last executing test programs: 1m3.975879156s ago: executing program 0 (id=2217): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1m3.930234061s ago: executing program 0 (id=2220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x83}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.898543444s ago: executing program 0 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x80000019) close(r2) 1m3.878734986s ago: executing program 0 (id=2225): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 1m3.848848159s ago: executing program 0 (id=2229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf706e105000700810005008100", 0x1c}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) 1m3.795377805s ago: executing program 0 (id=2231): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 1m3.794934954s ago: executing program 32 (id=2231): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 46.15751704s ago: executing program 3 (id=3112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) 46.113026955s ago: executing program 3 (id=3117): unshare(0x22020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) 46.082192757s ago: executing program 3 (id=3121): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 46.039889712s ago: executing program 3 (id=3125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 46.013704044s ago: executing program 3 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) 45.163209667s ago: executing program 3 (id=3144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0) 45.162152157s ago: executing program 33 (id=3144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0) 8.757924318s ago: executing program 6 (id=4524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 8.703342113s ago: executing program 6 (id=4525): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.702852043s ago: executing program 6 (id=4526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000bfff000009"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 8.702591803s ago: executing program 6 (id=4527): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 8.697869154s ago: executing program 6 (id=4528): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 8.474927465s ago: executing program 6 (id=4535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 8.474575795s ago: executing program 34 (id=4535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 595.675342ms ago: executing program 5 (id=4954): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) 529.757228ms ago: executing program 5 (id=4959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f00000004c0)={'system_u:object_r:tmpreaper_exec_t:s0', 0x20, 'system_u:object_r:iptables_initrc_exec_t:s0', 0x20, 0x4, 0x20, '/sbin/dhclient\x00'}, 0x76) 473.690144ms ago: executing program 5 (id=4963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) 442.645266ms ago: executing program 5 (id=4966): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 402.69072ms ago: executing program 7 (id=4970): r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x100000000000000, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 402.1753ms ago: executing program 4 (id=4971): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 360.281065ms ago: executing program 2 (id=4973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 359.947815ms ago: executing program 7 (id=4974): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000019, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000600)="d792921e20846169c93a4961aab71a4ca64508000000000000009c6fa22027bf810c17f9007786e52553b344b310c9ba7b1d83"}, 0x2c) 359.392325ms ago: executing program 4 (id=4976): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 339.143556ms ago: executing program 1 (id=4977): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x40) 338.635506ms ago: executing program 7 (id=4978): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 338.303337ms ago: executing program 2 (id=4979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 259.905084ms ago: executing program 4 (id=4980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 259.478214ms ago: executing program 1 (id=4981): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 259.250824ms ago: executing program 2 (id=4982): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x0) 258.991634ms ago: executing program 7 (id=4983): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) 258.755534ms ago: executing program 5 (id=4984): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x81}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 246.474156ms ago: executing program 1 (id=4985): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x35, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x13, 0x0, @opaque="d08aaa90e0c3f3e46a75ec"}}}}}, 0x0) 220.193828ms ago: executing program 4 (id=4986): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r0, 0x0, 0x0) 138.162117ms ago: executing program 1 (id=4987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xff}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f00004bc000/0x4000)=nil, 0x4000) 137.431426ms ago: executing program 1 (id=4988): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 136.923516ms ago: executing program 4 (id=4989): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x404c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 125.625837ms ago: executing program 2 (id=4990): r0 = fsopen(&(0x7f0000000500)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 122.567288ms ago: executing program 5 (id=4991): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x2, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 59.267334ms ago: executing program 1 (id=4992): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 58.946324ms ago: executing program 2 (id=4993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x40, 0xc, 0x5000, 0x7, 0x0, 0xb, 0x0}) 58.740084ms ago: executing program 7 (id=4994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x4, 0xfffffffffffffffc, 0x0) 27.233927ms ago: executing program 2 (id=4995): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x4, @f={0x8, 0x6, 0x2, 0x6, {0x9, 0x12, "c90e2fb26b3d4fd2be1ed0d80aee0e28fdc8"}, 0x2}}, 0x1c) 10.724659ms ago: executing program 4 (id=4996): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@broadcast, 0x7ff}, {@remote, 0x4}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 0s ago: executing program 7 (id=4997): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 0s ago: executing program 7 (id=4999): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa4cc6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) kernel console output (not intermixed with test programs): tlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10215 comm=syz.5.2896 [ 93.910906][T10215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10215 comm=syz.5.2896 [ 93.911170][T10216] loop4: detected capacity change from 0 to 128 [ 93.948033][T10216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 93.956101][T10216] System zones: 1-3, 19-19, 35-36 [ 93.961924][T10216] ext4 filesystem being mounted at /564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.093552][T10240] xt_hashlimit: max too large, truncated to 1048576 [ 94.184148][T10259] netlink: 'syz.3.2916': attribute type 10 has an invalid length. [ 94.194791][T10259] team0: Port device dummy0 added [ 94.203288][T10260] binfmt_misc: register: failed to install interpreter file ./file0 [ 94.251687][T10270] loop2: detected capacity change from 0 to 164 [ 94.266633][T10272] xt_hashlimit: max too large, truncated to 1048576 [ 94.285945][T10276] loop3: detected capacity change from 0 to 2048 [ 94.292982][T10270] rock: directory entry would overflow storage [ 94.299158][T10270] rock: sig=0x4f50, size=4, remaining=3 [ 94.304703][T10270] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 94.317279][T10276] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 94.380847][T10289] loop5: detected capacity change from 0 to 512 [ 94.391901][T10289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.417689][T10289] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz.5.2932: inode has both inline data and extents flags [ 94.431126][T10289] EXT4-fs (loop5): get root inode failed [ 94.436769][T10289] EXT4-fs (loop5): mount failed [ 94.442479][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 94.442528][ T29] audit: type=1326 audit(1761448530.906:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23993dd810 code=0x7ffc0000 [ 94.472700][ T29] audit: type=1326 audit(1761448530.906:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23993debcb code=0x7ffc0000 [ 94.496109][ T29] audit: type=1326 audit(1761448530.906:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f23993ddc2a code=0x7ffc0000 [ 94.519485][ T29] audit: type=1326 audit(1761448530.906:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 94.543017][ T29] audit: type=1326 audit(1761448530.906:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 94.566650][ T29] audit: type=1326 audit(1761448530.906:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 94.590163][ T29] audit: type=1326 audit(1761448530.906:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 94.613804][ T29] audit: type=1326 audit(1761448530.906:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 94.646095][ T29] audit: type=1400 audit(1761448531.105:4031): avc: denied { create } for pid=10301 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.666045][T10302] loop5: detected capacity change from 0 to 1024 [ 94.673165][ T29] audit: type=1400 audit(1761448531.105:4032): avc: denied { connect } for pid=10301 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.756540][T10317] xt_hashlimit: max too large, truncated to 1048576 [ 94.770835][T10319] loop3: detected capacity change from 0 to 164 [ 94.779277][T10319] rock: directory entry would overflow storage [ 94.785511][T10319] rock: sig=0x4f50, size=4, remaining=3 [ 94.785529][T10321] loop4: detected capacity change from 0 to 2048 [ 94.791081][T10319] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 94.812652][T10325] binfmt_misc: register: failed to install interpreter file ./file0 [ 94.813400][T10321] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 94.850613][T10327] netlink: 'syz.3.2945': attribute type 3 has an invalid length. [ 94.894097][T10335] netlink: 'syz.1.2951': attribute type 10 has an invalid length. [ 94.904983][T10335] dummy0: left allmulticast mode [ 94.910029][T10335] dummy0: left promiscuous mode [ 94.914966][T10335] bridge0: port 3(dummy0) entered disabled state [ 94.958692][ T36] hid_parser_main: 40 callbacks suppressed [ 94.958710][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 94.972377][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 94.980334][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 94.988120][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 94.995890][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 95.003684][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 95.011646][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 95.019388][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 95.027483][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 95.035252][ T36] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 95.052388][ T36] hid-generic 0003:80000004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 95.063549][T10353] team0: Port device dummy0 added [ 95.085755][T10359] 9pnet_fd: p9_fd_create_tcp (10359): problem binding to privport [ 95.174192][T10374] validate_nla: 1 callbacks suppressed [ 95.174215][T10374] netlink: 'syz.5.2970': attribute type 1 has an invalid length. [ 95.201845][T10377] netlink: 'syz.1.2972': attribute type 3 has an invalid length. [ 95.215141][T10380] loop4: detected capacity change from 0 to 512 [ 95.222425][T10380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.235041][T10384] loop2: detected capacity change from 0 to 128 [ 95.241884][T10380] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2974: corrupted in-inode xattr: overlapping e_value [ 95.245377][T10384] ext4 filesystem being mounted at /577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.256656][T10380] EXT4-fs (loop4): get orphan inode failed [ 95.294018][T10380] EXT4-fs (loop4): mount failed [ 95.329138][T10389] loop1: detected capacity change from 0 to 512 [ 95.348399][T10389] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.368980][T10389] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2987: corrupted inode contents [ 95.386859][T10389] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2987: mark_inode_dirty error [ 95.398767][T10389] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2987: corrupted inode contents [ 95.415214][T10389] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2987: mark_inode_dirty error [ 95.443453][ T2968] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 95.485571][T10408] loop1: detected capacity change from 0 to 1024 [ 95.551858][T10419] SELinux: failed to load policy [ 95.565760][T10421] vhci_hcd: invalid port number 96 [ 95.570905][T10421] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 95.609298][T10429] loop2: detected