ T8674] loop3: detected capacity change from 0 to 128 [ 158.129288][ T8674] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.142618][ T8674] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.197977][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 158.231216][ T8680] loop1: detected capacity change from 0 to 256 [ 158.368654][ T8694] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 158.375264][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.383052][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 158.406776][ T8696] vhci_hcd: unknown pdu 2 [ 158.411600][ T37] vhci_hcd: stop threads [ 158.415917][ T37] vhci_hcd: release socket [ 158.420467][ T37] vhci_hcd: disconnect device [ 158.479304][ T8707] pim6reg1: entered promiscuous mode [ 158.484887][ T8707] pim6reg1: entered allmulticast mode [ 158.625749][ T8712] loop2: detected capacity change from 0 to 2048 [ 158.652342][ T8712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 158.716894][ T8715] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.1703: inline data xattr refers to an external xattr inode [ 158.775270][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.798581][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 158.811179][ T8717] loop3: detected capacity change from 0 to 256 [ 158.871032][ T8723] loop3: detected capacity change from 0 to 128 [ 158.882807][ T8723] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 158.890758][ T8723] FAT-fs (loop3): Filesystem has been set read-only [ 158.897815][ T8723] bio_check_eod: 24255 callbacks suppressed [ 158.897831][ T8723] syz.3.1707: attempt to access beyond end of device [ 158.897831][ T8723] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 158.919660][ T8723] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 158.927545][ T8723] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 158.937516][ T8723] syz.3.1707: attempt to access beyond end of device [ 158.937516][ T8723] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 158.951461][ T8725] syz.3.1707: attempt to access beyond end of device [ 158.951461][ T8725] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 158.964974][ T8725] buffer_io_error: 24254 callbacks suppressed [ 158.964993][ T8725] Buffer I/O error on dev loop3, logical block 2065, async page read [ 158.979335][ T8725] syz.3.1707: attempt to access beyond end of device [ 158.979335][ T8725] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 158.992829][ T8725] Buffer I/O error on dev loop3, logical block 2066, async page read [ 159.001180][ T8725] syz.3.1707: attempt to access beyond end of device [ 159.001180][ T8725] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 159.014824][ T8725] Buffer I/O error on dev loop3, logical block 2067, async page read [ 159.023072][ T8725] syz.3.1707: attempt to access beyond end of device [ 159.023072][ T8725] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 159.036373][ T8725] Buffer I/O error on dev loop3, logical block 2068, async page read [ 159.046347][ T8725] syz.3.1707: attempt to access beyond end of device [ 159.046347][ T8725] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 159.059818][ T8725] Buffer I/O error on dev loop3, logical block 2069, async page read [ 159.069184][ T8725] syz.3.1707: attempt to access beyond end of device [ 159.069184][ T8725] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 159.082980][ T8725] Buffer I/O error on dev loop3, logical block 2070, async page read [ 159.094105][ T8725] syz.3.1707: attempt to access beyond end of device [ 159.094105][ T8725] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 159.107509][ T8725] Buffer I/O error on dev loop3, logical block 2071, async page read [ 159.116064][ T8725] syz.3.1707: attempt to access beyond end of device [ 159.116064][ T8725] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 159.129346][ T8725] Buffer I/O error on dev loop3, logical block 2072, async page read [ 159.137651][ T8725] Buffer I/O error on dev loop3, logical block 2065, async page read [ 159.145852][ T8725] Buffer I/O error on dev loop3, logical block 2066, async page read [ 159.471007][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 160.024399][ T29] kauditd_printk_skb: 652 callbacks suppressed [ 160.024451][ T29] audit: type=1326 audit(1754265137.911:16639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.054427][ T29] audit: type=1326 audit(1754265137.911:16640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.089141][ T29] audit: type=1326 audit(1754265137.911:16641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.113125][ T29] audit: type=1326 audit(1754265137.911:16642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.136843][ T29] audit: type=1326 audit(1754265137.911:16643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.160841][ T29] audit: type=1326 audit(1754265137.961:16644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.184415][ T29] audit: type=1326 audit(1754265137.961:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.207961][ T29] audit: type=1326 audit(1754265137.961:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.231550][ T29] audit: type=1326 audit(1754265137.961:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.255166][ T29] audit: type=1326 audit(1754265137.971:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2191eeeb69 code=0x7ffc0000 [ 160.319907][ T8782] loop3: detected capacity change from 0 to 128 [ 160.333857][ T8782] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 160.341766][ T8782] FAT-fs (loop3): Filesystem has been set read-only [ 160.354302][ T8778] pim6reg1: entered promiscuous mode [ 160.355196][ T8782] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 160.359752][ T8778] pim6reg1: entered allmulticast mode [ 160.367608][ T8782] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 160.411131][ T8788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 160.417765][ T8788] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.425436][ T8788] vhci_hcd vhci_hcd.0: Device attached [ 160.444260][ T8790] vhci_hcd: unknown pdu 2 [ 160.448949][ T37] vhci_hcd: stop threads [ 160.453448][ T37] vhci_hcd: release socket [ 160.457877][ T37] vhci_hcd: disconnect device [ 160.635166][ T8802] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 160.643351][ T8802] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1739'. [ 160.699787][ T8805] netlink: 'syz.4.1739': attribute type 13 has an invalid length. [ 160.735180][ T8805] sit0: left promiscuous mode [ 160.739955][ T8805] sit0: left allmulticast mode [ 160.776640][ T8805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.792500][ T8802] wg1: entered promiscuous mode [ 160.797434][ T8802] wg1: entered allmulticast mode [ 160.902507][ T8814] loop4: detected capacity change from 0 to 8192 [ 160.925872][ T8808] loop1: detected capacity change from 0 to 128 [ 160.971536][ T8810] loop0: detected capacity change from 0 to 128 [ 161.111998][ T8808] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.142198][ T8810] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.168879][ T8810] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.181636][ T8808] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.447004][ T8817] ================================================================== [ 161.455273][ T8817] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 161.463469][ T8817] [ 161.465808][ T8817] write to 0xffff88811a454428 of 4 bytes by task 8814 on cpu 0: [ 161.473448][ T8817] __mark_inode_dirty+0x240/0x760 [ 161.478537][ T8817] mark_buffer_dirty+0x133/0x210 [ 161.483516][ T8817] block_write_end+0x12d/0x210 [ 161.488422][ T8817] generic_write_end+0x56/0x150 [ 161.493395][ T8817] fat_write_end+0x4f/0x160 [ 161.498245][ T8817] generic_perform_write+0x30f/0x490 [ 161.503576][ T8817] __generic_file_write_iter+0x9e/0x120 [ 161.509159][ T8817] generic_file_write_iter+0x8d/0x2f0 [ 161.514820][ T8817] iter_file_splice_write+0x5f2/0x970 [ 161.520337][ T8817] direct_splice_actor+0x153/0x2a0 [ 161.525565][ T8817] splice_direct_to_actor+0x30f/0x680 [ 161.531403][ T8817] do_splice_direct+0xda/0x150 [ 161.536226][ T8817] do_sendfile+0x380/0x650 [ 161.540687][ T8817] __x64_sys_sendfile64+0x105/0x150 [ 161.545923][ T8817] x64_sys_call+0x2bb0/0x2ff0 [ 161.550732][ T8817] do_syscall_64+0xd2/0x200 [ 161.555495][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.561420][ T8817] [ 161.563761][ T8817] read to 0xffff88811a454428 of 4 bytes by task 8817 on cpu 1: [ 161.571852][ T8817] __mark_inode_dirty+0x52/0x760 [ 161.576816][ T8817] fat_update_time+0x1ec/0x200 [ 161.581714][ T8817] touch_atime+0x145/0x340 [ 161.586345][ T8817] filemap_splice_read+0x629/0x6b0 [ 161.592224][ T8817] splice_direct_to_actor+0x26f/0x680 [ 161.597925][ T8817] do_splice_direct+0xda/0x150 [ 161.602720][ T8817] do_sendfile+0x380/0x650 [ 161.607260][ T8817] __x64_sys_sendfile64+0x105/0x150 [ 161.612579][ T8817] x64_sys_call+0x2bb0/0x2ff0 [ 161.617270][ T8817] do_syscall_64+0xd2/0x200 [ 161.621803][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.627904][ T8817] [ 161.630258][ T8817] value changed: 0x00000008 -> 0x00000038 [ 161.636004][ T8817] [ 161.638340][ T8817] Reported by Kernel Concurrency Sanitizer on: [ 161.644539][ T8817] CPU: 1 UID: 0 PID: 8817 Comm: syz.4.1742 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 161.656800][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.666867][ T8817] ================================================================== [ 161.708414][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.728505][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.