last executing test programs: 43.743634422s ago: executing program 1 (id=513): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 43.696981576s ago: executing program 1 (id=515): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x2, 0x0, 0x0) 43.611656422s ago: executing program 1 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 43.563634297s ago: executing program 1 (id=526): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 43.462650235s ago: executing program 1 (id=533): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 42.769815332s ago: executing program 1 (id=564): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xd0, &(0x7f0000000080)={0x0, 0x8b48, 0x2000, 0x1, 0x30a}, &(0x7f0000ff0000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 42.744135394s ago: executing program 32 (id=564): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xd0, &(0x7f0000000080)={0x0, 0x8b48, 0x2000, 0x1, 0x30a}, &(0x7f0000ff0000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 35.620612788s ago: executing program 4 (id=790): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="b8000000150001ee"], 0xb8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.566490602s ago: executing program 4 (id=793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 35.444396592s ago: executing program 4 (id=796): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) set_robust_list(&(0x7f0000000080)={0x0, 0x8000}, 0x18) 35.395665466s ago: executing program 4 (id=800): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 35.252324217s ago: executing program 4 (id=802): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141a42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./bus/file0\x00', 0x2a000, &(0x7f0000000580)={[{@nogrpid}], [{@fowner_lt={'fowner<', 0xee01}}]}, 0x5, 0x645, &(0x7f0000001040)="$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") io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040)="6a6301000000", 0x6, 0x0, 0x0, 0x0, r0}]) 34.704124322s ago: executing program 4 (id=814): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x4031, 0xffffffffffffffff, 0xffffe000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000706000/0x1000)=nil, 0x1000) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 34.669106405s ago: executing program 33 (id=814): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x4031, 0xffffffffffffffff, 0xffffe000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000706000/0x1000)=nil, 0x1000) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 29.406033927s ago: executing program 5 (id=966): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 29.383353419s ago: executing program 5 (id=968): timerfd_create(0x7, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2900}}, 0x1c}}, 0x0) 29.340764512s ago: executing program 5 (id=969): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="ea", 0x1, 0x2400c054, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) shutdown(r0, 0x1) 29.299408475s ago: executing program 5 (id=971): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) 29.154635097s ago: executing program 5 (id=974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {0x0, 0x3}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200007}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {0x5}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 29.00284477s ago: executing program 5 (id=979): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) 28.941828935s ago: executing program 34 (id=979): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) 1.060622794s ago: executing program 3 (id=1816): r0 = getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) 987.14821ms ago: executing program 3 (id=1819): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4f33}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 968.845552ms ago: executing program 3 (id=1822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 944.425294ms ago: executing program 3 (id=1823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000001a0000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 876.455109ms ago: executing program 3 (id=1824): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 718.220312ms ago: executing program 2 (id=1833): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000270001"], 0x50}}, 0x0) 681.463795ms ago: executing program 2 (id=1835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2c060000) unshare(0x2c020400) 604.568022ms ago: executing program 2 (id=1838): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)='\t\n', 0x2) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 562.912685ms ago: executing program 2 (id=1840): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce27"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 514.327769ms ago: executing program 7 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 513.721009ms ago: executing program 6 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 466.456842ms ago: executing program 7 (id=1843): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)={[{@dots}, {@fat=@fmask={'fmask', 0x3d, 0x40100}}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@flush}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@nodots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1000}, &(0x7f00000000c0)=0x8) 465.985993ms ago: executing program 2 (id=1844): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 400.539528ms ago: executing program 6 (id=1846): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@discard}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) stat(&(0x7f0000000100)='./file0\x00', 0x0) 376.16506ms ago: executing program 6 (id=1848): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 291.518267ms ago: executing program 7 (id=1851): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@cswp={0x58, 0x114, 0x7, {{0x7, 0x200}, &(0x7f0000000180)=0x10001, 0x0, 0x2, 0xcc7, 0x5, 0x6, 0x40}}], 0x58, 0x8040}, 0x0) 290.991467ms ago: executing program 0 (id=1852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpgid(0xffffffffffffffff, 0x0) 252.86425ms ago: executing program 6 (id=1853): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) 252.22641ms ago: executing program 7 (id=1854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @dev}]}}}}}}}}, 0x0) 218.483283ms ago: executing program 0 (id=1855): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 218.057023ms ago: executing program 7 (id=1856): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="5bebcadd20878cb0d8531ccbdac011e88a12caddaaddecbd8913bec392b2cf504db013a552faefa88296fe8e83840416de716d737923c065e8"], 0x1, 0x122e, &(0x7f0000002580)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 70.228335ms ago: executing program 0 (id=1861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 69.481925ms ago: executing program 2 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x2, &(0x7f00000007c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0xd, r1, &(0x7f0000000700)="c7828103709b", 0x6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}]) 526.14µs ago: executing program 3 (id=1863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 183.41µs ago: executing program 6 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00000a0000008d00000064c80f59004d110000000000000000000000000000000000ff020000000000000000000000000001"], 0x83) 0s ago: executing program 0 (id=1865): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) io_setup(0x6, &(0x7f0000000540)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) kernel console output (not intermixed with test programs): 7ffc0000 [ 46.980964][ T29] audit: type=1326 audit(1754049553.674:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb495d1eb69 code=0x7ffc0000 [ 47.004385][ T29] audit: type=1326 audit(1754049553.674:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb495d1eb69 code=0x7ffc0000 [ 47.027681][ T29] audit: type=1326 audit(1754049553.674:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb495d1eb69 code=0x7ffc0000 [ 47.051509][ T29] audit: type=1326 audit(1754049553.674:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb495d1eb69 code=0x7ffc0000 [ 47.051545][ T29] audit: type=1326 audit(1754049553.674:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb495d1eb69 code=0x7ffc0000 [ 47.051577][ T29] audit: type=1326 audit(1754049553.674:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb495d1eb69 code=0x7ffc0000 [ 47.310385][ C1] hrtimer: interrupt took 30713 ns [ 47.434050][ T4757] loop3: detected capacity change from 0 to 512 [ 47.445564][ T4757] EXT4-fs: Ignoring removed nobh option [ 47.455022][ T4757] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.466695][ T4757] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 47.476859][ T4757] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.471: Corrupt directory, running e2fsck is recommended [ 47.492219][ T4757] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 47.500700][ T4757] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.471: corrupted in-inode xattr: invalid ea_ino [ 47.515845][ T4757] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.471: couldn't read orphan inode 15 (err -117) [ 47.528414][ T4757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.550673][ T4765] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 47.602664][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.628259][ T4773] loop3: detected capacity change from 0 to 128 [ 47.679323][ T4775] team0: Port device team_slave_0 removed [ 47.870852][ T4811] loop3: detected capacity change from 0 to 128 [ 47.904969][ T4811] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 47.917938][ T4811] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.946088][ T4815] loop1: detected capacity change from 0 to 1024 [ 47.958012][ T4815] EXT4-fs: Ignoring removed i_version option [ 47.974568][ T4815] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.991649][ T4815] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.498: Invalid block bitmap block 0 in block_group 0 [ 48.010596][ T4815] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.498: Failed to acquire dquot type 0 [ 48.024898][ T4815] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.498: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.048211][ T4815] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.498: Invalid inode bitmap blk 0 in block_group 0 [ 48.062231][ T4815] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 48.071223][ T3626] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:55: Failed to release dquot type 0 [ 48.072748][ T4815] EXT4-fs (loop1): 1 orphan inode deleted [ 48.095130][ T4815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.109575][ T4815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.120589][ T4116] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.219992][ T4839] bond1: entered promiscuous mode [ 48.225237][ T4839] bond1: entered allmulticast mode [ 48.231890][ T4839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.243181][ T4839] bond1 (unregistering): Released all slaves [ 48.280205][ T4850] rdma_op ffff88811b73a180 conn xmit_rdma 0000000000000000 [ 48.300581][ T4848] SELinux: failed to load policy [ 48.351476][ T4856] syz.1.515 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.364398][ T4859] netlink: 'tÊhX ': attribute type 1 has an invalid length. [ 48.461713][ T4877] loop1: detected capacity change from 0 to 1024 [ 48.469055][ T4877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.481321][ T4877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.586831][ T3300] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 48.591781][ T4893] sctp: [Deprecated]: syz.3.531 (pid 4893) Use of int in max_burst socket option. [ 48.591781][ T4893] Use struct sctp_assoc_value instead [ 48.638248][ T3300] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 48.807750][ T4915] __nla_validate_parse: 8 callbacks suppressed [ 48.807767][ T4915] netlink: 7 bytes leftover after parsing attributes in process `syz.4.544'. [ 48.869581][ T4915] netlink: 7 bytes leftover after parsing attributes in process `syz.4.544'. [ 48.887088][ T4927] netlink: 3 bytes leftover after parsing attributes in process `syz.2.549'. [ 48.923570][ T4927] batadv1: entered promiscuous mode [ 48.929378][ T4927] batadv1: entered allmulticast mode [ 48.941935][ T4933] loop4: detected capacity change from 0 to 1024 [ 48.976550][ T4933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.989361][ T4933] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.009499][ T4933] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 49.025032][ T4933] EXT4-fs (loop4): Remounting filesystem read-only [ 49.031937][ T1837] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 49.058223][ T4933] syz.4.552 (4933) used greatest stack depth: 9080 bytes left [ 49.066897][ T4937] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 49.075460][ T4937] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 49.085565][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.125183][ T264] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.126367][ T4948] loop2: detected capacity change from 0 to 1024 [ 49.191934][ T4956] loop0: detected capacity change from 0 to 2048 [ 49.200316][ T4889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.218894][ T264] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.234049][ T4956] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.562: bad orphan inode 61 [ 49.266288][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.286226][ T264] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.377284][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.391383][ T264] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.408118][ T4978] loop3: detected capacity change from 0 to 512 [ 49.420854][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 49.457525][ T4978] EXT4-fs: Ignoring removed bh option [ 49.483955][ T4989] loop9: detected capacity change from 0 to 7 [ 49.485789][ T264] bridge_slave_1: left allmulticast mode [ 49.491914][ T4978] EXT4-fs: Mount option(s) incompatible with ext3 [ 49.495761][ T264] bridge_slave_1: left promiscuous mode [ 49.495915][ T264] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.512841][ T4989] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.526027][ T4989] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.533968][ T4989] loop9: unable to read partition table [ 49.540248][ T4989] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 49.540248][ T4989] ) failed (rc=-5) [ 49.554499][ T264] bridge_slave_0: left allmulticast mode [ 49.560329][ T264] bridge_slave_0: left promiscuous mode [ 49.566244][ T264] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.672713][ T264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.690750][ T264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.708790][ T264] bond0 (unregistering): Released all slaves [ 49.724170][ T4987] syzkaller1: entered promiscuous mode [ 49.729769][ T4987] syzkaller1: entered allmulticast mode [ 49.808601][ T264] hsr_slave_0: left promiscuous mode [ 49.823589][ T264] hsr_slave_1: left promiscuous mode [ 49.829517][ T264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.829663][ T5007] loop3: detected capacity change from 0 to 128 [ 49.837090][ T264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.870252][ T264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.877777][ T264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.888925][ T5007] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.910402][ T5007] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.928200][ T264] veth1_macvtap: left promiscuous mode [ 49.970120][ T264] veth0_macvtap: left promiscuous mode [ 49.996296][ T264] veth1_vlan: left promiscuous mode [ 50.001710][ T264] veth0_vlan: left promiscuous mode [ 50.018198][ T4116] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.252930][ T264] team0 (unregistering): Port device team_slave_1 removed [ 50.422608][ T5029] loop4: detected capacity change from 0 to 128 [ 50.441829][ T4968] chnl_net:caif_netlink_parms(): no params data found [ 50.491534][ T5036] SELinux: failed to load policy [ 50.608250][ T4968] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.615540][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.625925][ T4968] bridge_slave_0: entered allmulticast mode [ 50.627202][ T5048] netlink: 3 bytes leftover after parsing attributes in process `syz.3.599'. [ 50.632794][ T4968] bridge_slave_0: entered promiscuous mode [ 50.661990][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.669163][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.678675][ T4968] bridge_slave_1: entered allmulticast mode [ 50.688313][ T4968] bridge_slave_1: entered promiscuous mode [ 50.699444][ T5048] batadv1: entered promiscuous mode [ 50.704803][ T5048] batadv1: entered allmulticast mode [ 50.741186][ T5054] bridge0: port 3(vlan2) entered blocking state [ 50.747641][ T5054] bridge0: port 3(vlan2) entered disabled state [ 50.757187][ T5054] vlan2: entered allmulticast mode [ 50.762362][ T5054] bridge0: entered allmulticast mode [ 50.769557][ T5054] vlan2: left allmulticast mode [ 50.774587][ T5054] bridge0: left allmulticast mode [ 50.801771][ T4968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.817492][ T4968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.854944][ T4968] team0: Port device team_slave_0 added [ 50.870465][ T4968] team0: Port device team_slave_1 added [ 50.894331][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.901468][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.927872][ T4968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.939030][ T5064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 50.948044][ T5064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 50.954603][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.964138][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.990103][ T4968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.990770][ T5064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 51.028072][ T5064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 51.037335][ T5064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 51.064008][ T4968] hsr_slave_0: entered promiscuous mode [ 51.075357][ T4968] hsr_slave_1: entered promiscuous mode [ 51.088430][ T4968] debugfs: 'hsr0' already exists in 'hsr' [ 51.094261][ T4968] Cannot create hsr debugfs directory [ 51.188054][ T5085] loop2: detected capacity change from 0 to 128 [ 51.196668][ T5087] loop3: detected capacity change from 0 to 512 [ 51.197619][ T5085] EXT4-fs: Ignoring removed nobh option [ 51.225489][ T5085] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.239719][ T5087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.264969][ T4968] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.272047][ T5087] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.282731][ T5085] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.297510][ T4968] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.329141][ T4968] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.343172][ T5087] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.613: corrupted inode contents [ 51.356645][ T5087] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.613: mark_inode_dirty error [ 51.374968][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.384688][ T4968] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.391713][ T5087] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.613: corrupted inode contents [ 51.404612][ T5087] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.613: mark_inode_dirty error [ 51.445989][ T4968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.458968][ T5087] EXT4-fs error (device loop3): ext4_get_first_dir_block:3544: inode #18: comm syz.3.613: directory missing '.' [ 51.473303][ T4968] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.479326][ T5109] sd 0:0:1:0: device reset [ 51.484239][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.492388][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.525385][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.532621][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.563187][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.611697][ T4968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.686879][ T5126] hub 6-0:1.0: USB hub found [ 51.694970][ T5126] hub 6-0:1.0: 8 ports detected [ 51.725801][ T4968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.859855][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 51.859873][ T29] audit: type=1400 audit(1754049558.584:760): avc: denied { mount } for pid=5161 comm="syz.3.640" name="/" dev="configfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 51.891911][ T29] audit: type=1400 audit(1754049558.594:761): avc: denied { search } for pid=5161 comm="syz.3.640" name="/" dev="configfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.914604][ T29] audit: type=1400 audit(1754049558.594:762): avc: denied { search } for pid=5161 comm="syz.3.640" name="/" dev="configfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.936840][ T29] audit: type=1400 audit(1754049558.594:763): avc: denied { read open } for pid=5161 comm="syz.3.640" path="/" dev="configfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.973996][ T5169] loop9: detected capacity change from 0 to 7 [ 51.992022][ T29] audit: type=1400 audit(1754049558.694:764): avc: denied { append } for pid=5166 comm="syz.0.641" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.998354][ T5169] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.015165][ T29] audit: type=1400 audit(1754049558.714:765): avc: denied { read write } for pid=5173 comm="syz.3.644" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.045137][ T4968] veth0_vlan: entered promiscuous mode [ 52.046772][ T29] audit: type=1400 audit(1754049558.714:766): avc: denied { open } for pid=5173 comm="syz.3.644" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.056902][ T4968] veth1_vlan: entered promiscuous mode [ 52.096384][ T5169] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.104617][ T5169] loop9: unable to read partition table [ 52.127772][ T5169] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 52.127772][ T5169] ) failed (rc=-5) [ 52.144188][ T29] audit: type=1326 audit(1754049558.844:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 52.147171][ T4968] veth0_macvtap: entered promiscuous mode [ 52.167624][ T29] audit: type=1326 audit(1754049558.844:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 52.196681][ T29] audit: type=1326 audit(1754049558.844:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 52.226604][ T4968] veth1_macvtap: entered promiscuous mode [ 52.239875][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.255261][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.285277][ T3583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.289870][ T5185] loop4: detected capacity change from 0 to 128 [ 52.307719][ T3583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.321098][ T5185] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.339373][ T3583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.347787][ T5185] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.359725][ T3583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.450525][ T5196] loop5: detected capacity change from 0 to 164 [ 52.459980][ T5195] loop3: detected capacity change from 0 to 512 [ 52.467529][ T5195] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.468239][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.488803][ T5196] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.503331][ T5195] EXT4-fs (loop3): 1 truncate cleaned up [ 52.511637][ T5195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.541068][ T5196] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.551832][ T5203] loop0: detected capacity change from 0 to 128 [ 52.559012][ T5203] EXT4-fs: Ignoring removed nobh option [ 52.569029][ T5203] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.570000][ T5196] Symlink component flag not implemented [ 52.587039][ T5196] Symlink component flag not implemented [ 52.593424][ T5196] Symlink component flag not implemented (7) [ 52.598898][ T5203] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.599478][ T5196] Symlink component flag not implemented (116) [ 52.629346][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.666096][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.741525][ T5222] loop5: detected capacity change from 0 to 128 [ 52.760785][ T5228] netlink: 'syz.3.666': attribute type 12 has an invalid length. [ 52.768150][ T5230] loop0: detected capacity change from 0 to 512 [ 52.781794][ T5230] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.812715][ T5230] EXT4-fs (loop0): 1 truncate cleaned up [ 52.818982][ T5230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.858345][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.966069][ T5251] netlink: 'syz.5.676': attribute type 3 has an invalid length. [ 52.978199][ T5253] netlink: 'syz.0.679': attribute type 3 has an invalid length. [ 52.995537][ T5251] netlink: 'syz.5.676': attribute type 3 has an invalid length. [ 53.075421][ T5261] loop4: detected capacity change from 0 to 512 [ 53.127829][ T5261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.159527][ T5277] random: crng reseeded on system resumption [ 53.188560][ T5261] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.189537][ T5277] Restarting kernel threads ... [ 53.210975][ T5261] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.683: corrupted inode contents [ 53.224964][ T5277] Done restarting kernel threads. [ 53.258045][ T5261] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.683: mark_inode_dirty error [ 53.285803][ T5261] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.683: corrupted inode contents [ 53.301641][ T5261] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.683: mark_inode_dirty error [ 53.336971][ T5261] EXT4-fs error (device loop4): ext4_get_first_dir_block:3544: inode #18: comm syz.4.683: directory missing '.' [ 53.366263][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.459979][ T5309] bridge0: port 3(dummy0) entered disabled state [ 53.466498][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.473962][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.483496][ T5317] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 53.541347][ T5309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.556547][ T5309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.590603][ T3595] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.606784][ T5314] bridge0: port 3(vlan2) entered blocking state [ 53.615802][ T5314] bridge0: port 3(vlan2) entered disabled