capacity change from 0 to 512 [ 95.616877][T10429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.633239][T10429] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.2991: inode has both inline data and extents flags [ 95.646819][T10429] EXT4-fs (loop2): get root inode failed [ 95.652434][T10429] EXT4-fs (loop2): mount failed [ 95.679922][T10434] loop4: detected capacity change from 0 to 1024 [ 95.701907][T10434] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 95.717233][T10434] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.729468][T10434] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.729468][T10434] [ 95.729513][T10440] loop2: detected capacity change from 0 to 512 [ 95.739108][T10434] EXT4-fs (loop4): Total free blocks count 0 [ 95.751388][T10434] EXT4-fs (loop4): Free/Dirty block details [ 95.757297][T10434] EXT4-fs (loop4): free_blocks=68451041280 [ 95.763184][T10434] EXT4-fs (loop4): dirty_blocks=80 [ 95.768290][T10434] EXT4-fs (loop4): Block reservation details [ 95.774323][T10434] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 95.780885][T10440] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.803064][T10440] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.2993: corrupted in-inode xattr: overlapping e_value [ 95.818042][T10440] EXT4-fs (loop2): get orphan inode failed [ 95.824460][T10440] EXT4-fs (loop2): mount failed [ 95.830581][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 95.842955][ T41] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.842955][ T41] [ 95.869120][T10445] 9pnet_fd: p9_fd_create_tcp (10445): problem binding to privport [ 95.899505][T10451] vhci_hcd: default hub control req: 400c v5000 i0007 l0 [ 95.927700][T10457] loop4: detected capacity change from 0 to 128 [ 95.936075][T10457] ext4 filesystem being mounted at /593/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.003587][T10462] loop3: detected capacity change from 0 to 512 [ 96.011197][T10462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.034393][T10466] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.044165][T10466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.045044][T10462] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.3007: inode has both inline data and extents flags [ 96.067598][T10462] EXT4-fs (loop3): get root inode failed [ 96.073260][T10462] EXT4-fs (loop3): mount failed [ 96.116157][T10466] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.126001][T10466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.145033][T10473] netlink: 'syz.1.3012': attribute type 4 has an invalid length. [ 96.153410][T10478] loop5: detected capacity change from 0 to 512 [ 96.173548][T10478] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.184396][T10478] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.3011: corrupted in-inode xattr: overlapping e_value [ 96.200416][T10478] EXT4-fs (loop5): get orphan inode failed [ 96.200542][T10488] netlink: 'syz.3.3017': attribute type 1 has an invalid length. [ 96.206538][T10478] EXT4-fs (loop5): mount failed [ 96.219907][T10466] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.229782][T10466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.239757][ T36] hid-generic 0003:80000004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 96.289957][T10495] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3019'. [ 96.310613][T10466] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.320470][T10466] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.369917][T10504] loop3: detected capacity change from 0 to 512 [ 96.373237][ T41] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.384415][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.405310][T10502] loop1: detected capacity change from 0 to 512 [ 96.405651][ T41] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.414337][T10508] loop5: detected capacity change from 0 to 128 [ 96.419849][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.427255][T10504] EXT4-fs mount: 44 callbacks suppressed [ 96.427267][T10504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.454903][T10502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.463741][ T41] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.464752][T10508] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.472031][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.492262][ T41] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.493182][T10504] ext4 filesystem being mounted at /632/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.500592][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.513593][T10508] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.540468][T10504] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3026: corrupted inode contents [ 96.562791][T10502] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.3025: inode has both inline data and extents flags [ 96.571806][T10504] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.3026: mark_inode_dirty error [ 96.576347][T10502] EXT4-fs (loop1): get root inode failed [ 96.592872][T10502] EXT4-fs (loop1): mount failed [ 96.596658][T10504] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3026: corrupted inode contents [ 96.610239][T10504] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3026: mark_inode_dirty error [ 96.611828][ T8729] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.657560][T10514] loop5: detected capacity change from 0 to 1024 [ 96.668844][T10514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.684668][T10514] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 96.700849][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.708044][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3028'. [ 96.709991][T10514] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.730891][T10514] EXT4-fs (loop5): This should not happen!! Data will be lost [ 96.730891][T10514] [ 96.740523][T10514] EXT4-fs (loop5): Total free blocks count 0 [ 96.746499][T10514] EXT4-fs (loop5): Free/Dirty block details [ 96.752449][T10514] EXT4-fs (loop5): free_blocks=68451041280 [ 96.758267][T10514] EXT4-fs (loop5): dirty_blocks=80 [ 96.763373][T10514] EXT4-fs (loop5): Block reservation details [ 96.769395][T10514] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 96.790705][ T3422] hid-generic 0003:80000004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 96.835173][ T52] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 96.888086][T10541] loop3: detected capacity change from 0 to 128 [ 96.898414][T10541] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.899092][T10542] pim6reg: entered allmulticast mode [ 96.920557][T10541] ext4 filesystem being mounted at /636/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.930694][T10542] pim6reg: left allmulticast mode [ 96.965548][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.002447][T10554] loop5: detected capacity change from 0 to 512 [ 97.020584][T10554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.034702][T10554] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.051286][T10554] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.3041: corrupted inode contents [ 97.063392][T10554] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.3041: mark_inode_dirty error [ 97.074951][T10554] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.3041: corrupted inode contents [ 97.087047][T10554] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3041: mark_inode_dirty error [ 97.103001][T10561] SELinux: failed to load policy [ 97.120774][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.164517][ T36] hid-generic 0003:80000004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 97.195704][T10576] loop3: detected capacity change from 0 to 1024 [ 97.213696][T10576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.224052][ T36] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [sy] on syz0 [ 97.229651][T10576] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 97.251078][T10576] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.263324][T10576] EXT4-fs (loop3): This should not happen!! Data will be lost [ 97.263324][T10576] [ 97.273166][T10576] EXT4-fs (loop3): Total free blocks count 0 [ 97.279334][T10576] EXT4-fs (loop3): Free/Dirty block details [ 97.285348][T10576] EXT4-fs (loop3): free_blocks=68451041280 [ 97.291248][T10576] EXT4-fs (loop3): dirty_blocks=80 [ 97.296335][T10576] EXT4-fs (loop3): Block reservation details [ 97.302364][T10576] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 97.339389][T10593] loop4: detected capacity change from 0 to 512 [ 97.346115][ T564] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 97.371106][T10593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.383894][T10593] ext4 filesystem being mounted at /602/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.397529][T10593] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.3057: corrupted inode contents [ 97.410116][T10593] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.3057: mark_inode_dirty error [ 97.434595][T10593] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.3057: corrupted inode contents [ 97.446660][T10593] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3057: mark_inode_dirty error [ 97.480952][T10607] vhci_hcd: default hub control req: 400c v5000 i0007 l0 [ 97.489123][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.533398][ T3422] hid-generic 0003:80000004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 97.708954][T10630] loop1: detected capacity change from 0 to 1024 [ 97.722510][T10630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.737373][T10627] vhci_hcd: invalid port number 96 [ 97.738641][T10630] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, [ 97.742515][T10627] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 97.757955][T10630] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 97.767037][T10630] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.779257][T10630] EXT4-fs (loop1): This should not happen!! Data will be lost [ 97.779257][T10630] [ 97.788935][T10630] EXT4-fs (loop1): Total free blocks count 0 [ 97.794972][T10630] EXT4-fs (loop1): Free/Dirty block details [ 97.800858][T10630] EXT4-fs (loop1): free_blocks=68451041280 [ 97.806709][T10630] EXT4-fs (loop1): dirty_blocks=80 [ 97.811837][T10630] EXT4-fs (loop1): Block reservation details [ 97.817808][T10630] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 97.835981][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 97.909676][T10645] loop5: detected capacity change from 0 to 512 [ 97.923557][T10645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.936137][T10645] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.949841][T10645] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.3078: corrupted inode contents [ 97.962078][T10645] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.3078: mark_inode_dirty error [ 97.973621][T10645] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.3078: corrupted inode contents [ 97.985577][T10645] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3078: mark_inode_dirty error [ 98.010533][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.078056][T10651] loop4: detected capacity change from 0 to 8192 [ 98.114745][T10667] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.217587][T10680] netlink: 'syz.3.3096': attribute type 13 has an invalid length. [ 98.360782][T10690] loop2: detected capacity change from 0 to 4096 [ 98.402453][ T1042] syz1: Port: 1 Link DOWN [ 98.407078][ T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.416206][ T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.425885][T10690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.443953][T10687] loop5: detected capacity change from 0 to 512 [ 98.450889][ T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.463970][T10687] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 98.478727][T10687] EXT4-fs (loop5): invalid journal inode [ 98.479653][ T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.493684][T10687] EXT4-fs (loop5): can't get journal size [ 98.494008][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.510817][T10687] EXT4-fs (loop5): 1 truncate cleaned up [ 98.517117][T10687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.534614][T10704] netlink: 'syz.4.3118': attribute type 4 has an invalid length. [ 98.557991][T10710] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 98.614069][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.724849][T10726] loop5: detected capacity change from 0 to 8192 [ 98.734502][T10739] netlink: 'syz.4.3126': attribute type 13 has an invalid length. [ 98.782155][T10745] loop1: detected capacity change from 0 to 1024 [ 98.783440][T10746] loop2: detected capacity change from 0 to 512 [ 98.809615][T10745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.816092][T10746] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 98.839232][T10745] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 98.840148][T10746] EXT4-fs (loop2): invalid journal inode [ 98.861879][T10745] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 98.874411][T10745] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.874411][T10745] [ 98.884442][T10745] EXT4-fs (loop1): Total free blocks count 0 [ 98.890798][T10745] EXT4-fs (loop1): Free/Dirty block details [ 98.893135][T10746] EXT4-fs (loop2): can't get journal size [ 98.896713][T10745] EXT4-fs (loop1): free_blocks=68451041280 [ 98.896728][T10745] EXT4-fs (loop1): dirty_blocks=80 [ 98.896741][T10745] EXT4-fs (loop1): Block reservation details [ 98.896752][T10745] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 98.936323][T10746] EXT4-fs (loop2): 1 truncate cleaned up [ 98.943719][T10746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.960976][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 98.980072][T10739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.990757][T10739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.049957][ T568] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.058466][ T568] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.075983][ T568] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.084371][ T568] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.099673][ T568] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.108079][ T568] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.118932][ T568] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.127399][ T568] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.141951][T10755] loop5: detected capacity change from 0 to 4096 [ 99.152918][T10755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.190514][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.226873][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.302490][T10778] loop2: detected capacity change from 0 to 1024 [ 99.318917][T10778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.337745][T10778] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 99.353052][T10778] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.365408][T10778] EXT4-fs (loop2): This should not happen!! Data will be lost [ 99.365408][T10778] [ 99.365439][T10784] loop1: detected capacity change from 0 to 8192 [ 99.375074][T10778] EXT4-fs (loop2): Total free blocks count 0 [ 99.387492][T10778] EXT4-fs (loop2): Free/Dirty block details [ 99.393377][T10778] EXT4-fs (loop2): free_blocks=68451041280 [ 99.399208][T10778] EXT4-fs (loop2): dirty_blocks=80 [ 99.404310][T10778] EXT4-fs (loop2): Block reservation details [ 99.410323][T10778] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 99.439405][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 99.573263][T10792] loop1: detected capacity change from 0 to 4096 [ 99.584768][T10792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.604026][T10792] __quota_error: 1072 callbacks suppressed [ 99.604084][T10792] Quota error (device loop1): do_check_range: Getting block 1024 out of range 0-5 [ 99.608710][ T29] audit: type=1400 audit(1761448536.056:5103): avc: denied { mounton } for pid=10799 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 99.659523][ T4029] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.779656][T10799] chnl_net:caif_netlink_parms(): no params data found [ 99.812483][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.819620][T10799] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.826753][T10799] bridge_slave_0: entered allmulticast mode [ 99.833504][T10799] bridge_slave_0: entered promiscuous mode [ 99.842139][T10799] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.849275][T10799] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.856489][T10799] bridge_slave_1: entered allmulticast mode [ 99.862925][T10799] bridge_slave_1: entered promiscuous mode [ 99.882324][ T41] tipc: Left network mode [ 99.889419][T10799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.891523][T10817] vhci_hcd: invalid port number 96 [ 99.899995][T10799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.903584][T10817] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 99.935331][ T29] audit: type=1400 audit(1761448536.375:5104): avc: denied { getopt } for pid=10821 comm="syz.1.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.959686][T10799] team0: Port device team_slave_0 added [ 99.974360][ T41] hsr_slave_0: left promiscuous mode [ 99.983569][ T41] hsr_slave_1: left promiscuous mode [ 100.039969][ T41] team0 (unregistering): Port device dummy0 removed [ 100.052027][T10799] team0: Port device team_slave_1 added [ 100.066530][T10799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.073527][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.099446][T10799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.110820][T10799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.117782][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.143763][T10799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.168715][T10799] hsr_slave_0: entered promiscuous mode [ 100.174734][T10799] hsr_slave_1: entered promiscuous mode [ 100.180682][T10799] debugfs: 'hsr0' already exists in 'hsr' [ 100.186379][T10799] Cannot create hsr debugfs directory [ 100.242431][T10799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.251082][T10799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.259377][T10799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.267802][T10799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.281909][T10799] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.288978][T10799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.296440][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.303524][T10799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.328058][T10799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.339618][ T568] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.347884][ T568] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.358950][T10799] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.377830][T10799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.388309][T10799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.403091][ T568] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.410181][ T568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.418002][ T568] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.425035][ T568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.466462][T10799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.544548][T10799] veth0_vlan: entered promiscuous mode [ 100.552318][T10799] veth1_vlan: entered promiscuous mode [ 100.565257][T10799] veth0_macvtap: entered promiscuous mode [ 100.572117][T10799] veth1_macvtap: entered promiscuous mode [ 100.581418][T10799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.591798][T10799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.602644][ T564] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.611660][ T564] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.621530][ T564] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.632383][ T564] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.649486][ T29] audit: type=1400 audit(1761448537.092:5105): avc: denied { mounton } for pid=10799 comm="syz-executor" path="/root/syzkaller.zRhiX6/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 100.674138][ T29] audit: type=1400 audit(1761448537.092:5106): avc: denied { mounton } for pid=10799 comm="syz-executor" path="/root/syzkaller.zRhiX6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.701089][ T29] audit: type=1400 audit(1761448537.092:5107): avc: denied { mounton } for pid=10799 comm="syz-executor" path="/root/syzkaller.zRhiX6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 100.729345][ T29] audit: type=1400 audit(1761448537.102:5108): avc: denied { mounton } for pid=10799 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 100.752442][ T29] audit: type=1400 audit(1761448537.102:5109): avc: denied { mount } for pid=10799 comm="syz-executor" name="/" dev="gadgetfs" ino=4779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 100.831206][T10867] SELinux: policydb version 586747130 does not match my version range 15-35 [ 100.836313][T10865] loop4: detected capacity change from 0 to 4096 [ 100.841940][T10867] SELinux: failed to load policy [ 100.859790][T10865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.876143][T10865] Quota error (device loop4): do_check_range: Getting block 1024 out of range 0-5 [ 100.883377][T10860] loop6: detected capacity change from 0 to 8192 [ 100.902728][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.033501][T10876] 9p: Unknown Cache mode or invalid value mfap [ 101.053079][T10881] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.104001][T10888] loop6: detected capacity change from 0 to 1024 [ 101.116300][T10888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.137369][T10888] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 101.153303][T10888] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.154252][ T29] audit: type=1400 audit(1761448537.581:5110): avc: denied { read } for pid=10894 comm="syz.1.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 101.165499][T10888] EXT4-fs (loop6): This should not happen!! Data will be lost [ 101.165499][T10888] [ 101.194524][T10888] EXT4-fs (loop6): Total free blocks count 0 [ 101.200499][T10888] EXT4-fs (loop6): Free/Dirty block details [ 101.206404][T10888] EXT4-fs (loop6): free_blocks=68451041280 [ 101.212205][T10888] EXT4-fs (loop6): dirty_blocks=80 [ 101.217336][T10888] EXT4-fs (loop6): Block reservation details [ 101.223331][T10888] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 101.232372][T10881] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.272003][ T52] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 101.296081][T10881] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.325011][T10905] netlink: 'syz.4.3181': attribute type 4 has an invalid length. [ 101.336239][T10906] loop1: detected capacity change from 0 to 1024 [ 101.346498][T10908] xt_connbytes: Forcing CT accounting to be enabled [ 101.365997][T10906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.381091][T10881] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.401215][T10906] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 101.418195][T10917] netlink: 'syz.2.3193': attribute type 4 has an invalid length. [ 101.424946][T10906] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.438248][T10906] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.438248][T10906] [ 101.447964][T10906] EXT4-fs (loop1): Total free blocks count 0 [ 101.454130][T10906] EXT4-fs (loop1): Free/Dirty block details [ 101.460102][T10906] EXT4-fs (loop1): free_blocks=68451041280 [ 101.465930][T10906] EXT4-fs (loop1): dirty_blocks=80 [ 101.471017][T10906] EXT4-fs (loop1): Block reservation details [ 101.477004][T10906] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 101.498785][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.521157][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 101.528316][ T41] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.541976][ T41] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.550693][ T41] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.568468][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3186'. [ 101.619106][T10935] pim6reg: entered allmulticast mode [ 101.626322][T10935] pim6reg: left allmulticast mode [ 101.644528][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 101.712721][T10951] netlink: 'syz.6.3201': attribute type 4 has an invalid length. [ 101.729850][T10953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3204'. [ 101.786226][T10962] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.827179][T10962] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.888078][T10962] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.920354][T10981] pim6reg: entered allmulticast mode [ 101.927760][T10981] pim6reg: left allmulticast mode [ 102.250467][T11017] pim6reg: entered allmulticast mode [ 102.257627][T11017] pim6reg: left allmulticast mode [ 102.347398][T11029] pim6reg: entered allmulticast mode [ 102.354633][T11029] pim6reg: left allmulticast mode [ 102.411766][T11033] hub 2-0:1.0: USB hub found [ 102.416554][T11033] hub 2-0:1.0: 8 ports detected [ 103.451485][T10962] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.155982][ T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.167044][ T135] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.177916][ T135] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.188856][ T135] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.262913][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3252'. [ 104.307208][T11062] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.332722][T11065] loop1: detected capacity change from 0 to 512 [ 104.340460][T11065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.355334][T11065] EXT4-fs (loop1): 1 truncate cleaned up [ 104.363309][T11065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.392570][ T4029] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.409278][T11075] IPv6: Can't replace route, no match found [ 104.506089][T11094] ALSA: seq fatal error: cannot create timer (-19) [ 104.622439][T11103] atomic_op ffff88811f842d28 conn xmit_atomic 0000000000000000 [ 104.630039][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 104.630053][ T29] audit: type=1326 audit(1761448541.061:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.659774][ T29] audit: type=1326 audit(1761448541.061:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.683450][ T29] audit: type=1326 audit(1761448541.061:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.706940][ T29] audit: type=1326 audit(1761448541.061:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.730596][ T29] audit: type=1326 audit(1761448541.061:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.754141][ T29] audit: type=1326 audit(1761448541.061:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.777778][ T29] audit: type=1326 audit(1761448541.061:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.801266][ T29] audit: type=1326 audit(1761448541.061:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.824750][ T29] audit: type=1326 audit(1761448541.061:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.863032][ T29] audit: type=1326 audit(1761448541.061:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 104.941984][T11133] loop1: detected capacity change from 0 to 512 [ 104.949538][T11133] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 104.959218][T11133] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 104.978681][T11133] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.3279: Invalid inode table block 1 in block_group 0 [ 104.991781][T11133] EXT4-fs (loop1): Remounting filesystem read-only [ 104.996402][T11140] loop6: detected capacity change from 0 to 512 [ 104.999816][T11133] EXT4-fs (loop1): get root inode failed [ 105.010205][T11133] EXT4-fs (loop1): mount failed [ 105.036011][T11140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.058454][T11140] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.090917][T10799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.101564][T11155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3287'. [ 105.111608][T11155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3287'. [ 105.194290][T11173] loop2: detected capacity change from 0 to 128 [ 105.203259][T11173] bio_check_eod: 32 callbacks suppressed [ 105.203286][T11173] syz.2.3296: attempt to access beyond end of device [ 105.203286][T11173] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 105.222767][T11173] syz.2.3296: attempt to access beyond end of device [ 105.222767][T11173] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 105.236318][T11173] buffer_io_error: 18 callbacks suppressed [ 105.236331][T11173] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 105.250942][T11173] syz.2.3296: attempt to access beyond end of device [ 105.250942][T11173] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 105.264427][T11173] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 105.273206][T11173] syz.2.3296: attempt to access beyond end of device [ 105.273206][T11173] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 105.288900][T11173] syz.2.3296: attempt to access beyond end of device [ 105.288900][T11173] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 105.302331][T11173] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 105.310816][T11173] syz.2.3296: attempt to access beyond end of device [ 105.310816][T11173] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 105.324314][T11173] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 105.334687][T11173] syz.2.3296: attempt to access beyond end of device [ 105.334687][T11173] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 105.354964][T11173] syz.2.3296: attempt to access beyond end of device [ 105.354964][T11173] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 105.368537][T11173] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 105.378249][T11173] syz.2.3296: attempt to access beyond end of device [ 105.378249][T11173] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 105.391681][T11173] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 105.400754][T11173] syz.2.3296: attempt to access beyond end of device [ 105.400754][T11173] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 105.404365][T11181] loop5: detected capacity change from 0 to 512 [ 105.414635][T11173] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 105.429086][T11173] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 105.438289][T11173] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 105.447033][T11173] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 105.448731][T11181] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.470578][T11181] EXT4-fs (loop5): mount failed [ 105.618967][T11200] wg1: entered promiscuous mode [ 105.623857][T11200] wg1: entered allmulticast mode [ 106.052521][T11248] netlink: 'syz.1.3331': attribute type 1 has an invalid length. [ 106.070368][T11248] smc: adding net device bond0 with user defined pnetid SYZ2 [ 106.078548][T11248] bond0: entered promiscuous mode [ 106.083836][T11248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.100317][T11248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.107531][T11248] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 106.117852][T11248] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 106.129444][T11248] bond0: (slave vxcan3): making interface the new active one [ 106.136862][T11248] vxcan3: entered promiscuous mode [ 106.143474][T11248] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 106.247802][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3343'. [ 106.283439][ T3421] kernel read not supported for file /vcs (pid: 3421 comm: kworker/1:5) [ 106.306150][T11279] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 106.312739][T11279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.320298][T11279] vhci_hcd vhci_hcd.0: Device attached [ 106.328171][T11279] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 106.334689][T11279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.342337][T11279] vhci_hcd vhci_hcd.0: Device attached [ 106.351633][T11279] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 106.358142][T11279] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.365734][T11279] vhci_hcd vhci_hcd.0: Device attached [ 106.376006][T11279] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 106.382533][T11279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.390032][T11279] vhci_hcd vhci_hcd.0: Device attached [ 106.399870][T11279] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 106.406463][T11279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.414144][T11279] vhci_hcd vhci_hcd.0: Device attached [ 106.422935][T11294] vhci_hcd: connection closed [ 106.423036][T11292] vhci_hcd: connection closed [ 106.427903][ T568] vhci_hcd: stop threads [ 106.428036][T11282] vhci_hcd: connection closed [ 106.432599][ T568] vhci_hcd: release socket [ 106.437280][T11280] vhci_hcd: connection closed [ 106.441552][ T568] vhci_hcd: disconnect device [ 106.446299][T11288] vhci_hcd: connection closed [ 106.463322][ T568] vhci_hcd: stop threads [ 106.472289][ T568] vhci_hcd: release socket [ 106.476730][ T568] vhci_hcd: disconnect device [ 106.483298][ T568] vhci_hcd: stop threads [ 106.487715][ T568] vhci_hcd: release socket [ 106.492248][ T568] vhci_hcd: disconnect device [ 106.512803][ T568] vhci_hcd: stop threads [ 106.517105][ T568] vhci_hcd: release socket [ 106.521580][ T568] vhci_hcd: disconnect device [ 106.547976][ T568] vhci_hcd: stop threads [ 106.552313][ T568] vhci_hcd: release socket [ 106.556791][ T568] vhci_hcd: disconnect device [ 106.566681][ T3421] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 106.574117][ T3421] usb 9-1: enqueue for inactive port 0 [ 106.580599][ T3421] usb 9-1: enqueue for inactive port 0 [ 106.593611][T11313] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3366'. [ 106.596835][ T3421] usb 9-1: enqueue for inactive port 0 [ 106.635147][T11316] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 106.678691][ T3421] vhci_hcd: vhci_device speed not set [ 106.691776][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3363'. [ 106.714198][T11329] veth0_macvtap: left promiscuous mode [ 106.775770][T11348] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 106.783738][T11348] SELinux: failed to load policy [ 106.998590][T11376] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3383'. [ 107.025758][T11380] netlink: 'syz.2.3386': attribute type 11 has an invalid length. [ 107.033778][T11380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3386'. [ 107.062144][T11386] x_tables: duplicate underflow at hook 1 [ 107.083737][T11388] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3389'. [ 107.252359][T11423] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3409'. [ 107.261450][T11423] tipc: Enabling of bearer rejected, failed to enable media [ 107.364049][T11446] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 107.364049][T11446] program syz.4.3419 not setting count and/or reply_len properly [ 107.600515][T11500] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 107.701567][T11516] vhci_hcd: invalid port number 0 [ 107.798963][T11540] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 107.815370][T11543] ip6gre1: entered allmulticast mode [ 107.842734][T11548] loop2: detected capacity change from 0 to 128 [ 107.850562][T11548] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.862957][T11548] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.889699][ T1004] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.998020][T11568] loop2: detected capacity change from 0 to 2048 [ 108.050044][T11568] loop2: p2 < > p4 [ 108.054561][T11568] loop2: p4 size 262144 extends beyond EOD, truncated [ 108.181300][T11597] bridge_slave_1: left allmulticast mode [ 108.186987][T11597] bridge_slave_1: left promiscuous mode [ 108.192781][T11597] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.225839][T11597] bridge_slave_0: left allmulticast mode [ 108.231590][T11597] bridge_slave_0: left promiscuous mode [ 108.237284][T11597] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.264382][T11609] x_tables: unsorted entry at hook 1 [ 108.282761][T11613] loop5: detected capacity change from 0 to 512 [ 108.300690][T11613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.313638][T11613] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.338608][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.376163][T11627] loop1: detected capacity change from 0 to 512 [ 108.382563][T11622] ALSA: seq fatal error: cannot create timer (-19) [ 108.391892][T11627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.429342][ T4029] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.492316][T11642] loop6: detected capacity change from 0 to 256 [ 108.507172][T11642] FAT-fs (loop6): bogus sectors per cluster 223 [ 108.513505][T11642] FAT-fs (loop6): Can't find a valid FAT filesystem [ 108.555901][T11655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.564564][T11655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.949021][T11691] 9pnet_fd: Insufficient options for proto=fd [ 109.073638][T11716] ALSA: seq fatal error: cannot create timer (-22) [ 109.265924][T11752] loop6: detected capacity change from 0 to 2048 [ 109.285322][T11752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.439722][T10799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.588565][T11777] __nla_validate_parse: 17 callbacks suppressed [ 109.588580][T11777] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3568'. [ 110.206489][T11799] serio: Serial port ptm1 [ 110.336118][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3583'. [ 110.673948][T11845] IPv4: Oversized IP packet from 127.202.26.0 [ 110.705164][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 110.705179][ T29] audit: type=1326 audit(1761448547.129:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfa2aefc9 code=0x7ffc0000 [ 110.705246][ T29] audit: type=1326 audit(1761448547.129:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfa2aefc9 code=0x7ffc0000 [ 110.711778][ T29] audit: type=1326 audit(1761448547.129:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fccfa2aefc9 code=0x7ffc0000 [ 110.711874][ T29] audit: type=1326 audit(1761448547.129:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfa2aefc9 code=0x7ffc0000 [ 110.711920][ T29] audit: type=1326 audit(1761448547.129:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfa2aefc9 code=0x7ffc0000 [ 110.711946][ T29] audit: type=1326 audit(1761448547.129:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fccfa2ad717 code=0x7ffc0000 [ 110.734518][ T29] audit: type=1326 audit(1761448547.129:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fccfa2b076a code=0x7ffc0000 [ 110.876345][ T29] audit: type=1326 audit(1761448547.129:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfa2aefc9 code=0x7ffc0000 [ 110.876371][ T29] audit: type=1326 audit(1761448547.129:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfa2aefc9 code=0x7ffc0000 [ 111.114623][ T29] audit: type=1326 audit(1761448547.229:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11847 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fccfa2aefc9 code=0x7ffc0000 [ 111.249639][T11871] netlink: 'syz.4.3612': attribute type 13 has an invalid length. [ 111.260625][ T1004] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.260701][T11871] netlink: 'syz.4.3612': attribute type 13 has an invalid length. [ 111.268946][ T1004] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.307729][ T1004] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.307767][ T1004] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.422875][T11897] smc: net device bond0 applied user defined pnetid SYZ0 [ 111.430366][T11897] smc: net device bond0 erased user defined pnetid SYZ0 [ 111.593645][T11917] netlink: 'syz.1.3633': attribute type 12 has an invalid length. [ 111.601595][T11917] netlink: 'syz.1.3633': attribute type 29 has an invalid length. [ 111.609469][T11917] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3633'. [ 111.618690][T11917] netlink: 'syz.1.3633': attribute type 2 has an invalid length. [ 111.626413][T11917] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3633'. [ 111.974237][T11949] pimreg: entered allmulticast mode [ 111.981801][T11949] pimreg: left allmulticast mode [ 112.187994][T10898] kernel read not supported for file /1499/schedstat (pid: 10898 comm: kworker/0:5) [ 112.223688][T11977] loop2: detected capacity change from 0 to 512 [ 112.272591][T11984] loop5: detected capacity change from 0 to 512 [ 112.279915][T11977] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.299015][T11977] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3661: corrupted inode contents [ 112.312497][T11977] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 112.322589][T11977] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3661: corrupted inode contents [ 112.338440][T11984] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3675: inode has both inline data and extents flags [ 112.343980][T11977] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.3661: mark_inode_dirty error [ 112.355689][T11984] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3675: couldn't read orphan inode 15 (err -117) [ 112.363143][T11977] EXT4-fs (loop2): 1 orphan inode deleted [ 112.381136][T11977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.406407][T11984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.435038][T11998] loop6: detected capacity change from 0 to 128 [ 112.444342][T11998] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 112.463384][T11984] Invalid ELF header magic: != ELF [ 112.479655][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.480476][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.528565][T10799] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.789231][T12053] loop4: detected capacity change from 0 to 128 [ 112.925895][T12078] netlink: 'syz.1.3705': attribute type 4 has an invalid length. [ 113.179496][T12094] 9p: Unknown Cache mode or invalid value mfap [ 113.237104][T12096] SELinux: policydb version 586747130 does not match my version range 15-35 [ 113.246155][T12096] SELinux: failed to load policy [ 113.395549][T12111] xt_connbytes: Forcing CT accounting to be enabled [ 113.442131][T12117] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.489743][T12117] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.578463][T12117] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.622563][T12117] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.649717][T12125] 9p: Unknown Cache mode or invalid value mfap [ 113.703892][ T52] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.714725][ T52] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.725509][ T52] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.736150][ T52] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.897051][T12147] loop6: detected capacity change from 0 to 512 [ 113.904418][T12147] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 113.920808][T12144] hub 2-0:1.0: USB hub found [ 113.921945][T12147] EXT4-fs (loop6): 1 truncate cleaned up [ 113.931309][T12149] loop2: detected capacity change from 0 to 512 [ 113.935252][T12147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.951092][T12144] hub 2-0:1.0: 8 ports detected [ 113.961452][T12149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.976210][T10799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.997308][T12149] ext4 filesystem being mounted at /710/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.024227][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.088634][T12163] loop2: detected capacity change from 0 to 512 [ 114.095869][T12163] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 114.105600][T12163] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 114.115717][T12163] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.3740: Invalid inode table block 1 in block_group 0 [ 114.128511][T12163] EXT4-fs (loop2): Remounting filesystem read-only [ 114.128851][T12165] loop5: detected capacity change from 0 to 512 [ 114.139677][T12163] EXT4-fs (loop2): get root inode failed [ 114.146899][T12163] EXT4-fs (loop2): mount failed [ 114.162378][T12168] loop1: detected capacity change from 0 to 128 [ 114.169905][T12165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.188679][T12165] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.204160][T12168] bio_check_eod: 32 callbacks suppressed [ 114.204174][T12168] syz.1.3753: attempt to access beyond end of device [ 114.204174][T12168] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 114.223707][T12168] syz.1.3753: attempt to access beyond end of device [ 114.223707][T12168] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 114.237167][T12168] buffer_io_error: 18 callbacks suppressed [ 114.237178][T12168] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 114.251718][T12168] syz.1.3753: attempt to access beyond end of device [ 114.251718][T12168] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 114.259760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.265522][T12168] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 114.282334][T12168] syz.1.3753: attempt to access beyond end of device [ 114.282334][T12168] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 114.282521][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.295990][T12168] syz.1.3753: attempt to access beyond end of device [ 114.295990][T12168] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 114.318180][T12168] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 114.326833][T12168] syz.1.3753: attempt to access beyond end of device [ 114.326833][T12168] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 114.340212][T12168] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 114.350053][T12168] syz.1.3753: attempt to access beyond end of device [ 114.350053][T12168] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 114.375676][T12168] syz.1.3753: attempt to access beyond end of device [ 114.375676][T12168] loop1: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 114.389099][T12168] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 114.407137][T12168] syz.1.3753: attempt to access beyond end of device [ 114.407137][T12168] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 114.420612][T12168] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 114.429317][T12168] syz.1.3753: attempt to access beyond end of device [ 114.429317][T12168] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 114.443072][T12168] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 114.451607][T12168] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 114.462118][T12168] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 114.470894][T12168] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 114.510500][T12194] vlan2: entered allmulticast mode [ 115.468353][T12246] usb usb1: usbfs: process 12246 (syz.2.3770) did not claim interface 4 before use [ 115.614536][T12258] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 115.644430][T12261] netlink: 268 bytes leftover after parsing attributes in process `syz.5.3775'. [ 115.675500][T12269] loop2: detected capacity change from 0 to 512 [ 115.698703][T12273] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 115.730852][T12269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.743475][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 115.743487][ T29] audit: type=1326 audit(1761448552.152:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 115.750295][T12269] ext4 filesystem being mounted at /722/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.773557][ T29] audit: type=1326 audit(1761448552.152:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 115.807450][ T29] audit: type=1326 audit(1761448552.152:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 115.841854][ T29] audit: type=1400 audit(1761448552.242:5753): avc: denied { setattr } for pid=12268 comm="syz.2.3782" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.865764][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.874939][ T29] audit: type=1326 audit(1761448552.292:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 115.885072][ T29] audit: type=1326 audit(1761448552.302:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 115.961550][ T29] audit: type=1326 audit(1761448552.342:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 115.985085][ T29] audit: type=1326 audit(1761448552.342:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 116.008620][ T29] audit: type=1326 audit(1761448552.342:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 116.067569][ T29] audit: type=1400 audit(1761448552.482:5759): avc: denied { firmware_load } for pid=12294 comm="syz.6.3797" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 116.131212][T12306] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 116.203454][T12317] loop6: detected capacity change from 0 to 512 [ 116.218787][T12317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.232837][T12317] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.259421][T10799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.269215][T12325] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3819'. [ 116.328751][T12337] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 116.340445][T12337] SELinux: failed to load policy [ 116.361047][T12341] 9p: Unknown Cache mode or invalid value mfap [ 116.579537][T12364] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3825'. [ 116.649462][T12384] 9p: Unknown Cache mode or invalid value mfap [ 116.726357][T12394] loop6: detected capacity change from 0 to 512 [ 116.810230][T12400] ALSA: seq fatal error: cannot create timer (-19) [ 117.053932][T12434] 9p: Unknown Cache mode or invalid value mfap [ 117.129845][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3862'. [ 117.156257][T12454] loop1: detected capacity change from 0 to 512 [ 117.174689][T12454] ext4 filesystem being mounted at /724/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.231506][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3867'. [ 117.240525][T12464] bridge_slave_1: left allmulticast mode [ 117.246226][T12464] bridge_slave_1: left promiscuous mode [ 117.251974][T12464] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.259928][T12464] bridge_slave_0: left promiscuous mode [ 117.265686][T12464] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.395974][T12470] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 117.426904][T12476] x_tables: unsorted entry at hook 1 [ 117.479994][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 117.735897][T12494] ip6gre1: entered allmulticast mode [ 117.754397][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3894'. [ 117.763661][T12495] bridge_slave_1: left allmulticast mode [ 117.769346][T12495] bridge_slave_1: left promiscuous mode [ 117.775201][T12495] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.786791][T12495] bridge_slave_0: left promiscuous mode [ 117.792518][T12495] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.862191][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.871108][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.899577][T12509] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 117.998198][T12519] loop1: detected capacity change from 0 to 2048 [ 118.044416][T12519] loop1: p2 < > p4 [ 118.048806][T12519] loop1: p4 size 262144 extends beyond EOD, truncated [ 118.848919][T12538] loop5: detected capacity change from 0 to 2048 [ 118.896425][T12538] loop5: p2 < > p4 [ 118.900865][T12538] loop5: p4 size 262144 extends beyond EOD, truncated [ 119.783312][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3904'. [ 119.958083][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3923'. [ 119.970943][T12586] loop6: detected capacity change from 0 to 2048 [ 120.016445][T12586] loop6: p2 < > p4 [ 120.026069][T12586] loop6: p4 size 262144 extends beyond EOD, truncated [ 120.103176][T12593] wg1: entered promiscuous mode [ 120.108172][T12593] wg1: entered allmulticast mode [ 120.303437][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3935'. [ 120.397110][T12629] wg1: entered promiscuous mode [ 120.402011][T12629] wg1: entered allmulticast mode [ 120.763248][T12666] __nla_validate_parse: 2 callbacks suppressed [ 120.763264][T12666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3955'. [ 120.861038][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 120.861053][ T29] audit: type=1326 audit(1761448557.267:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 120.903868][ T29] audit: type=1326 audit(1761448557.267:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 120.927506][ T29] audit: type=1326 audit(1761448557.267:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 120.951087][ T29] audit: type=1326 audit(1761448557.267:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 120.974657][ T29] audit: type=1326 audit(1761448557.267:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 120.998238][ T29] audit: type=1326 audit(1761448557.267:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 121.021797][ T29] audit: type=1326 audit(1761448557.267:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 121.045488][ T29] audit: type=1326 audit(1761448557.277:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 121.069087][ T29] audit: type=1326 audit(1761448557.307:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 121.092661][ T29] audit: type=1326 audit(1761448557.307:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.5.