state [ 53.627089][ T5314] vlan2: entered allmulticast mode [ 53.632316][ T5314] bridge0: entered allmulticast mode [ 53.638716][ T5314] vlan2: left allmulticast mode [ 53.643842][ T5314] bridge0: left allmulticast mode [ 53.657689][ T3595] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.673071][ T3595] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.695419][ T3595] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.710433][ T3595] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.719608][ T3595] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.730184][ T3595] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.739175][ T3595] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.755681][ T3595] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.764641][ T3595] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.765961][ T5334] loop5: detected capacity change from 0 to 512 [ 53.775992][ T3595] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.789040][ T3595] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.819942][ T5334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.833132][ T5334] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.848263][ T5334] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.711: corrupted inode contents [ 53.860781][ T5334] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.711: mark_inode_dirty error [ 53.874704][ T5334] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.711: corrupted inode contents [ 53.897747][ T5334] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.711: mark_inode_dirty error [ 53.914513][ T5334] EXT4-fs error (device loop5): ext4_get_first_dir_block:3544: inode #18: comm syz.5.711: directory missing '.' [ 53.939939][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.340074][ T5374] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 54.384873][ T5379] loop5: detected capacity change from 0 to 512 [ 54.399015][ T5379] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.410628][ T5379] EXT4-fs (loop5): 1 truncate cleaned up [ 54.416855][ T5379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.467751][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.635441][ T5408] __nla_validate_parse: 21 callbacks suppressed [ 54.635464][ T5408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.743'. [ 54.743247][ T5421] loop0: detected capacity change from 0 to 512 [ 54.767032][ T5421] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.768175][ T5419] SELinux: policydb version 280 does not match my version range 15-35 [ 54.793667][ T5421] EXT4-fs (loop0): 1 truncate cleaned up [ 54.814805][ T5421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.871890][ T5419] SELinux: failed to load policy [ 54.912120][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.926988][ T5429] 9pnet: p9_errstr2errno: server reported unknown error tat [ 54.952047][ T5431] loop3: detected capacity change from 0 to 164 [ 54.965698][ T5431] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.983865][ T5431] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.002677][ T5431] Symlink component flag not implemented [ 55.008536][ T5431] Symlink component flag not implemented [ 55.015200][ T5431] Symlink component flag not implemented (7) [ 55.021219][ T5431] Symlink component flag not implemented (116) [ 55.099517][ T5444] loop5: detected capacity change from 0 to 512 [ 55.116949][ T5444] EXT4-fs: Ignoring removed nobh option [ 55.126000][ T5444] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.137778][ T5444] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 55.148063][ T5444] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.760: Corrupt directory, running e2fsck is recommended [ 55.161934][ T5444] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 55.170704][ T5444] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.760: corrupted in-inode xattr: invalid ea_ino [ 55.185137][ T5444] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.760: couldn't read orphan inode 15 (err -117) [ 55.197634][ T5444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.228637][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.259139][ T5451] loop4: detected capacity change from 0 to 128 [ 55.296387][ T5451] bio_check_eod: 12862 callbacks suppressed [ 55.296435][ T5451] syz.4.762: attempt to access beyond end of device [ 55.296435][ T5451] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 55.329201][ T3583] kworker/u8:14: attempt to access beyond end of device [ 55.329201][ T3583] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 55.365128][ T5465] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 55.587519][ T5475] loop0: detected capacity change from 0 to 164 [ 55.596695][ T5475] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.609597][ T5475] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.620691][ T5475] Symlink component flag not implemented [ 55.626544][ T5475] Symlink component flag not implemented [ 55.633423][ T5475] Symlink component flag not implemented (7) [ 55.639475][ T5475] Symlink component flag not implemented (116) [ 56.333828][ T5520] netlink: 'tÊhX ': attribute type 1 has an invalid length. [ 56.410512][ T5532] loop2: detected capacity change from 0 to 164 [ 56.418337][ T5532] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.436118][ T5532] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.450554][ T5532] Symlink component flag not implemented [ 56.456611][ T5532] Symlink component flag not implemented [ 56.463979][ T5532] Symlink component flag not implemented (7) [ 56.470023][ T5532] Symlink component flag not implemented (116) [ 56.540266][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 56.600408][ T5563] lo speed is unknown, defaulting to 1000 [ 56.612229][ T5563] lo speed is unknown, defaulting to 1000 [ 56.622383][ T5563] lo speed is unknown, defaulting to 1000 [ 56.629345][ T5563] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 56.641534][ T5569] loop4: detected capacity change from 0 to 1024 [ 56.652055][ T5569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.661579][ T5563] lo speed is unknown, defaulting to 1000 [ 56.680561][ T5563] lo speed is unknown, defaulting to 1000 [ 56.687458][ T5563] lo speed is unknown, defaulting to 1000 [ 56.694000][ T5563] lo speed is unknown, defaulting to 1000 [ 56.696955][ T5569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.700410][ T5563] lo speed is unknown, defaulting to 1000 [ 56.768595][ T3301] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 56.799052][ T3301] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 56.822954][ T5588] netlink: 108 bytes leftover after parsing attributes in process `syz.3.804'. [ 56.832005][ T5588] netlink: 108 bytes leftover after parsing attributes in process `syz.3.804'. [ 56.841173][ T5588] netlink: 108 bytes leftover after parsing attributes in process `syz.3.804'. [ 56.898761][ T5592] loop0: detected capacity change from 0 to 2048 [ 56.926788][ T5592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.959177][ T3511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.988186][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 56.988204][ T29] audit: type=1400 audit(1754049563.714:942): avc: denied { add_name } for pid=5591 comm="syz.0.805" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.015048][ T29] audit: type=1400 audit(1754049563.714:943): avc: denied { create } for pid=5591 comm="syz.0.805" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.038171][ T29] audit: type=1400 audit(1754049563.764:944): avc: denied { read write } for pid=5591 comm="syz.0.805" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.060850][ T29] audit: type=1400 audit(1754049563.764:945): avc: denied { open } for pid=5591 comm="syz.0.805" path="/147/control/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.085050][ T29] audit: type=1400 audit(1754049563.814:946): avc: denied { create } for pid=5607 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.105868][ T29] audit: type=1400 audit(1754049563.834:947): avc: denied { bind } for pid=5607 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.125231][ T29] audit: type=1400 audit(1754049563.834:948): avc: denied { write } for pid=5607 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.147808][ T3583] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 57.163660][ T3583] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.176256][ T3583] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.176256][ T3583] [ 57.186063][ T3583] EXT4-fs (loop0): Total free blocks count 0 [ 57.192076][ T3583] EXT4-fs (loop0): Free/Dirty block details [ 57.198086][ T3583] EXT4-fs (loop0): free_blocks=4096 [ 57.203444][ T3583] EXT4-fs (loop0): dirty_blocks=16 [ 57.208766][ T3583] EXT4-fs (loop0): Block reservation details [ 57.215570][ T3583] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 57.223019][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.232128][ T29] audit: type=1400 audit(1754049563.954:949): avc: denied { create } for pid=5611 comm="syz.5.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.251650][ T29] audit: type=1400 audit(1754049563.954:950): avc: denied { write } for pid=5611 comm="syz.5.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.274070][ T29] audit: type=1326 audit(1754049564.004:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.0.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 57.331594][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.338868][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.407477][ T5610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.430112][ T5610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.523991][ T5637] loop2: detected capacity change from 0 to 1024 [ 57.534827][ T3583] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.546235][ T5637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.557562][ T3583] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.574167][ T3583] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.601554][ T5637] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.607809][ T3583] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.625412][ T5637] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 57.641966][ T5637] EXT4-fs (loop2): Remounting filesystem read-only [ 57.652498][ T3584] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 57.673691][ T5637] syz.2.822 (5637) used greatest stack depth: 8984 bytes left [ 57.707253][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.747767][ T5623] lo speed is unknown, defaulting to 1000 [ 57.784876][ T3595] dummy0: left allmulticast mode [ 57.789928][ T3595] dummy0: left promiscuous mode [ 57.794996][ T3595] bridge0: port 3(dummy0) entered disabled state [ 57.801972][ T3595] bridge_slave_1: left allmulticast mode [ 57.807893][ T3595] bridge_slave_1: left promiscuous mode [ 57.813701][ T3595] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.821723][ T3595] bridge_slave_0: left allmulticast mode [ 57.827442][ T3595] bridge_slave_0: left promiscuous mode [ 57.833386][ T3595] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.885944][ T3595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.895280][ T5667] loop2: detected capacity change from 0 to 1764 [ 57.902056][ T3595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.911520][ T3595] bond0 (unregistering): Released all slaves [ 57.960449][ T5623] chnl_net:caif_netlink_parms(): no params data found [ 57.964255][ T5673] loop2: detected capacity change from 0 to 164 [ 57.975079][ T5673] Unable to read rock-ridge attributes [ 57.980684][ T3595] hsr_slave_0: left promiscuous mode [ 57.987548][ T3595] hsr_slave_1: left promiscuous mode [ 57.993382][ T3595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.001066][ T3595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.038915][ T3595] team0 (unregistering): Port device team_slave_1 removed [ 58.049768][ T3595] team0 (unregistering): Port device team_slave_0 removed [ 58.133215][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.140431][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.147815][ T5623] bridge_slave_0: entered allmulticast mode [ 58.154602][ T5623] bridge_slave_0: entered promiscuous mode [ 58.161639][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.168893][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.176211][ T5623] bridge_slave_1: entered allmulticast mode [ 58.182944][ T5623] bridge_slave_1: entered promiscuous mode [ 58.205304][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.216890][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.240880][ T5623] team0: Port device team_slave_0 added [ 58.265890][ T5623] team0: Port device team_slave_1 added [ 58.281846][ T5683] netlink: 3 bytes leftover after parsing attributes in process `syz.5.836'. [ 58.296894][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.303972][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.330156][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.353864][ T5683] batadv1: entered promiscuous mode [ 58.359138][ T5683] batadv1: entered allmulticast mode [ 58.377275][ T5685] loop0: detected capacity change from 0 to 1024 [ 58.387128][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.394249][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.420237][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.432581][ T5685] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.462282][ T5623] hsr_slave_0: entered promiscuous mode [ 58.462282][ T5685] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 58.468646][ T5623] hsr_slave_1: entered promiscuous mode [ 58.488813][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 58.493320][ T5685] EXT4-fs (loop0): Remounting filesystem read-only [ 58.494585][ T5623] Cannot create hsr debugfs directory [ 58.514647][ T3616] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 58.570531][ T5690] loop0: detected capacity change from 0 to 512 [ 58.650354][ T5698] loop5: detected capacity change from 0 to 128 [ 58.655873][ T5623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 58.665850][ T5698] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.678637][ T5623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 58.709233][ T5623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 58.752647][ T5623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 58.861898][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.900641][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.928069][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.935209][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.971658][ T5623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.982465][ T5623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.003639][ T5728] netlink: 664 bytes leftover after parsing attributes in process `syz.3.853'. [ 59.018982][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.026136][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.106741][ T5742] loop0: detected capacity change from 0 to 128 [ 59.124774][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.158881][ T5742] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.260009][ T5753] siw: device registration error -23 [ 59.315541][ T5759] loop0: detected capacity change from 0 to 164 [ 59.343640][ T5759] Unable to read rock-ridge attributes [ 59.401710][ T5766] loop0: detected capacity change from 0 to 1764 [ 59.446790][ T5623] veth0_vlan: entered promiscuous mode [ 59.469563][ T5623] veth1_vlan: entered promiscuous mode [ 59.508537][ T5623] veth0_macvtap: entered promiscuous mode [ 59.538199][ T5623] veth1_macvtap: entered promiscuous mode [ 59.559031][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.581099][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.605202][ T3583] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.634194][ T3583] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.665000][ T3583] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.677496][ T5793] siw: device registration error -23 [ 59.692694][ T3584] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.718161][ T5796] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 59.748341][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.755864][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.763315][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.770740][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.778204][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.785632][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.793148][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.800554][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.808048][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.815501][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.822953][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.830362][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.837882][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.845372][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.852858][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.860447][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.868083][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.875610][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.883435][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.890900][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.898720][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.906248][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.913711][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.921305][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.928834][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.936473][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.944067][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.951580][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.959128][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.966648][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.974124][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.981646][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.989274][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 59.996742][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 60.004237][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 60.011996][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 60.019457][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 60.027093][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 60.034768][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 60.042181][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 60.049668][ T3375] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 60.059735][ T3375] hid-generic 09E2:0099:0005.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 60.096137][ T5805] netlink: 5 bytes leftover after parsing attributes in process `syz.3.874'. [ 60.117562][ T5805] 0ªX¹¦D: renamed from gretap0 [ 60.124953][ T5805] 0ªX¹¦D: entered allmulticast mode [ 60.131688][ T5805] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 60.230194][ T5813] lo speed is unknown, defaulting to 1000 [ 60.661222][ T5841] loop5: detected capacity change from 0 to 1024 [ 60.734247][ T5847] loop3: detected capacity change from 0 to 4096 [ 60.756832][ T5847] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.892: corrupted inode contents [ 60.776899][ T5847] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.892: mark_inode_dirty error [ 60.803150][ T5847] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.892: corrupted inode contents [ 60.815257][ T5847] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.892: mark_inode_dirty error [ 60.829010][ T5847] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.892: corrupted inode contents [ 60.844375][ T5847] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.892: mark_inode_dirty error [ 60.865375][ T5856] usb usb5: usbfs: process 5856 (syz.6.896) did not claim interface 0 before use [ 60.882725][ T5847] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.892: corrupted inode contents [ 60.900687][ T5847] EXT4-fs error (device loop3): ext4_truncate:4666: inode #15: comm syz.3.892: mark_inode_dirty error [ 60.960807][ T5847] EXT4-fs error (device loop3): ext4_evict_inode:265: comm syz.3.892: couldn't truncate inode 15 (err -117) [ 61.037452][ T5871] netlink: 28 bytes leftover after parsing attributes in process `syz.6.904'. [ 61.322117][ T5905] loop6: detected capacity change from 0 to 512 [ 61.341539][ T5905] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.353236][ T5903] SELinux: failed to load policy [ 61.363904][ T5907] vlan2: entered allmulticast mode [ 61.371865][ T5905] EXT4-fs (loop6): 1 truncate cleaned up [ 61.447822][ T5915] netlink: 'syz.3.923': attribute type 21 has an invalid length. [ 61.460788][ T5915] netlink: 132 bytes leftover after parsing attributes in process `syz.3.923'. [ 61.470537][ T5917] SELinux: security_context_str_to_sid () failed with errno=-22 [ 61.541740][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.549580][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.557046][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.567251][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.574766][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.582747][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.590447][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.597921][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.605443][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.613014][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.620526][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.628043][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.635536][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.645255][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.652729][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.660172][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.667680][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.675230][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.682779][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.690280][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.697821][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.705453][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.712885][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.720307][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.727870][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.735311][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.742796][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.750216][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.762179][ T3375] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 61.803216][ T5923] Falling back ldisc for ttyS3. [ 61.839958][ T5938] loop3: detected capacity change from 0 to 512 [ 61.862073][ T5938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.880201][ T5947] Driver unsupported XDP return value 0 on prog (id 640) dev N/A, expect packet loss! [ 61.895271][ T5938] EXT4-fs (loop3): 1 truncate cleaned up [ 61.999474][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 61.999492][ T29] audit: type=1400 audit(1754049568.724:1121): avc: denied { getopt } for pid=5958 comm="syz.6.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.052522][ T5965] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 62.061101][ T29] audit: type=1326 audit(1754049568.784:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.084592][ T29] audit: type=1326 audit(1754049568.784:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.108017][ T29] audit: type=1326 audit(1754049568.784:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.131429][ T29] audit: type=1326 audit(1754049568.784:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.154819][ T29] audit: type=1326 audit(1754049568.784:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.174312][ T5969] loop2: detected capacity change from 0 to 1024 [ 62.178342][ T29] audit: type=1326 audit(1754049568.784:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.185049][ T5969] EXT4-fs: Ignoring removed orlov option [ 62.208006][ T29] audit: type=1326 audit(1754049568.784:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.208393][ T29] audit: type=1326 audit(1754049568.814:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.261164][ T29] audit: type=1326 audit(1754049568.814:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 62.291549][ T5973] netlink: 'syz.0.949': attribute type 29 has an invalid length. [ 62.300650][ T5973] netlink: 'syz.0.949': attribute type 29 has an invalid length. [ 62.309670][ T5973] netlink: 480 bytes leftover after parsing attributes in process `syz.0.949'. [ 62.340087][ T5977] loop6: detected capacity change from 0 to 1024 [ 62.348486][ T5977] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 62.437358][ T5986] loop6: detected capacity change from 0 to 8192 [ 62.649555][ T6011] loop2: detected capacity change from 0 to 1024 [ 62.663231][ T6011] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 62.733120][ T6019] loop5: detected capacity change from 0 to 512 [ 62.749906][ T6019] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.767203][ T6019] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.822454][ T6019] loop5: detected capacity change from 512 to 64 [ 62.830496][ T6019] EXT4-fs warning (device loop5): ext4_read_inode_bitmap:148: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 63.015055][ T3584] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.025513][ T3584] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.105394][ T3584] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.115829][ T3584] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.187759][ T3584] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.198204][ T3584] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.248286][ T3584] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.258984][ T3584] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.259114][ T6051] loop2: detected capacity change from 0 to 512 [ 63.296242][ T6051] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.302976][ T6051] EXT4-fs: Ignoring removed bh option [ 63.323354][ T6057] bridge0: entered allmulticast mode [ 63.334985][ T6040] lo speed is unknown, defaulting to 1000 [ 63.346627][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 63.355700][ T6051] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.363381][ T6057] bridge_slave_1: left allmulticast mode [ 63.371412][ T6057] bridge_slave_1: left promiscuous mode [ 63.377162][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.385158][ T6057] bridge_slave_0: left allmulticast mode [ 63.385252][ T6051] EXT4-fs (loop2): 1 truncate cleaned up [ 63.390895][ T6057] bridge_slave_0: left promiscuous mode [ 63.391027][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.435754][ T6057] bridge0 (unregistering): left allmulticast mode [ 63.533454][ T3584] bridge_slave_1: left allmulticast mode [ 63.539253][ T3584] bridge_slave_1: left promiscuous mode [ 63.545063][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.556025][ T3584] bridge_slave_0: left allmulticast mode [ 63.561713][ T3584] bridge_slave_0: left promiscuous mode [ 63.567539][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.592757][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.993'. [ 63.686702][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.704324][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.723364][ T3584] bond0 (unregistering): Released all slaves [ 63.737780][ T6074] netlink: 96 bytes leftover after parsing attributes in process `syz.3.992'. [ 63.767620][ T3584] hsr_slave_0: left promiscuous mode [ 63.780161][ T3584] hsr_slave_1: left promiscuous mode [ 63.785979][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.793579][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.801413][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.808905][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.821008][ T3584] veth1_macvtap: left promiscuous mode [ 63.826826][ T3584] veth0_macvtap: left promiscuous mode [ 63.832711][ T3584] veth1_vlan: left promiscuous mode [ 63.838008][ T3584] veth0_vlan: left promiscuous mode [ 63.846846][ T6089] netlink: 'syz.2.997': attribute type 1 has an invalid length. [ 63.970490][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 63.980982][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 64.071948][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 64.170826][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.178163][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.220100][ T6040] bridge_slave_0: entered allmulticast mode [ 64.240896][ T6040] bridge_slave_0: entered promiscuous mode [ 64.264023][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.271168][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.299848][ T6040] bridge_slave_1: entered allmulticast mode [ 64.313104][ T6040] bridge_slave_1: entered promiscuous mode [ 64.379808][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.402910][ T6147] loop6: detected capacity change from 0 to 128 [ 64.414108][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.467909][ T6040] team0: Port device team_slave_0 added [ 64.493434][ T6040] team0: Port device team_slave_1 added [ 64.504277][ T6154] syz.6.1017: attempt to access beyond end of device [ 64.504277][ T6154] loop6: rw=0, sector=97, nr_sectors = 120 limit=128 [ 64.534214][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.541223][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.567834][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.588992][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.596020][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.622048][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.660022][ T3584] kworker/u8:15: attempt to access beyond end of device [ 64.660022][ T3584] loop6: rw=1, sector=217, nr_sectors = 824 limit=128 [ 64.690692][ T6164] bond1: entered promiscuous mode [ 64.695963][ T6164] bond1: entered allmulticast mode [ 64.705608][ T6164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.713584][ T6167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1026'. [ 64.739352][ T6164] bond1 (unregistering): Released all slaves [ 64.752372][ T6040] hsr_slave_0: entered promiscuous mode [ 64.759194][ T6040] hsr_slave_1: entered promiscuous mode [ 64.766046][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 64.766508][ T6040] debugfs: 'hsr0' already exists in 'hsr' [ 64.780792][ T6040] Cannot create hsr debugfs directory [ 64.911734][ T6040] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 64.933686][ T6040] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 64.955721][ T6040] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 64.976228][ T6040] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 65.010283][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.015955][ T6208] loop2: detected capacity change from 0 to 512 [ 65.017495][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.031097][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.038292][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.068633][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.085892][ T6208] EXT4-fs: Ignoring removed orlov option [ 65.091729][ T6208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.095822][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.107377][ T6208] EXT4-fs (loop2): can't enable nombcache during remount [ 65.116232][ T3595] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.133223][ T3595] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.156096][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.163321][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.174088][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.181185][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.210685][ T6220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6220 comm=syz.2.1041 [ 65.286254][ T6231] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 65.295673][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.361684][ T6243] ªªªªª: renamed from vlan1 (while UP) [ 65.467558][ T6040] veth0_vlan: entered promiscuous mode [ 65.476649][ T6040] veth1_vlan: entered promiscuous mode [ 65.494846][ T6040] veth0_macvtap: entered promiscuous mode [ 65.502312][ T6040] veth1_macvtap: entered promiscuous mode [ 65.514879][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.527810][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.541620][ T3616] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.556531][ T3616] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.584025][ T3616] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.596800][ T3616] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.706991][ T6290] loop7: detected capacity change from 0 to 2048 [ 65.767323][ T6290] loop7: p2 p3 p7 [ 65.829713][ T6299] loop3: detected capacity change from 0 to 512 [ 65.840190][ T6299] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 66.113779][ T3616] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 66.217503][ T6329] loop7: detected capacity change from 0 to 512 [ 66.254201][ T6329] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 66.670302][ T3616] nci: nci_rx_work: unknown MT 0x6 [ 67.283449][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 67.283465][ T29] audit: type=1400 audit(67.187:1368): avc: denied { relabelfrom } for pid=6393 comm=",&#^%" name="NETLINK" dev="sockfs" ino=15624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.312969][ T29] audit: type=1400 audit(67.187:1369): avc: denied { relabelto } for pid=6393 comm=",&#^%" name="NETLINK" dev="sockfs" ino=15624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 67.337344][ T29] audit: type=1326 audit(67.217:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 67.360187][ T29] audit: type=1326 audit(67.217:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 67.383284][ T29] audit: type=1326 audit(67.227:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 67.406294][ T29] audit: type=1326 audit(67.227:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 67.429439][ T29] audit: type=1326 audit(67.227:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 67.452416][ T29] audit: type=1326 audit(67.227:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 67.475540][ T29] audit: type=1326 audit(67.227:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 67.498782][ T29] audit: type=1326 audit(67.227:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea930eb69 code=0x7ffc0000 [ 67.709910][ T6427] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 67.726062][ T6431] loop2: detected capacity change from 0 to 164 [ 67.746108][ T6427] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 67.755409][ T6431] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.763039][ T6427] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 67.768446][ T6431] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.785614][ T6427] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 67.867751][ T6443] vhci_hcd: invalid port number 96 [ 67.873181][ T6443] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 68.145244][ T6461] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1143'. [ 68.271782][ T6471] bond1: entered promiscuous mode [ 68.276911][ T6471] bond1: entered allmulticast mode [ 68.284212][ T6471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.312851][ T6471] bond1 (unregistering): Released all slaves [ 68.475713][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 68.533868][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 68.586525][ T6509] loop2: detected capacity change from 0 to 512 [ 68.612327][ T6507] syzkaller1: entered promiscuous mode [ 68.617930][ T6507] syzkaller1: entered allmulticast mode [ 68.655614][ T6509] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1161: casefold flag without casefold feature [ 68.679980][ T6509] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1161: couldn't read orphan inode 15 (err -117) [ 68.746775][ T6520] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1165'. [ 68.766266][ T6522] loop0: detected capacity change from 0 to 512 [ 68.777714][ T6494] loop3: detected capacity change from 0 to 32768 [ 68.789787][ T6522] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1166: bad orphan inode 15 [ 68.816954][ T6522] ext4_test_bit(bit=14, block=5) = 0 [ 68.843566][ T6494] loop3: p1 p3 < > [ 68.870177][ T6533] loop2: detected capacity change from 0 to 128 [ 68.901312][ T6539] netlink: 'syz.7.1174': attribute type 10 has an invalid length. [ 68.944178][ T6539] team0 (unregistering): Port device team_slave_0 removed [ 68.964841][ T6539] team0 (unregistering): Port device team_slave_1 removed [ 69.096235][ T6557] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1182'. [ 69.439368][ T6583] netlink: 'syz.3.1194': attribute type 21 has an invalid length. [ 69.461071][ T6587] loop6: detected capacity change from 0 to 512 [ 69.505466][ T6587] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 69.522025][ T6595] loop3: detected capacity change from 0 to 1024 [ 69.536149][ T6587] EXT4-fs (loop6): 1 orphan inode deleted [ 69.541967][ T6587] EXT4-fs (loop6): 1 truncate cleaned up [ 69.549022][ T6594] loop0: detected capacity change from 0 to 512 [ 69.557951][ T6587] EXT4-fs mount: 30 callbacks suppressed [ 69.557972][ T6587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.582270][ T6594] EXT4-fs (loop0): too many log groups per flexible block group [ 69.590072][ T6594] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 69.593312][ T6587] Invalid ELF header len 1 [ 69.597539][ T6595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.602556][ T6594] EXT4-fs (loop0): mount failed [ 69.635500][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.668970][ T5623] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.742508][ T2956] kernel write not supported for file bpf-prog (pid: 2956 comm: kworker/0:2) [ 69.871842][ T6640] loop2: detected capacity change from 0 to 2048 [ 69.916486][ T6640] loop2: p1 < > p4 [ 69.921487][ T6640] loop2: p4 size 8388608 extends beyond EOD, truncated [ 69.930514][ T6648] capability: warning: `syz.6.1223' uses deprecated v2 capabilities in a way that may be insecure [ 69.948440][ T6654] loop3: detected capacity change from 0 to 512 [ 69.964851][ T6654] EXT4-fs (loop3): too many log groups per flexible block group [ 69.972765][ T6654] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 70.013778][ T6654] EXT4-fs (loop3): mount failed [ 70.105418][ T6674] SELinux: security_context_str_to_sid () failed with errno=-22 [ 70.110256][ T6675] __nla_validate_parse: 3 callbacks suppressed [ 70.110280][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1234'. [ 70.185534][ T6683] loop2: detected capacity change from 0 to 1024 [ 70.215592][ T6683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.282710][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.368080][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.375566][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.383113][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.398491][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.406020][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.413462][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.420883][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.428401][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.435866][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.443371][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.450936][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.458516][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.466059][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.475366][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.482857][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.490318][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.497883][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.505333][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.512897][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.517211][ T6709] loop7: detected capacity change from 0 to 2048 [ 70.520302][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.520329][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.541902][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.549458][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.556932][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.564450][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.571922][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.579434][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.586874][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.595264][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 70.642504][ T6714] hsr0: entered allmulticast mode [ 70.647609][ T6714] hsr_slave_0: entered allmulticast mode [ 70.653309][ T6714] hsr_slave_1: entered allmulticast mode [ 70.661279][ T6714] hsr_slave_0: left promiscuous mode [ 70.667956][ T6709] Alternate GPT is invalid, using primary GPT. [ 70.674981][ T6709] loop7: p1 p2 p3 [ 70.683260][ T6714] hsr_slave_1: left promiscuous mode [ 70.706947][ T6714] hsr0 (unregistering): left allmulticast mode [ 70.721327][ T6717] loop2: detected capacity change from 0 to 512 [ 70.749102][ T6717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.886693][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.920410][ T6744] loop2: detected capacity change from 0 to 512 [ 70.932655][ T6744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1263: bg 0: block 288: padding at end of block bitmap is not set [ 70.952659][ T6749] loop0: detected capacity change from 0 to 128 [ 70.987179][ T6744] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.001510][ T6744] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1263: attempt to clear invalid blocks 1024 len 1 [ 71.016969][ T6744] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1263: invalid indirect mapped block 1819239214 (level 0) [ 71.032017][ T6744] EXT4-fs (loop2): 1 truncate cleaned up [ 71.039704][ T6744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.096584][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.997279][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.004864][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.012312][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.019800][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.027275][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.034955][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.042809][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.050569][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.058337][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.065817][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.073356][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.080778][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.088251][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.095703][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.103211][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.110640][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.118226][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.125971][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.133443][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.140908][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.148369][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.155842][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.163496][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.170918][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.178513][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.186017][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.193500][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.201057][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.208783][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.216355][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.224075][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.231910][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.239351][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.246910][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.249201][ T6785] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1281'. [ 72.254619][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.271197][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.278705][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.286176][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.289595][ T6787] netlink: 'syz.3.1282': attribute type 29 has an invalid length. [ 72.293627][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.293658][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.316538][ T23] hid-generic 09E2:0099:0005.0006: unknown main item tag 0x0 [ 72.325521][ T6780] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 72.327313][ T23] hid-generic 09E2:0099:0005.0006: hidraw0: HID v0.0b Device [syz1] on syz1 [ 72.373418][ T6787] netlink: 'syz.3.1282': attribute type 29 has an invalid length. [ 72.398551][ T6787] netlink: 480 bytes leftover after parsing attributes in process `syz.3.1282'. [ 72.426521][ T6790] loop6: detected capacity change from 0 to 512 [ 72.436570][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 72.436588][ T29] audit: type=1326 audit(72.417:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.465883][ T29] audit: type=1326 audit(72.417:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.488677][ T29] audit: type=1400 audit(72.417:1580): avc: denied { bind } for pid=6789 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.553059][ T29] audit: type=1326 audit(72.497:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.602491][ T6790] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1284: bg 0: block 288: padding at end of block bitmap is not set [ 72.627371][ T6790] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 72.637365][ T29] audit: type=1326 audit(72.577:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.660181][ T29] audit: type=1326 audit(72.577:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.683310][ T29] audit: type=1326 audit(72.607:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.706437][ T29] audit: type=1326 audit(72.607:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.729277][ T29] audit: type=1326 audit(72.607:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.752048][ T29] audit: type=1326 audit(72.607:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c60eb69 code=0x7ffc0000 [ 72.780592][ T6790] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1284: attempt to clear invalid blocks 1024 len 1 [ 72.794249][ T6790] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1284: invalid indirect mapped block 1819239214 (level 0) [ 72.818088][ T6790] EXT4-fs (loop6): 1 truncate cleaned up [ 72.828308][ T6790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.077148][ T5623] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.115646][ T6816] IPv6: Can't replace route, no match found [ 73.149395][ T6818] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1295'. [ 73.158862][ T6820] loop7: detected capacity change from 0 to 764 [ 73.173029][ T6820] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.189667][ T6826] openvswitch: netlink: Message has 6 unknown bytes. [ 73.241685][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.249910][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.257733][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.265371][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.272932][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.280443][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.287938][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.295541][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.303198][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.310631][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.318131][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.326404][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.333925][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.341347][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.342985][ T6840] loop2: detected capacity change from 0 to 764 [ 73.348964][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.362910][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.370463][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.378001][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.385687][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.393160][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.400569][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.408030][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.415517][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.423143][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.430567][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.438083][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.445531][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.452958][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.460499][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.467936][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.475457][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.482942][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.490419][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.497917][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.505457][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.512913][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.520412][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.527862][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.535317][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.542887][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.550358][ T3415] hid-generic 09E2:0099:0005.0007: unknown main item tag 0x0 [ 73.558858][ T3415] hid-generic 09E2:0099:0005.0007: hidraw0: HID v0.0b Device [syz1] on syz1 [ 73.576550][ T6840] Symlink component flag not implemented [ 73.593523][ T6840] Symlink component flag not implemented (7) [ 73.618223][ T6848] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1307'. [ 73.671894][ T6858] IPv6: Can't replace route, no match found [ 73.756453][ T6871] loop2: detected capacity change from 0 to 512 [ 73.806873][ T6871] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 73.823580][ T6871] EXT4-fs (loop2): mount failed [ 73.927877][ T6888] loop3: detected capacity change from 0 to 512 [ 73.936538][ T6888] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.943205][ T6888] EXT4-fs: Ignoring removed bh option [ 73.968025][ T6888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.982265][ T6888] EXT4-fs (loop3): 1 truncate cleaned up [ 73.990200][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.005959][ T6890] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1326'. [ 74.129518][ T6897] loop7: detected capacity change from 0 to 512 [ 74.193513][ T6897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.369257][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.400531][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.654168][ T6923] loop3: detected capacity change from 0 to 512 [ 74.679553][ T6929] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1340'. [ 74.689934][ T6923] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 74.704733][ T6923] EXT4-fs (loop3): mount failed [ 74.786703][ T6939] loop6: detected capacity change from 0 to 512 [ 74.811545][ T6939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.933713][ T6954] loop0: detected capacity change from 0 to 512 [ 74.938190][ T5623] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.950818][ T6954] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.957508][ T6954] EXT4-fs: Ignoring removed bh option [ 74.963930][ T6956] netlink: 'syz.2.1362': attribute type 13 has an invalid length. [ 74.972953][ T6954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.993893][ T6954] EXT4-fs (loop0): 1 truncate cleaned up [ 75.007396][ T6956] gretap0: refused to change device tx_queue_len [ 75.013146][ T6954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.014038][ T6956] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.203108][ T6972] loop2: detected capacity change from 0 to 128 [ 75.273265][ T6976] syz.2.1356: attempt to access beyond end of device [ 75.273265][ T6976] loop2: rw=0, sector=97, nr_sectors = 120 limit=128 [ 75.295780][ T6977] hsr0: entered allmulticast mode [ 75.300907][ T6977] hsr_slave_0: entered allmulticast mode [ 75.306772][ T6977] hsr_slave_1: entered allmulticast mode [ 75.319987][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.343508][ T3616] kworker/u8:47: attempt to access beyond end of device [ 75.343508][ T3616] loop2: rw=1, sector=217, nr_sectors = 824 limit=128 [ 75.359517][ T6977] hsr_slave_0: left promiscuous mode [ 75.365380][ T6977] hsr_slave_1: left promiscuous mode [ 75.379671][ T6977] hsr0 (unregistering): left allmulticast mode [ 75.467357][ T6996] loop3: detected capacity change from 0 to 512 [ 75.481464][ T6996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.576720][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.635581][ T7004] lo speed is unknown, defaulting to 1000 [ 75.694602][ T7011] IPv6: Can't replace route, no match found [ 75.928169][ T7032] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 75.949910][ T7035] loop7: detected capacity change from 0 to 512 [ 75.961651][ T7035] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.968222][ T7035] EXT4-fs: Ignoring removed bh option [ 75.978521][ T7035] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 75.991776][ T7035] EXT4-fs (loop7): 1 truncate cleaned up [ 76.000089][ T7035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.186635][ T7059] loop0: detected capacity change from 0 to 512 [ 76.234095][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.267831][ T7061] bond1: entered promiscuous mode [ 76.273090][ T7061] bond1: entered allmulticast mode [ 76.320459][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.342880][ T7061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.378409][ T7061] bond1 (unregistering): Released all slaves [ 76.417518][ T7070] ªªªªª: renamed from vlan1 (while UP) [ 76.424653][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.449794][ T7076] loop2: detected capacity change from 0 to 512 [ 76.477874][ T7076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0002] [ 76.485961][ T7076] System zones: 1-3, 19-19, 35-38 [ 76.491452][ T7076] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1407: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 76.523807][ T7080] IPv6: Can't replace route, no match found [ 76.540993][ T7076] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1407: Bad quota inode: 3, type: 0 [ 76.559678][ T7076] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 76.575954][ T7076] EXT4-fs (loop2): mount failed [ 76.590875][ T7090] loop0: detected capacity change from 0 to 512 [ 76.653310][ T7090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.715618][ T7090] EXT4-fs: Ignoring removed orlov option [ 76.735888][ T7090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.746219][ T7108] loop7: detected capacity change from 0 to 128 [ 76.756788][ T7090] EXT4-fs (loop0): can't enable nombcache during remount [ 76.758053][ T7113] loop3: detected capacity change from 0 to 512 [ 76.784083][ T7113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.804154][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.830735][ T7115] syz.7.1411: attempt to access beyond end of device [ 76.830735][ T7115] loop7: rw=0, sector=97, nr_sectors = 120 limit=128 [ 76.954520][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.960358][ T7123] loop0: detected capacity change from 0 to 512 [ 76.964848][ T3584] kworker/u8:15: attempt to access beyond end of device [ 76.964848][ T3584] loop7: rw=1, sector=217, nr_sectors = 824 limit=128 [ 77.054610][ T7123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0002] [ 77.064751][ T7123] System zones: 1-3, 19-19, 35-38 [ 77.085638][ T7123] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1416: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 77.112232][ T7129] loop7: detected capacity change from 0 to 8192 [ 77.123823][ T7123] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1416: Bad quota inode: 3, type: 0 [ 77.136086][ T7123] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 77.151045][ T7123] EXT4-fs (loop0): mount failed [ 77.836586][ T7145] veth1_to_bridge: entered allmulticast mode [ 77.840180][ T7148] loop6: detected capacity change from 0 to 512 [ 77.845472][ T7145] veth1_to_bridge: left allmulticast mode [ 77.895404][ T7148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.911493][ T7156] loop0: detected capacity change from 0 to 512 [ 77.926320][ T7156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.960143][ T7148] EXT4-fs: Ignoring removed orlov option [ 77.967544][ T7148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.978060][ T7148] EXT4-fs (loop6): can't enable nombcache during remount [ 78.020569][ T5623] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.031627][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.032474][ T7160] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 78.084872][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 78.084890][ T29] audit: type=1326 audit(78.061:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.0.1433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb2f8ceb69 code=0x0 [ 78.114162][ T7166] loop3: detected capacity change from 0 to 2048 [ 78.136156][ T7166] loop3: p2 p3 p7 [ 78.158914][ T29] audit: type=1326 audit(78.131:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9583eb69 code=0x7ffc0000 [ 78.181781][ T29] audit: type=1326 audit(78.131:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca9583eb69 code=0x7ffc0000 [ 78.204583][ T29] audit: type=1326 audit(78.131:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9583eb69 code=0x7ffc0000 [ 78.227493][ T29] audit: type=1326 audit(78.131:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca9583eb69 code=0x7ffc0000 [ 78.250523][ T29] audit: type=1326 audit(78.131:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9583eb69 code=0x7ffc0000 [ 78.273358][ T29] audit: type=1326 audit(78.131:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fca9583eb69 code=0x7ffc0000 [ 78.296666][ T29] audit: type=1326 audit(78.131:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9583eb69 code=0x7ffc0000 [ 78.327127][ T7180] loop6: detected capacity change from 0 to 512 [ 78.336116][ T7180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.389014][ T5623] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.759367][ T29] audit: type=1400 audit(78.731:1811): avc: denied { compute_member } for pid=7192 comm="syz.6.1443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 78.781336][ T7189] loop3: detected capacity change from 0 to 8192 [ 78.781416][ T7195] loop7: detected capacity change from 0 to 512 [ 78.814744][ T7195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.837828][ T7195] EXT4-fs: Ignoring removed orlov option [ 78.843703][ T7195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.852329][ T7195] EXT4-fs (loop7): can't enable nombcache during remount [ 78.872795][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.963349][ T7204] loop0: detected capacity change from 0 to 512 [ 78.972836][ T7204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.026890][ T29] audit: type=1326 audit(79.001:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9583eb69 code=0x7ffc0000 [ 79.074790][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.095989][ T7211] syzkaller1: entered promiscuous mode [ 79.101560][ T7211] syzkaller1: entered allmulticast mode [ 79.190950][ T7216] loop2: detected capacity change from 0 to 1024 [ 79.204720][ T7216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.240641][ T7216] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 79.266132][ T7216] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 79.278763][ T7216] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.278763][ T7216] [ 79.289008][ T7216] EXT4-fs (loop2): Total free blocks count 0 [ 79.295117][ T7216] EXT4-fs (loop2): Free/Dirty block details [ 79.301692][ T7216] EXT4-fs (loop2): free_blocks=4293918720 [ 79.307626][ T7216] EXT4-fs (loop2): dirty_blocks=16 [ 79.312799][ T7216] EXT4-fs (loop2): Block reservation details [ 79.318809][ T7216] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 79.343192][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.747275][ T7233] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1460'. [ 79.765781][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1460'. [ 79.794474][ T7241] loop2: detected capacity change from 0 to 512 [ 79.805659][ T7241] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 79.816255][ T7243] veth1_to_bridge: entered allmulticast mode [ 79.822543][ T7243] veth1_to_bridge: left allmulticast mode [ 79.946172][ T7253] loop0: detected capacity change from 0 to 8192 [ 80.083293][ T3616] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 80.129421][ T7275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1478'. [ 80.144449][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 80.721594][ T7294] netlink: 'syz.7.1483': attribute type 13 has an invalid length. [ 80.759311][ T7294] gretap0: refused to change device tx_queue_len [ 80.765785][ T7294] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 80.876798][ T7304] loop6: detected capacity change from 0 to 512 [ 80.892433][ T7304] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 81.035162][ T3584] nci: nci_rx_work: unknown MT 0x6 [ 81.060812][ T7325] loop0: detected capacity change from 0 to 512 [ 81.091005][ T7325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.214077][ T3608] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 81.256739][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.307432][ T7335] netlink: 'syz.6.1500': attribute type 13 has an invalid length. [ 81.380718][ T7335] gretap0: refused to change device tx_queue_len [ 81.387216][ T7335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.491727][ T7339] loop2: detected capacity change from 0 to 8192 [ 81.697296][ T7341] lo speed is unknown, defaulting to 1000 [ 81.858416][ T7355] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 81.869874][ T7355] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 81.879783][ T7355] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 81.890132][ T7355] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 81.941934][ T7362] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1513'. [ 81.954444][ T7362] 0ªX¹¦D: renamed from gretap0 (while UP) [ 81.962542][ T7362] 0ªX¹¦D: entered allmulticast mode [ 81.969489][ T7362] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 82.015007][ T7366] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 82.023041][ T7366] netlink: 'syz.0.1515': attribute type 2 has an invalid length. [ 82.211157][ T7378] netlink: 'syz.3.1520': attribute type 10 has an invalid length. [ 82.219470][ T7378] dummy0: entered promiscuous mode [ 82.226154][ T7378] bridge0: port 3(dummy0) entered blocking state [ 82.232674][ T7378] bridge0: port 3(dummy0) entered disabled state [ 82.254930][ T7378] dummy0: entered allmulticast mode [ 82.351647][ T7393] netlink: 'syz.7.1528': attribute type 1 has an invalid length. [ 82.359478][ T7393] netlink: 'syz.7.1528': attribute type 2 has an invalid length. [ 82.456460][ T7405] loop7: detected capacity change from 0 to 1024 [ 82.746464][ T7405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.766642][ T7405] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 82.791950][ T7405] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 82.804543][ T7405] EXT4-fs (loop7): This should not happen!! Data will be lost [ 82.804543][ T7405] [ 82.814242][ T7405] EXT4-fs (loop7): Total free blocks count 0 [ 82.820285][ T7405] EXT4-fs (loop7): Free/Dirty block details [ 82.826293][ T7405] EXT4-fs (loop7): free_blocks=4293918720 [ 82.832135][ T7405] EXT4-fs (loop7): dirty_blocks=16 [ 82.837371][ T7405] EXT4-fs (loop7): Block reservation details [ 82.843432][ T7405] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 82.894757][ T7418] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 82.942463][ T7418] dummy0: entered promiscuous mode [ 82.948315][ T7418] bridge0: port 3(dummy0) entered blocking state [ 82.954915][ T7418] bridge0: port 3(dummy0) entered disabled state [ 82.968702][ T7418] dummy0: entered allmulticast mode [ 82.975358][ T7418] bridge0: port 3(dummy0) entered blocking state [ 82.981916][ T7418] bridge0: port 3(dummy0) entered forwarding state [ 83.104499][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 83.104584][ T29] audit: type=1400 audit(83.081:1958): avc: denied { map } for pid=7424 comm="syz.3.1541" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.135583][ T7425] vhci_hcd: invalid port number 96 [ 83.140732][ T7425] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 83.170724][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.182945][ T7427] lo speed is unknown, defaulting to 1000 [ 83.262475][ T29] audit: type=1400 audit(83.231:1959): avc: denied { write } for pid=7433 comm="syz.6.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.329135][ T7439] __nla_validate_parse: 6 callbacks suppressed [ 83.329157][ T7439] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 83.355206][ T7439] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 83.364171][ T7439] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 83.373026][ T7439] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 83.407288][ T7443] loop7: detected capacity change from 0 to 512 [ 83.423780][ T7443] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1547: casefold flag without casefold feature [ 83.442975][ T7443] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1547: couldn't read orphan inode 15 (err -117) [ 83.465707][ T7443] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.505841][ T29] audit: type=1400 audit(83.481:1960): avc: denied { write } for pid=7442 comm="syz.7.1547" name="file1" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.589251][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.720250][ T7453] loop3: detected capacity change from 0 to 1024 [ 83.755649][ T7453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.777989][ T29] audit: type=1400 audit(83.741:1961): avc: denied { getopt } for pid=7456 comm="syz.7.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.813832][ T7453] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 83.853657][ T7463] netlink: 'syz.6.1564': attribute type 21 has an invalid length. [ 83.863119][ T29] audit: type=1400 audit(83.841:1962): avc: denied { bind } for pid=7460 comm="syz.0.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.901279][ T7453] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 83.914081][ T7453] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.914081][ T7453] [ 83.923846][ T7453] EXT4-fs (loop3): Total free blocks count 0 [ 83.930008][ T7453] EXT4-fs (loop3): Free/Dirty block details [ 83.936016][ T7453] EXT4-fs (loop3): free_blocks=4293918720 [ 83.941842][ T7453] EXT4-fs (loop3): dirty_blocks=16 [ 83.947013][ T7453] EXT4-fs (loop3): Block reservation details [ 83.953168][ T7453] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 83.961948][ T7463] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1564'. [ 83.992981][ T7461] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1554'. [ 84.024698][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.050357][ T29] audit: type=1326 audit(84.021:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 84.104309][ T29] audit: type=1326 audit(84.071:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 84.127759][ T29] audit: type=1326 audit(84.071:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 84.150686][ T29] audit: type=1326 audit(84.071:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 84.173513][ T29] audit: type=1326 audit(84.071:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 84.268438][ T7484] loop6: detected capacity change from 0 to 512 [ 84.285800][ T7481] vhci_hcd: invalid port number 96 [ 84.290989][ T7481] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 84.293821][ T7484] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1563: casefold flag without casefold feature [ 84.312310][ T7484] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1563: couldn't read orphan inode 15 (err -117) [ 84.354917][ T7484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.489483][ T5623] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.728248][ T3595] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 86.196082][ T7659] syzkaller0: entered promiscuous mode [ 86.201662][ T7659] syzkaller0: entered allmulticast mode [ 86.717882][ T7748] vhci_hcd: invalid port number 96 [ 86.723159][ T7748] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 86.818286][ T7765] syzkaller0: entered promiscuous mode [ 86.824053][ T7765] syzkaller0: entered allmulticast mode [ 86.831648][ T7768] SELinux: ebitmap: truncated map [ 86.837409][ T7768] SELinux: failed to load policy [ 86.945431][ T7783] loop3: detected capacity change from 0 to 512 [ 86.953316][ T7783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.964920][ T7783] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 86.981080][ T7783] EXT4-fs (loop3): 1 truncate cleaned up [ 86.987452][ T7783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.016727][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.065399][ T7791] vhci_hcd: invalid port number 96 [ 87.070615][ T7791] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 87.145550][ T7811] netlink: 'syz.7.1650': attribute type 1 has an invalid length. [ 87.318094][ T7826] loop7: detected capacity change from 0 to 2048 [ 87.329815][ T7826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.354190][ T7827] vhci_hcd: invalid port number 96 [ 87.359393][ T7827] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 87.526345][ T7842] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 87.714591][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.991430][ T7871] netlink: 'syz.3.1676': attribute type 1 has an invalid length. [ 88.205719][ T7885] netlink: 'syz.0.1681': attribute type 10 has an invalid length. [ 88.213738][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1681'. [ 88.228841][ T7885] dummy0: entered promiscuous mode [ 88.250042][ T7888] syzkaller1: entered promiscuous mode [ 88.255635][ T7888] syzkaller1: entered allmulticast mode [ 88.364675][ T7899] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.373672][ T7899] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 88.411284][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 88.411302][ T29] audit: type=1400 audit(88.381:2055): avc: denied { write } for pid=7901 comm="syz.6.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.458691][ T7906] loop7: detected capacity change from 0 to 512 [ 88.466873][ T7912] loop2: detected capacity change from 0 to 512 [ 88.475265][ T29] audit: type=1400 audit(88.381:2056): avc: denied { ioctl } for pid=7903 comm="syz.2.1690" path="socket:[20427]" dev="sockfs" ino=20427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.501165][ T7912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.514829][ T7906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.516166][ T7912] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 88.544182][ T7912] EXT4-fs (loop2): 1 truncate cleaned up [ 88.550368][ T7912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.586744][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.630731][ T29] audit: type=1326 audit(88.601:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.0.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 88.653902][ T29] audit: type=1326 audit(88.601:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.0.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 88.676554][ T29] audit: type=1326 audit(88.601:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.0.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2f8ceb69 code=0x7ffc0000 [ 88.708011][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.757489][ T29] audit: type=1400 audit(88.731:2060): avc: denied { read write } for pid=7930 comm="syz.0.1701" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.780105][ T29] audit: type=1400 audit(88.731:2061): avc: denied { open } for pid=7930 comm="syz.0.1701" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.803912][ T29] audit: type=1400 audit(88.771:2062): avc: denied { ioctl } for pid=7930 comm="syz.0.1701" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.811723][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 88.831835][ T29] audit: type=1400 audit(88.781:2063): avc: denied { mounton } for pid=7930 comm="syz.0.1701" path="/300/file0" dev="tmpfs" ino=1576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.859109][ T29] audit: type=1400 audit(88.811:2064): avc: denied { create } for pid=7932 comm="syz.2.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.304347][ T7978] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 89.312157][ T7978] netlink: 'syz.3.1725': attribute type 6 has an invalid length. [ 89.320167][ T7978] netlink: 'syz.3.1725': attribute type 3 has an invalid length. [ 89.328142][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1725'. [ 89.495152][ T8012] loop7: detected capacity change from 0 to 1024 [ 89.521669][ T8012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.586526][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.671686][ T8045] netlink: 'syz.0.1756': attribute type 3 has an invalid length. [ 89.707019][ T8047] program syz.2.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.727021][ T8053] loop6: detected capacity change from 0 to 2048 [ 89.740059][ T8047] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 89.799654][ T8053] loop6: p1 < > p4 [ 89.811958][ T8053] loop6: p4 size 8388608 extends beyond EOD, truncated [ 90.109124][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1778'. [ 90.118815][ T8096] netem: change failed [ 90.189132][ T8102] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 90.202356][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1782'. [ 90.242177][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'. [ 90.336406][ T8112] infiniband syz!: set active [ 90.341144][ T8112] infiniband syz!: added team_slave_0 [ 90.385643][ T8112] RDS/IB: syz!: added [ 90.389746][ T8112] smc: adding ib device syz! with port count 1 [ 90.396069][ T8112] smc: ib device syz! port 1 has pnetid [ 90.596025][ T8144] batadv_slave_1: entered promiscuous mode [ 90.610865][ T8143] batadv_slave_1: left promiscuous mode [ 90.630426][ T8150] loop7: detected capacity change from 0 to 512 [ 90.649094][ T8150] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.668571][ T8150] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1800: casefold flag without casefold feature [ 90.681744][ T8150] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1800: couldn't read orphan inode 15 (err -117) [ 90.695537][ T8150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.843705][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1810'. [ 90.978251][ T6040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.136022][ T8220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8220 comm=syz.7.1826 [ 91.148910][ T8220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8220 comm=syz.7.1826 [ 91.162324][ T8217] loop6: detected capacity change from 0 to 8192 [ 91.171100][ T8217] msdos: Unknown parameter '' [ 91.280440][ T8232] bond1: entered promiscuous mode [ 91.285917][ T8232] bond1: entered allmulticast mode [ 91.302051][ T8272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1833'. [ 91.311659][ T8272] unsupported nlmsg_type 40 [ 91.323467][ T8232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.352861][ T8232] bond1 (unregistering): Released all slaves [ 91.418833][ T8314] 0ªX¹¦D: left allmulticast mode [ 91.443128][ T8314] dummy0: left promiscuous mode [ 91.452699][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.460749][ T8320] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 91.477242][ T2956] lo speed is unknown, defaulting to 1000 [ 91.515475][ T8324] loop6: detected capacity change from 0 to 512 [ 91.524611][ T8324] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.537941][ T8324] EXT4-fs (loop6): 1 truncate cleaned up [ 91.566673][ T8330] loop7: detected capacity change from 0 to 256 [ 91.591305][ T8337] loop6: detected capacity change from 0 to 128 [ 91.668306][ T8346] loop6: detected capacity change from 0 to 512 [ 91.684323][ T8346] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.719985][ T8346] EXT4-fs (loop6): 1 truncate cleaned up [ 91.726675][ T8356] atomic_op ffff888149b11d28 conn xmit_atomic 0000000000000000 [ 91.846942][ T8366] loop7: detected capacity change from 0 to 8192 [ 91.855431][ T8366] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.938093][ T8370] loop6: detected capacity change from 0 to 8192 [ 91.982838][ T3612] ================================================================== [ 91.990981][ T3612] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 91.997621][ T3612] [ 91.999953][ T3612] write to 0xffff88811afa3250 of 152 bytes by interrupt on cpu 0: [ 92.007760][ T3612] __bpf_get_stackid+0x761/0x800 [ 92.012805][ T3612] bpf_get_stackid+0xee/0x120 [ 92.017595][ T3612] bpf_get_stackid_raw_tp+0xf6/0x120 [ 92.022974][ T3612] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 92.028559][ T3612] bpf_trace_run2+0x104/0x1c0 [ 92.033270][ T3612] kfree+0x27b/0x320 [ 92.037183][ T3612] selinux_netlbl_sk_security_free+0x76/0x1d0 [ 92.043271][ T3612] selinux_sk_free_security+0x3b/0x50 [ 92.048674][ T3612] security_sk_free+0x65/0x80 [ 92.053366][ T3612] __sk_destruct+0x392/0x4c0 [ 92.058163][ T3612] __sk_free+0x227/0x270 [ 92.062437][ T3612] sk_free+0x39/0x80 [ 92.066364][ T3612] sctp_endpoint_destroy_rcu+0x66/0xb0 [ 92.071936][ T3612] rcu_core+0x5aa/0xc30 [ 92.076108][ T3612] rcu_core_si+0xd/0x20 [ 92.080276][ T3612] handle_softirqs+0xba/0x290 [ 92.084961][ T3612] run_ksoftirqd+0x1c/0x30 [ 92.089392][ T3612] smpboot_thread_fn+0x32b/0x530 [ 92.094355][ T3612] kthread+0x486/0x510 [ 92.098434][ T3612] ret_from_fork+0xdd/0x150 [ 92.103033][ T3612] ret_from_fork_asm+0x1a/0x30 [ 92.107812][ T3612] [ 92.110154][ T3612] read to 0xffff88811afa3278 of 8 bytes by task 3612 on cpu 1: [ 92.117716][ T3612] bcmp+0x23/0x90 [ 92.121370][ T3612] __bpf_get_stackid+0x371/0x800 [ 92.126417][ T3612] bpf_get_stackid+0xee/0x120 [ 92.131111][ T3612] bpf_get_stackid_raw_tp+0xf6/0x120 [ 92.136502][ T3612] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 92.141977][ T3612] bpf_trace_run2+0x104/0x1c0 [ 92.146666][ T3612] kfree+0x27b/0x320 [ 92.150615][ T3612] skb_free_head+0xb8/0x150 [ 92.155125][ T3612] skb_release_data+0x33b/0x370 [ 92.160088][ T3612] __kfree_skb+0x44/0x150 [ 92.164707][ T3612] consume_skb+0x49/0x150 [ 92.169054][ T3612] nsim_dev_trap_report_work+0x533/0x630 [ 92.174704][ T3612] process_scheduled_works+0x4cb/0x9d0 [ 92.180187][ T3612] worker_thread+0x582/0x770 [ 92.184794][ T3612] kthread+0x486/0x510 [ 92.188870][ T3612] ret_from_fork+0xdd/0x150 [ 92.193380][ T3612] ret_from_fork_asm+0x1a/0x30 [ 92.198157][ T3612] [ 92.200491][ T3612] value changed: 0xffffffff844aeefb -> 0xffffffff81d4449b [ 92.207596][ T3612] [ 92.209926][ T3612] Reported by Kernel Concurrency Sanitizer on: [ 92.216094][ T3612] CPU: 1 UID: 0 PID: 3612 Comm: kworker/u8:43 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 92.228461][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.238655][ T3612] Workqueue: events_unbound nsim_dev_trap_report_work [ 92.245544][ T3612] ==================================================================