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 121.290762][T12708] serio: Serial port ptm0 [ 121.374411][T12719] sd 0:0:1:0: device reset [ 121.746141][T12748] sd 0:0:1:0: device reset [ 122.059441][T12777] sd 0:0:1:0: device reset [ 122.106777][T12779] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4009'. [ 122.352618][T12812] serio: Serial port ptm0 [ 122.368522][T12815] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4024'. [ 122.610904][T12833] loop1: detected capacity change from 0 to 1024 [ 122.619761][T12833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.636875][T12833] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 122.645234][T12833] System zones: 0-1, 3-36 [ 122.716925][T12844] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.735533][T12847] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4036'. [ 122.919910][T12862] loop5: detected capacity change from 0 to 1024 [ 122.926609][T12862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.935315][T12862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 122.944300][T12862] System zones: 0-1, 3-36 [ 123.109765][T12880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4053'. [ 123.256193][T12882] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.282966][T12886] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4066'. [ 123.323013][T12890] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4054'. [ 123.467717][T12913] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4071'. [ 123.476801][T12913] netlink: 'syz.6.4071': attribute type 7 has an invalid length. [ 123.484543][T12913] netlink: 'syz.6.4071': attribute type 8 has an invalid length. [ 123.492268][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4071'. [ 123.591253][T12929] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4077'. [ 123.673094][T12943] netlink: 'syz.1.4085': attribute type 7 has an invalid length. [ 123.680904][T12943] netlink: 'syz.1.4085': attribute type 8 has an invalid length. [ 124.265673][T13038] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 124.265673][T13038] program syz.1.4125 not setting count and/or reply_len properly [ 124.290493][T13033] geneve2: entered promiscuous mode [ 124.295745][T13033] geneve2: entered allmulticast mode [ 124.813637][T13071] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 124.813637][T13071] program syz.6.4140 not setting count and/or reply_len properly [ 124.864645][T13078] geneve2: entered promiscuous mode [ 124.869955][T13078] geneve2: entered allmulticast mode [ 125.393038][T13102] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 125.393038][T13102] program syz.4.4153 not setting count and/or reply_len properly [ 125.464531][T13112] geneve2: entered promiscuous mode [ 125.469775][T13112] geneve2: entered allmulticast mode [ 126.113185][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 126.113224][ T29] audit: type=1400 audit(1761448562.523:6146): avc: denied { create } for pid=13128 comm="syz.1.4167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.145060][ T29] audit: type=1400 audit(1761448562.543:6147): avc: denied { connect } for pid=13128 comm="syz.1.4167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.164841][ T29] audit: type=1400 audit(1761448562.543:6148): avc: denied { write } for pid=13128 comm="syz.1.4167" laddr=172.20.20.67 lport=47968 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.219108][ T29] audit: type=1400 audit(1761448562.623:6149): avc: denied { create } for pid=13138 comm="syz.4.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.265580][ T29] audit: type=1400 audit(1761448562.633:6150): avc: denied { write } for pid=13138 comm="syz.4.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.285851][ T29] audit: type=1400 audit(1761448562.633:6151): avc: denied { nlmsg_write } for pid=13138 comm="syz.4.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.335007][ T29] audit: type=1326 audit(1761448562.743:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 126.358601][ T29] audit: type=1326 audit(1761448562.743:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 126.382404][ T29] audit: type=1326 audit(1761448562.743:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 126.405960][ T29] audit: type=1326 audit(1761448562.743:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 126.953747][T13148] geneve2: entered promiscuous mode [ 126.959006][T13148] geneve2: entered allmulticast mode [ 127.038527][T13163] loop6: detected capacity change from 0 to 512 [ 127.052807][T13163] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.067854][T13163] EXT4-fs (loop6): mount failed [ 127.815609][T13191] loop1: detected capacity change from 0 to 512 [ 127.832586][T13191] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.847562][T13191] EXT4-fs (loop1): mount failed [ 127.971016][T13218] wg1: entered promiscuous mode [ 127.976030][T13218] wg1: entered allmulticast mode [ 128.008047][T13224] netlink: 'syz.4.4209': attribute type 1 has an invalid length. [ 128.038107][T13224] smc: adding net device bond0 with user defined pnetid SYZ2 [ 128.046472][T13224] bond0: entered promiscuous mode [ 128.051796][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.098076][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.105271][T13224] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.115655][T13224] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 128.126896][T13224] bond0: (slave vxcan3): making interface the new active one [ 128.134357][T13224] vxcan3: entered promiscuous mode [ 128.140771][T13224] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 128.152185][T13239] __nla_validate_parse: 6 callbacks suppressed [ 128.152198][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4216'. [ 128.204732][ T3388] kernel read not supported for file /vcs (pid: 3388 comm: kworker/1:3) [ 128.243118][T13253] netlink: 'syz.6.4234': attribute type 1 has an invalid length. [ 128.257796][T13253] bond1: entered promiscuous mode [ 128.265278][T13253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.284579][T13253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.292837][T13253] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.303036][T13253] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 128.314087][T13253] bond1: (slave vxcan3): making interface the new active one [ 128.321460][T13253] vxcan3: entered promiscuous mode [ 128.327507][T13253] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 128.933442][T13283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4237'. [ 128.958767][T10898] kernel read not supported for file /vcs (pid: 10898 comm: kworker/0:5) [ 128.979173][T13290] netlink: 'syz.2.4241': attribute type 1 has an invalid length. [ 128.997464][T13290] smc: adding net device bond0 with user defined pnetid SYZ2 [ 129.005822][T13295] ref_ctr_offset mismatch. inode: 0x105e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 129.006033][T13290] bond0: entered promiscuous mode [ 129.022499][T13290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.054456][T13290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.061519][T13290] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 129.071715][T13290] bond0: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 129.082799][T13290] bond0: (slave vxcan1): making interface the new active one [ 129.090168][T13290] vxcan1: entered promiscuous mode [ 129.096236][T13290] bond0: (slave vxcan1): Enslaving as an active interface with an up link [ 129.139933][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4257'. [ 130.019875][T13329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4256'. [ 130.063641][T13337] netlink: 'syz.5.4259': attribute type 1 has an invalid length. [ 130.078020][T13337] bond1: entered promiscuous mode [ 130.083365][T13337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.104087][T13337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.113803][T13337] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 130.123948][T13345] SELinux: policydb version 0 does not match my version range 15-35 [ 130.124001][T13337] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 130.126418][T13337] bond1: (slave vxcan1): making interface the new active one [ 130.142957][T13345] SELinux: failed to load policy [ 130.148465][T13337] vxcan1: entered promiscuous mode [ 130.159457][T13337] bond1: (slave vxcan1): Enslaving as an active interface with an up link [ 130.272739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.283231][T13366] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4274'. [ 130.311366][T13368] vhci_hcd: default hub control req: 0314 v001b i0006 l0 [ 130.343377][T13376] netlink: 'syz.1.4279': attribute type 1 has an invalid length. [ 130.352052][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4281'. [ 130.368558][T13376] bond1: entered promiscuous mode [ 130.375021][T13376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.394799][T13378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.420012][T13376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.429413][T13376] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 130.439747][T13376] bond1: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 130.451323][T13376] bond1: (slave vxcan5): making interface the new active one [ 130.458799][T13376] vxcan5: entered promiscuous mode [ 130.465626][T13376] bond1: (slave vxcan5): Enslaving as an active interface with an up link [ 130.477987][T13378] bond1: (slave batadv1): Opening slave failed [ 130.593801][T13404] loop2: detected capacity change from 0 to 8192 [ 130.659161][T13421] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 130.699472][T13419] loop4: detected capacity change from 0 to 8192 [ 130.718609][T13419] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 130.727469][T13419] FAT-fs (loop4): Filesystem has been set read-only [ 130.740092][T13427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 130.746619][T13427] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.754094][T13427] vhci_hcd vhci_hcd.0: Device attached [ 130.761292][T13434] vhci_hcd: connection closed [ 130.761939][ T135] vhci_hcd: stop threads [ 130.770942][ T135] vhci_hcd: release socket [ 130.775418][ T135] vhci_hcd: disconnect device [ 130.800693][T13441] lo speed is unknown, defaulting to 1000 [ 130.806491][T13441] lo speed is unknown, defaulting to 1000 [ 130.812396][T13441] lo speed is unknown, defaulting to 1000 [ 130.819011][T13441] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.829352][T13441] lo speed is unknown, defaulting to 1000 [ 130.835610][T13441] lo speed is unknown, defaulting to 1000 [ 130.841584][T13441] lo speed is unknown, defaulting to 1000 [ 130.847619][T13441] lo speed is unknown, defaulting to 1000 [ 130.853834][T13441] lo speed is unknown, defaulting to 1000 [ 130.868751][T13443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4306'. [ 130.911429][T13451] loop4: detected capacity change from 0 to 128 [ 131.037280][T13469] x_tables: duplicate underflow at hook 1 [ 131.151505][T13491] IPv6: Can't replace route, no match found [ 131.177737][ T29] kauditd_printk_skb: 959 callbacks suppressed [ 131.177752][ T29] audit: type=1326 audit(1761448567.580:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.208745][ T29] audit: type=1326 audit(1761448567.580:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.232313][ T29] audit: type=1326 audit(1761448567.580:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.255884][ T29] audit: type=1326 audit(1761448567.580:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.279422][ T29] audit: type=1326 audit(1761448567.580:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.302912][ T29] audit: type=1326 audit(1761448567.610:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.327083][ T29] audit: type=1326 audit(1761448567.610:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.350566][ T29] audit: type=1326 audit(1761448567.610:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.374157][ T29] audit: type=1326 audit(1761448567.610:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.397693][ T29] audit: type=1326 audit(1761448567.610:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 131.976619][T13500] netlink: 'syz.2.4334': attribute type 15 has an invalid length. [ 131.984587][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 132.003569][T13500] netlink: 'syz.2.4334': attribute type 15 has an invalid length. [ 132.003661][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 132.011385][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 132.038365][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 132.046784][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 132.074989][ T31] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 132.157161][T13533] netlink: 'syz.2.4350': attribute type 3 has an invalid length. [ 132.290522][T13559] netlink: 'syz.1.4358': attribute type 1 has an invalid length. [ 132.309459][T13564] program syz.5.4360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.320843][T13569] loop1: detected capacity change from 0 to 512 [ 132.351248][T13569] EXT4-fs mount: 8 callbacks suppressed [ 132.351261][T13569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.382418][T13569] ext4 filesystem being mounted at /844/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.435665][T13569] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4361: Failed to acquire dquot type 1 [ 132.480923][ T4029] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.579453][T13605] veth2: entered promiscuous mode [ 132.584529][T13605] veth2: entered allmulticast mode [ 132.630238][T13614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13614 comm=syz.2.4380 [ 132.642871][T13614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13614 comm=syz.2.4380 [ 132.693095][T13625] program syz.2.4386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.730966][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4390'. [ 133.001170][T13666] program syz.6.4403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.389294][T13699] SELinux: failed to load policy [ 133.410281][T13701] serio: Serial port ptm0 [ 133.537256][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4423'. [ 133.625927][T10898] hid_parser_main: 144 callbacks suppressed [ 133.625946][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.639369][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.646776][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.654174][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.661571][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.669013][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.676555][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.684150][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.691541][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.699035][T10898] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 133.722732][T10898] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz1 [ 133.890071][ T1004] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.915253][T13754] vhci_hcd: invalid port number 96 [ 133.920379][T13754] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 134.108744][T13774] loop2: detected capacity change from 0 to 1024 [ 134.116114][T13774] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.127982][T13774] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.4447: iget: bogus i_mode (1) [ 134.140032][T13774] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4447: couldn't read orphan inode 11 (err -117) [ 134.152385][T13774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.166268][T13774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.047691][ C1] hrtimer: interrupt took 52064 ns [ 135.086888][T13813] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 135.230072][T10898] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 135.346100][T13856] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 135.365593][T13858] netlink: 'syz.2.4485': attribute type 6 has an invalid length. [ 135.663643][T13901] loop6: detected capacity change from 0 to 128 [ 135.713129][T13901] bio_check_eod: 32 callbacks suppressed [ 135.713143][T13901] syz.6.4505: attempt to access beyond end of device [ 135.713143][T13901] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 135.732126][T13901] buffer_io_error: 18 callbacks suppressed [ 135.732142][T13901] Buffer I/O error on dev loop6, logical block 2078, async page read [ 135.746764][T13901] syz.6.4505: attempt to access beyond end of device [ 135.746764][T13901] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 135.760007][T13901] Buffer I/O error on dev loop6, logical block 2078, async page read [ 135.768613][T13901] syz.6.4505: attempt to access beyond end of device [ 135.768613][T13901] loop6: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 135.781849][T13901] Buffer I/O error on dev loop6, logical block 2078, async page read [ 135.854580][T13915] netlink: 'syz.6.4512': attribute type 12 has an invalid length. [ 135.908631][T13927] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13927 comm=syz.6.4518 [ 135.954971][ T6546] Bluetooth: hci0: command 0x1003 tx timeout [ 135.960994][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.121428][T13955] loop4: detected capacity change from 0 to 1024 [ 136.136626][T13955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.158294][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.191856][ T29] kauditd_printk_skb: 1050 callbacks suppressed [ 136.191893][ T29] audit: type=1326 audit(1761448572.588:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23993d5e67 code=0x7ffc0000 [ 136.223420][ T29] audit: type=1326 audit(1761448572.628:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f239937b099 code=0x7ffc0000 [ 136.247053][ T29] audit: type=1326 audit(1761448572.628:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23993d5e67 code=0x7ffc0000 [ 136.270703][ T29] audit: type=1326 audit(1761448572.628:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f239937b099 code=0x7ffc0000 [ 136.294484][ T29] audit: type=1326 audit(1761448572.628:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 136.321829][ T52] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.332604][ T29] audit: type=1400 audit(1761448572.698:8176): avc: denied { mounton } for pid=13965 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 136.354295][ T29] audit: type=1326 audit(1761448572.718:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23993d5e67 code=0x7ffc0000 [ 136.364629][T13970] loop1: detected capacity change from 0 to 2048 [ 136.377809][ T29] audit: type=1326 audit(1761448572.718:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f239937b099 code=0x7ffc0000 [ 136.407533][ T29] audit: type=1326 audit(1761448572.718:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f23993defc9 code=0x7ffc0000 [ 136.431042][ T29] audit: type=1326 audit(1761448572.718:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23993d5e67 code=0x7ffc0000 [ 136.448489][T13970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.466754][T13970] ext4 filesystem being mounted at /877/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.486628][ T52] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.497913][ T4029] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.529243][T13965] lo speed is unknown, defaulting to 1000 [ 136.571351][ T52] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.608168][ T52] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.656194][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4548'. [ 136.658526][T13965] chnl_net:caif_netlink_parms(): no params data found [ 136.768457][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.781229][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.802551][ T52] bond0 (unregistering): Released all slaves [ 136.811607][ T52] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 136.819645][ T52] vxcan3: left promiscuous mode [ 136.825215][ T52] bond1 (unregistering): Released all slaves [ 136.860484][T13965] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.867593][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.874720][T13965] bridge_slave_0: entered allmulticast mode [ 136.881142][T13965] bridge_slave_0: entered promiscuous mode [ 136.887488][T14013] lo speed is unknown, defaulting to 1000 [ 136.887828][T13965] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.900343][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.907613][T13965] bridge_slave_1: entered allmulticast mode [ 136.914033][T13965] bridge_slave_1: entered promiscuous mode [ 136.927509][ T52] hsr_slave_0: left promiscuous mode [ 136.933051][ T52] hsr_slave_1: left promiscuous mode [ 136.938700][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.946085][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.953504][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.960895][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.970226][ T52] veth1_macvtap: left promiscuous mode [ 136.975932][ T52] veth1_vlan: left promiscuous mode [ 136.981127][ T52] veth0_vlan: left promiscuous mode [ 137.032920][ T52] team0 (unregistering): Port device team_slave_1 removed [ 137.042794][ T52] team0 (unregistering): Port device team_slave_0 removed [ 137.083723][T13965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.095861][T13965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.120032][T13965] team0: Port device team_slave_0 added [ 137.126610][T13965] team0: Port device team_slave_1 added [ 137.141631][T13965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.148586][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.174485][T13965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.186024][T13965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.192986][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.218932][T13965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.242334][T13965] hsr_slave_0: entered promiscuous mode [ 137.248542][T13965] hsr_slave_1: entered promiscuous mode [ 137.254298][T13965] debugfs: 'hsr0' already exists in 'hsr' [ 137.260018][T13965] Cannot create hsr debugfs directory [ 137.318521][T13965] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 137.327655][T13965] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 137.336154][T13965] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 137.345031][T13965] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 137.376705][T13965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.388742][T13965] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.397968][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.405008][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.421607][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.428671][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.480520][T13965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.561273][T13965] veth0_vlan: entered promiscuous mode [ 137.568428][T13965] veth1_vlan: entered promiscuous mode [ 137.581702][T13965] veth0_macvtap: entered promiscuous mode [ 137.588888][T13965] veth1_macvtap: entered promiscuous mode [ 137.599418][T13965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.610056][T13965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.619792][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.628588][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.637745][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.646762][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.687893][T14053] loop7: detected capacity change from 0 to 512 [ 137.696325][T14053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.704187][T14053] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.4536: corrupted in-inode xattr: e_value size too large [ 137.719173][T14053] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4536: couldn't read orphan inode 15 (err -117) [ 137.731514][T14053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.762996][T13965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.784516][T14068] loop5: detected capacity change from 0 to 1024 [ 137.807443][T14068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.823481][T14068] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.858943][T14083] loop1: detected capacity change from 0 to 512 [ 137.869540][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.875080][T14083] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.902867][T14089] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 137.906617][T14092] loop5: detected capacity change from 0 to 512 [ 137.918809][T14083] tipc: Started in network mode [ 137.923820][T14083] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 137.942836][T14092] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4573: bg 0: block 393: padding at end of block bitmap is not set [ 137.965030][T14083] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 137.973167][T14083] tipc: Enabled bearer , priority 10 [ 137.989548][T14092] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 137.999278][T14092] EXT4-fs (loop5): 2 truncates cleaned up [ 138.013294][T14092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.102600][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.323177][T14157] loop5: detected capacity change from 0 to 1024 [ 138.329848][T14157] EXT4-fs: Ignoring removed orlov option [ 138.360458][T14157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.385694][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.402569][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4608'. [ 138.628171][T14187] lo speed is unknown, defaulting to 1000 [ 138.714509][T14198] netlink: 80 bytes leftover after parsing attributes in process `+}[@'. [ 138.962740][T14238] loop4: detected capacity change from 0 to 512 [ 138.977782][T14238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.990944][T14238] ext4 filesystem being mounted at /894/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.035879][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.080773][T14253] ref_ctr_offset mismatch. inode: 0x1225 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 139.095911][ T2968] tipc: Node number set to 1 [ 139.266836][T14260] vhci_hcd: invalid port number 96 [ 139.271991][T14260] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 139.294276][T14264] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4653'. [ 139.303284][T14264] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4653'. [ 139.496441][T14292] loop4: detected capacity change from 0 to 1024 [ 139.503420][T14292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.518106][T14292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.559541][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.597153][T14303] lo speed is unknown, defaulting to 1000 [ 139.681161][T14320] loop1: detected capacity change from 0 to 512 [ 139.689257][T14322] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4680'. [ 139.699574][T14322] 0ªî{X¹¦: renamed from gretap0 [ 139.705314][T14320] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.706250][T14322] 0ªî{X¹¦: entered allmulticast mode [ 139.722918][T14322] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 139.742218][T14320] EXT4-fs (loop1): 1 truncate cleaned up [ 139.752279][T14324] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4681'. [ 139.761832][T14320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.795309][T14332] 9pnet_fd: Insufficient options for proto=fd [ 139.818722][T14338] loop4: detected capacity change from 0 to 128 [ 139.876398][ T4029] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.934234][T14358] veth0: entered promiscuous mode [ 139.939776][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4696'. [ 139.962157][T14358] veth0 (unregistering): left promiscuous mode [ 140.075164][T14385] xt_CT: No such helper "snmp_trap" [ 140.142581][T14400] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4716'. [ 140.187665][T14408] netlink: 'syz.4.4719': attribute type 11 has an invalid length. [ 140.195524][T14408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4719'. [ 140.231635][T14410] x_tables: duplicate underflow at hook 1 [ 140.245105][T14414] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4722'. [ 140.416239][T14448] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4748'. [ 140.472416][T14459] tipc: Enabling of bearer rejected, failed to enable media [ 140.635869][T14480] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 140.635869][T14480] program syz.1.4752 not setting count and/or reply_len properly [ 140.890284][T14534] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 140.929774][T14540] loop4: detected capacity change from 0 to 512 [ 140.936718][T14540] EXT4-fs: dax option not supported [ 140.957410][T14544] loop5: detected capacity change from 0 to 1024 [ 140.966270][T14544] EXT4-fs: Ignoring removed orlov option [ 140.973934][T14544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.040483][T14553] loop4: detected capacity change from 0 to 256 [ 141.049132][T14553] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 141.057010][T14553] FAT-fs (loop4): Filesystem has been set read-only [ 141.066448][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.119162][T14558] loop5: detected capacity change from 0 to 2048 [ 141.134810][T14558] EXT4-fs: Ignoring removed bh option [ 141.148484][T14558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.174620][T14558] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.201460][T14558] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 141.213886][T14558] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.213886][T14558] [ 141.223732][T14558] EXT4-fs (loop5): Total free blocks count 0 [ 141.229874][T14558] EXT4-fs (loop5): Free/Dirty block details [ 141.235967][T14558] EXT4-fs (loop5): free_blocks=2415919104 [ 141.236859][ T29] kauditd_printk_skb: 1123 callbacks suppressed [ 141.236873][ T29] audit: type=1326 audit(1761448577.627:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05c40d5e67 code=0x7ffc0000 [ 141.241715][T14558] EXT4-fs (loop5): dirty_blocks=32 [ 141.248089][ T29] audit: type=1326 audit(1761448577.627:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05c407b099 code=0x7ffc0000 [ 141.271383][T14558] EXT4-fs (loop5): Block reservation details [ 141.271398][T14558] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 141.276517][ T29] audit: type=1326 audit(1761448577.637:9306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 141.335238][ T29] audit: type=1326 audit(1761448577.637:9307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05c40d5e67 code=0x7ffc0000 [ 141.358640][ T29] audit: type=1326 audit(1761448577.637:9308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05c407b099 code=0x7ffc0000 [ 141.382022][ T29] audit: type=1326 audit(1761448577.637:9309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 141.388506][T14578] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.414363][ T29] audit: type=1326 audit(1761448577.737:9310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05c40d5e67 code=0x7ffc0000 [ 141.437954][ T29] audit: type=1326 audit(1761448577.737:9311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05c407b099 code=0x7ffc0000 [ 141.461535][ T29] audit: type=1326 audit(1761448577.737:9312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f05c40defc9 code=0x7ffc0000 [ 141.485113][ T29] audit: type=1326 audit(1761448577.737:9313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05c40d5e67 code=0x7ffc0000 [ 141.510889][ T8729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.587876][T14594] loop5: detected capacity change from 0 to 164 [ 141.598095][T14599] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 141.598095][T14599] program syz.7.4807 not setting count and/or reply_len properly [ 141.598138][T14594] Unable to read rock-ridge attributes [ 141.638897][T14594] Unable to read rock-ridge attributes [ 141.645192][T14594] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 141.720751][T14613] bridge0: entered promiscuous mode [ 141.727556][T14613] macsec1: entered promiscuous mode [ 141.733606][T14613] bridge0: port 3(macsec1) entered blocking state [ 141.740277][T14613] bridge0: port 3(macsec1) entered disabled state [ 141.746862][T14613] macsec1: entered allmulticast mode [ 141.752138][T14613] bridge0: entered allmulticast mode [ 141.758517][T14613] macsec1: left allmulticast mode [ 141.763566][T14613] bridge0: left allmulticast mode [ 141.773551][T14613] bridge0: left promiscuous mode [ 141.983141][T14647] loop2: detected capacity change from 0 to 764 [ 141.998690][T14647] Symlink component flag not implemented [ 142.004343][T14647] Symlink component flag not implemented [ 142.018606][T14647] Symlink component flag not implemented (129) [ 142.024785][T14647] Symlink component flag not implemented (6) [ 142.031433][T14647] rock: directory entry would overflow storage [ 142.037608][T14647] rock: sig=0x4f50, size=4, remaining=3 [ 142.043155][T14647] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 142.418532][ T3388] IPVS: starting estimator thread 0... [ 142.440342][T14700] netlink: 'syz.5.4855': attribute type 21 has an invalid length. [ 142.506997][T14696] IPVS: using max 2976 ests per chain, 148800 per kthread [ 142.612005][T14738] loop4: detected capacity change from 0 to 256 [ 142.619215][T14738] FAT-fs (loop4): bogus number of FAT sectors [ 142.625326][T14738] FAT-fs (loop4): Can't find a valid FAT filesystem [ 142.691345][T14751] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.698754][T14751] vhci_hcd: invalid port number 253 [ 142.721688][T14753] ip6erspan0: entered promiscuous mode [ 142.816592][T14772] loop4: detected capacity change from 0 to 1024 [ 142.823461][ T31] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xec [ 142.823661][T14772] EXT4-fs: Ignoring removed bh option [ 142.877750][T14772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.922842][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.108925][T14793] pimreg: left allmulticast mode [ 143.236358][T14807] loop4: detected capacity change from 0 to 256 [ 143.244737][T14807] FAT-fs (loop4): bogus sectors per cluster 223 [ 143.251107][T14807] FAT-fs (loop4): Can't find a valid FAT filesystem [ 143.636595][T14824] loop5: detected capacity change from 0 to 128 [ 143.655448][T14824] EXT4-fs: Ignoring removed nobh option [ 143.667663][T14824] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.684947][T14824] ext4 filesystem being mounted at /545/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.717301][ T8729] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.764190][T14851] netlink: 'syz.4.4923': attribute type 10 has an invalid length. [ 143.798828][T14851] team0 (unregistering): Port device team_slave_0 removed [ 143.806807][T14851] team0 (unregistering): Port device team_slave_1 removed [ 143.820196][T14857] vlan3: entered allmulticast mode [ 143.900588][T14872] netlink: 'syz.5.4939': attribute type 1 has an invalid length. [ 143.908493][T14872] __nla_validate_parse: 12 callbacks suppressed [ 143.908506][T14872] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4939'. [ 143.921986][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4933'. [ 143.947354][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4933'. [ 143.985564][T14887] SELinux: failed to load policy [ 144.054386][T14900] smc: net device bond0 applied user defined pnetid SYZ0 [ 144.061098][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4946'. [ 144.070496][T14900] smc: net device bond0 erased user defined pnetid SYZ0 [ 144.117913][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4946'. [ 144.140425][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4946'. [ 144.154542][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4946'. [ 144.288453][T14943] SELinux: failed to load policy [ 144.323524][T14951] 9pnet_fd: Insufficient options for proto=fd [ 144.410345][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4978'. [ 144.428746][T14970] xfrm1: entered promiscuous mode [ 144.433811][T14970] xfrm1: entered allmulticast mode [ 144.442135][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4978'. [ 144.583959][T14986] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.594345][T14986] vhci_hcd: invalid port number 96 [ 144.599607][T14986] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 144.635749][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4989'. [ 144.677575][T15004] vhci_hcd: default hub control req: 400c v5000 i0007 l0 [ 144.754319][T15016] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 144.775995][T15020] ================================================================== [ 144.784093][T15020] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 144.791107][T15020] [ 144.793409][T15020] write to 0xffff888104223648 of 8 bytes by task 8729 on cpu 1: [ 144.801112][T15020] release_task+0x6f9/0xb60 [ 144.805619][T15020] wait_consider_task+0x114a/0x1660 [ 144.810792][T15020] __do_wait+0xfa/0x510 [ 144.814921][T15020] do_wait+0xb7/0x250 [ 144.818874][T15020] kernel_wait4+0x16b/0x1e0 [ 144.823351][T15020] __x64_sys_wait4+0x91/0x120 [ 144.828004][T15020] x64_sys_call+0x2a6a/0x3000 [ 144.832676][T15020] do_syscall_64+0xd2/0x200 [ 144.837153][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.843019][T15020] [ 144.845322][T15020] read to 0xffff888104223180 of 3264 bytes by task 15020 on cpu 0: [ 144.853218][T15020] memcpy_and_pad+0x48/0x80 [ 144.857713][T15020] arch_dup_task_struct+0x2c/0x40 [ 144.862714][T15020] dup_task_struct+0x83/0x6b0 [ 144.867369][T15020] copy_process+0x399/0x2000 [ 144.871936][T15020] kernel_clone+0x16c/0x5c0 [ 144.876417][T15020] __se_sys_clone3+0x1c2/0x200 [ 144.881159][T15020] __x64_sys_clone3+0x31/0x40 [ 144.885815][T15020] x64_sys_call+0x1fc9/0x3000 [ 144.890467][T15020] do_syscall_64+0xd2/0x200 [ 144.894944][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.900813][T15020] [ 144.903111][T15020] Reported by Kernel Concurrency Sanitizer on: [ 144.909248][T15020] CPU: 0 UID: 0 PID: 15020 Comm: syz.7.4999 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.920598][T15020] Tainted: [W]=WARN [ 144.924372][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.934406][T15020] ================================================================== [ 144.945084][ T52] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 147.557748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog