last executing test programs: 17.725406325s ago: executing program 2 (id=1258): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x4, @b={0x9, 0x2, 0x2, 0x1, 0xf8, 0xb, 0xd, {0x1, "1b"}, 0x3, 0x6, 0x5, 0x4, 0x1, "b4"}}, 0x12) 16.841703638s ago: executing program 2 (id=1268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 16.780352699s ago: executing program 2 (id=1270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\x00\x00@\x00'}) 16.521446493s ago: executing program 2 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 16.514604863s ago: executing program 2 (id=1277): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.152542139s ago: executing program 2 (id=1283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.152334629s ago: executing program 32 (id=1283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.859000213s ago: executing program 1 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 15.839790383s ago: executing program 1 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 15.801223164s ago: executing program 1 (id=1297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 15.749804775s ago: executing program 1 (id=1301): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 15.695875035s ago: executing program 1 (id=1311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="ed"], 0x20) 15.41302649s ago: executing program 1 (id=1307): r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) 15.40932047s ago: executing program 33 (id=1307): r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) 1.238002272s ago: executing program 0 (id=1708): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 841.160878ms ago: executing program 3 (id=1718): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000001f00)=""/4094, &(0x7f0000000780), &(0x7f0000000200), 0x4, r0}, 0x38) 808.721668ms ago: executing program 0 (id=1719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x300}, 0x90) 808.089328ms ago: executing program 0 (id=1720): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) 788.008149ms ago: executing program 3 (id=1722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 787.311689ms ago: executing program 6 (id=1723): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) 750.506909ms ago: executing program 3 (id=1724): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/73, 0x49, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0) 734.46277ms ago: executing program 6 (id=1726): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f8, 0x2c0, 0x940c, 0x3002, 0x2c0, 0x2c0, 0x428, 0x3d8, 0x3d8, 0x428, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xffff0000}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x879, 0x5}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x2, 0x2, 0x0, 0x6, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0x0, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0x0, 0xffffffff], [0xffffff00, 0x3b180b3d17a97f52, 0xffffff00, 0xff000000], 0x52, 0x501}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0xb, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) 690.78081ms ago: executing program 6 (id=1727): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 633.834871ms ago: executing program 3 (id=1728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 607.957212ms ago: executing program 3 (id=1729): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) dup3(r3, r2, 0x0) 540.511053ms ago: executing program 3 (id=1732): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa01", 0x2a}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 498.227453ms ago: executing program 0 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {}, {0x0, 0xc3, 0x0, 0x636e8971}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x6, 0x6, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x1000, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x2, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x8, 0x0, 0x0, 0x0, 0xb8a, 0x6}, {0xffffffff}, {}, {}, {}, {0x80000001, 0x0, 0x0, 0x2000000, 0x3}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfff}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x2, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0x7091cba, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa144}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x3, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000}, {0x0, 0x2e9c}, {0x0, 0x10000000, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x20000, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x2}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 495.785483ms ago: executing program 5 (id=1734): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close(r2) 455.918034ms ago: executing program 5 (id=1736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x103d000, 0x1000, 0xe97}, 0x20) 426.106864ms ago: executing program 4 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="71b28209c8", 0x5}], 0x1}, 0x40004) 352.945705ms ago: executing program 0 (id=1738): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000000}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x2f43, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 339.916205ms ago: executing program 5 (id=1739): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 339.305496ms ago: executing program 4 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 302.239686ms ago: executing program 5 (id=1741): r0 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xe0f5, 0x2, 0x2, 0xf2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x7871, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) 288.307096ms ago: executing program 4 (id=1742): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/55, 0x37) getdents(r1, 0xfffffffffffffffd, 0x58) 255.641467ms ago: executing program 6 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 243.775407ms ago: executing program 4 (id=1744): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) 240.623757ms ago: executing program 5 (id=1745): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000100)='a', 0x1, 0x7fff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 203.152407ms ago: executing program 4 (id=1746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 162.560208ms ago: executing program 6 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 161.959448ms ago: executing program 4 (id=1748): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 37.36944ms ago: executing program 6 (id=1749): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 28.46379ms ago: executing program 5 (id=1750): r0 = timerfd_create(0x7, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) timerfd_settime(r0, 0x3, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, 0x0) 0s ago: executing program 0 (id=1751): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) socket(0x15, 0x5, 0x0) epoll_create(0x8) kernel console output (not intermixed with test programs): th. [ 39.752120][ T4162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.798332][ T4162] bond1: (slave bridge1): making interface the new active one [ 39.807249][ T4162] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 39.845148][ T4168] SELinux: failed to load policy [ 39.895121][ T4173] serio: Serial port ptm0 [ 39.936777][ T4175] netlink: 'syz.3.283': attribute type 10 has an invalid length. [ 39.950311][ T4177] loop0: detected capacity change from 0 to 512 [ 39.964283][ T4175] ipvlan0: entered allmulticast mode [ 39.969849][ T4175] veth0_vlan: entered allmulticast mode [ 39.989703][ T4175] team0: Device ipvlan0 failed to register rx_handler [ 39.999117][ T4177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.014688][ T4180] syz_tun: entered allmulticast mode [ 40.019279][ T4177] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.055279][ T4179] syz_tun: left allmulticast mode [ 40.117974][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.226718][ T4197] sd 0:0:1:0: device reset [ 40.275873][ T4201] vhci_hcd: invalid port number 96 [ 40.281062][ T4201] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 40.295759][ T4207] Invalid ELF header magic: != ELF [ 40.387683][ T4217] serio: Serial port ptm0 [ 40.498321][ T4235] sd 0:0:1:0: device reset [ 40.527409][ T4237] SELinux: Context is not valid (left unmapped). [ 40.536373][ T3412] tipc: Node number set to 2886997007 [ 40.630623][ T4251] loop2: detected capacity change from 0 to 512 [ 40.708685][ T4251] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.313: bg 0: block 248: padding at end of block bitmap is not set [ 40.757625][ T4251] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.313: Failed to acquire dquot type 1 [ 40.770154][ T4251] EXT4-fs (loop2): 1 truncate cleaned up [ 40.777976][ T4251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.793586][ T4251] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.822502][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.942187][ T4269] SELinux: failed to load policy [ 40.962841][ T4280] loop1: detected capacity change from 0 to 1024 [ 40.979634][ T4280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.013893][ T4288] netlink: 'syz.0.331': attribute type 3 has an invalid length. [ 41.075674][ T4294] loop0: detected capacity change from 0 to 512 [ 41.082850][ T4294] EXT4-fs: Ignoring removed nobh option [ 41.089804][ T4294] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.103094][ T4294] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.108471][ T4296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.129975][ T4294] EXT4-fs (loop0): 1 truncate cleaned up [ 41.142029][ T4296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.150628][ T4294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.172412][ T4294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.271716][ T4304] loop0: detected capacity change from 0 to 1024 [ 41.304351][ T4308] atomic_op ffff88810451a528 conn xmit_atomic 0000000000000000 [ 41.314411][ T4304] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.338: Failed to acquire dquot type 0 [ 41.345019][ T4304] EXT4-fs (loop0): 1 truncate cleaned up [ 41.352668][ T4304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.413839][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.492686][ T4322] SELinux: syz.4.344 (4322) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.860878][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.877053][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 41.877068][ T29] audit: type=1326 audit(1752358209.950:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f38b2d6e929 code=0x7ffc0000 [ 41.920425][ T29] audit: type=1326 audit(1752358209.980:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38b2d0ab19 code=0x7ffc0000 [ 41.944996][ T29] audit: type=1326 audit(1752358209.980:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2d6e929 code=0x7ffc0000 [ 41.989227][ T4357] loop3: detected capacity change from 0 to 512 [ 41.998264][ T4357] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.005831][ T4357] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.360: bg 0: block 248: padding at end of block bitmap is not set [ 42.032485][ T4357] Quota error (device loop3): write_blk: dquota write failed [ 42.040343][ T4357] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 42.050347][ T4357] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.360: Failed to acquire dquot type 1 [ 42.064638][ T4357] EXT4-fs (loop3): 1 truncate cleaned up [ 42.071326][ T4357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.089198][ T4357] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 42.106691][ T4357] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.118083][ T4357] Quota error (device loop3): do_check_range: Getting block 1536 out of range 0-5 [ 42.147327][ T4372] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.159202][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.421501][ T4392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 42.454321][ T29] audit: type=1400 audit(1752358210.520:442): avc: denied { read write } for pid=4393 comm="syz.3.375" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 42.491206][ T29] audit: type=1400 audit(1752358210.520:443): avc: denied { open } for pid=4393 comm="syz.3.375" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 42.551803][ T4398] netlink: 'syz.3.377': attribute type 13 has an invalid length. [ 42.641043][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.648536][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.726148][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.739623][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.801320][ T4398] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.811692][ T4398] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.822329][ T4398] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.832277][ T4398] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.005680][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 43.479684][ T4457] loop3: detected capacity change from 0 to 512 [ 43.501743][ T4457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.516442][ T29] audit: type=1326 audit(1752358211.580:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e293e929 code=0x7ffc0000 [ 43.539845][ T29] audit: type=1326 audit(1752358211.580:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e293e929 code=0x7ffc0000 [ 43.566164][ T4457] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.602999][ T4457] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.405: Failed to acquire dquot type 1 [ 43.659275][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.744648][ T4484] loop1: detected capacity change from 0 to 128 [ 43.763970][ T4484] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.778776][ T4484] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.810685][ T4491] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.417'. [ 43.826444][ T4485] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.417'. [ 43.863178][ T4494] xt_hashlimit: max too large, truncated to 1048576 [ 43.922416][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.953152][ T4502] random: crng reseeded on system resumption [ 44.007690][ T112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.052409][ T112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.135266][ T112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.189360][ T4528] usb usb8: usbfs: process 4528 (syz.3.433) did not claim interface 0 before use [ 44.209288][ T112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.317834][ T4540] loop2: detected capacity change from 0 to 128 [ 44.347943][ T112] bridge_slave_1: left allmulticast mode [ 44.353723][ T112] bridge_slave_1: left promiscuous mode [ 44.359653][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.370448][ T4540] syz.2.440: attempt to access beyond end of device [ 44.370448][ T4540] loop2: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 44.384106][ T112] bridge_slave_0: left allmulticast mode [ 44.384136][ T4540] syz.2.440: attempt to access beyond end of device [ 44.384136][ T4540] loop2: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 44.389827][ T112] bridge_slave_0: left promiscuous mode [ 44.390042][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.405918][ T4540] syz.2.440: attempt to access beyond end of device [ 44.405918][ T4540] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 44.429260][ T4540] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 44.438759][ T4540] syz.2.440: attempt to access beyond end of device [ 44.438759][ T4540] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 44.453032][ T4540] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 44.476554][ T4540] syz.2.440: attempt to access beyond end of device [ 44.476554][ T4540] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 44.489936][ T4540] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 44.501838][ T4540] syz.2.440: attempt to access beyond end of device [ 44.501838][ T4540] loop2: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 44.515292][ T4540] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 44.524663][ T4540] syz.2.440: attempt to access beyond end of device [ 44.524663][ T4540] loop2: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 44.538536][ T4540] Buffer I/O error on dev loop2, logical block 146, lost async page write [ 44.547711][ T4540] syz.2.440: attempt to access beyond end of device [ 44.547711][ T4540] loop2: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 44.561166][ T4540] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 44.578906][ T4540] syz.2.440: attempt to access beyond end of device [ 44.578906][ T4540] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 44.592601][ T4540] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 44.601748][ T4540] syz.2.440: attempt to access beyond end of device [ 44.601748][ T4540] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 44.615096][ T4540] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 44.623840][ T4540] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 44.632563][ T4540] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 44.682075][ T112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.694350][ T112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.705168][ T112] bond0 (unregistering): Released all slaves [ 44.723539][ T4512] chnl_net:caif_netlink_parms(): no params data found [ 44.787395][ T4560] loop3: detected capacity change from 0 to 1024 [ 44.804259][ T4560] EXT4-fs: Ignoring removed orlov option [ 44.822567][ T112] hsr_slave_0: left promiscuous mode [ 44.838210][ T4560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.871829][ T4570] loop4: detected capacity change from 0 to 2048 [ 44.878365][ T112] hsr_slave_1: left promiscuous mode [ 44.884180][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.891670][ T112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.933440][ T112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.941027][ T112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.960978][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.971010][ T112] veth1_macvtap: left promiscuous mode [ 44.989054][ T4570] Alternate GPT is invalid, using primary GPT. [ 44.990531][ T112] veth0_macvtap: left promiscuous mode [ 44.995504][ T4570] loop4: p2 p3 p7 [ 45.000999][ T112] veth1_vlan: left promiscuous mode [ 45.010848][ T112] veth0_vlan: left promiscuous mode [ 45.134440][ T4586] 9pnet_fd: Insufficient options for proto=fd [ 45.186186][ T112] team0 (unregistering): Port device team_slave_1 removed [ 45.205496][ T112] team0 (unregistering): Port device team_slave_0 removed [ 45.240271][ T4598] loop4: detected capacity change from 0 to 128 [ 45.250137][ T4598] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.263951][ T4598] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.315788][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.322957][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.339131][ T4512] bridge_slave_0: entered allmulticast mode [ 45.345795][ T4512] bridge_slave_0: entered promiscuous mode [ 45.355123][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.362786][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.373345][ T4512] bridge_slave_1: entered allmulticast mode [ 45.379841][ T4512] bridge_slave_1: entered promiscuous mode [ 45.415878][ T4512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.423880][ T4512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.472090][ T4512] team0: Port device team_slave_0 added [ 45.485054][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.497951][ T4512] team0: Port device team_slave_1 added [ 45.539165][ T4609] veth1_to_bond: entered allmulticast mode [ 45.546095][ T4512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.553122][ T4512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.579386][ T4512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.610811][ T4512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.617850][ T4512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.643914][ T4512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.658522][ T4609] veth1_to_bond: entered promiscuous mode [ 45.660662][ T4617] raw_sendmsg: syz.1.472 forgot to set AF_INET. Fix it! [ 45.690324][ T4609] veth1_to_bond: left promiscuous mode [ 45.696042][ T4609] veth1_to_bond: left allmulticast mode [ 45.724164][ T4512] hsr_slave_0: entered promiscuous mode [ 45.731446][ T4512] hsr_slave_1: entered promiscuous mode [ 45.746792][ T4512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.766460][ T4512] Cannot create hsr debugfs directory [ 45.789868][ T4625] loop3: detected capacity change from 0 to 512 [ 45.808712][ T4625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.855317][ T4625] EXT4-fs (loop3): 1 truncate cleaned up [ 45.882365][ T4625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.922042][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.938801][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.957676][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.235536][ T4662] 9pnet: Could not find request transport: 0xffffffffffffffff [ 46.280487][ T4512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.296759][ T4512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.313377][ T4512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.330832][ T4512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.389713][ T4512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.405532][ T4512] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.416038][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.423155][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.438493][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.445636][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.551611][ T4512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.564926][ T4705] loop2: detected capacity change from 0 to 512 [ 46.580730][ T4705] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.505: bg 0: block 16: invalid block bitmap [ 46.593662][ T4705] EXT4-fs (loop2): Remounting filesystem read-only [ 46.600510][ T4705] EXT4-fs (loop2): 1 truncate cleaned up [ 46.607732][ T4705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.650404][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.661864][ T4512] veth0_vlan: entered promiscuous mode [ 46.672851][ T4512] veth1_vlan: entered promiscuous mode [ 46.696582][ T4512] veth0_macvtap: entered promiscuous mode [ 46.707934][ T4512] veth1_macvtap: entered promiscuous mode [ 46.722185][ T4512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.735496][ T4512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.759302][ T4719] Falling back ldisc for ptm0. [ 46.784257][ T4512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.786162][ T4717] openvswitch: netlink: Message has 6 unknown bytes. [ 46.793214][ T4512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.808931][ T4512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.818220][ T4512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.930455][ T4734] loop4: detected capacity change from 0 to 1024 [ 46.977686][ T4743] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 47.000028][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.036034][ T4753] batadv_slave_1: entered promiscuous mode [ 47.047692][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 47.047709][ T29] audit: type=1400 audit(1752358215.120:557): avc: denied { create } for pid=4732 comm="syz.4.514" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.062390][ T4753] batadv_slave_1: left promiscuous mode [ 47.124543][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.134227][ T4758] loop2: detected capacity change from 0 to 512 [ 47.145596][ T4758] EXT4-fs: Ignoring removed bh option [ 47.174406][ T29] audit: type=1400 audit(1752358215.240:558): avc: denied { ioctl } for pid=4763 comm="syz.0.528" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.228438][ T4767] pimreg: entered allmulticast mode [ 47.242726][ T4758] EXT4-fs error (device loop2): __ext4_iget:5379: inode #15: block 1803188595: comm syz.2.524: invalid block [ 47.261955][ T4767] pimreg: left allmulticast mode [ 47.268592][ T4758] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.524: couldn't read orphan inode 15 (err -117) [ 47.290830][ T4758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.336757][ T29] audit: type=1326 audit(1752358215.400:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 47.360057][ T29] audit: type=1326 audit(1752358215.400:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 47.383370][ T29] audit: type=1326 audit(1752358215.400:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 47.406633][ T29] audit: type=1326 audit(1752358215.400:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 47.429906][ T29] audit: type=1326 audit(1752358215.400:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 47.453300][ T29] audit: type=1326 audit(1752358215.400:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 47.476555][ T29] audit: type=1326 audit(1752358215.400:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 47.500003][ T29] audit: type=1326 audit(1752358215.400:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 47.539857][ T4782] netlink: 830 bytes leftover after parsing attributes in process `syz.1.532'. [ 47.582670][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.770456][ T4803] loop9: detected capacity change from 0 to 7 [ 47.784987][ T4803] loop9: unable to read partition table [ 47.802498][ T4803] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 47.802498][ T4803] ) failed (rc=-5) [ 47.868186][ T4810] Falling back ldisc for ptm0. [ 47.917000][ T4816] loop1: detected capacity change from 0 to 128 [ 47.924684][ T4818] loop3: detected capacity change from 0 to 128 [ 47.970202][ T4818] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.999367][ T4818] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.190427][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.336030][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 48.371765][ T4839] IPVS: Error joining to the multicast group [ 48.510396][ T4849] pimreg: entered allmulticast mode [ 48.530366][ T4849] pimreg: left allmulticast mode [ 48.608759][ T4855] loop2: detected capacity change from 0 to 512 [ 48.617679][ T4855] EXT4-fs: Ignoring removed i_version option [ 48.624047][ T4855] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 48.636176][ T4855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 48.640820][ T4857] loop3: detected capacity change from 0 to 128 [ 48.644308][ T4855] System zones: 1-12 [ 48.677787][ T4860] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 48.679320][ T4855] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.694013][ T4857] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 48.724072][ T4857] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.735353][ T4855] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.566: invalid indirect mapped block 12 (level 1) [ 48.772215][ T4855] EXT4-fs (loop2): Remounting filesystem read-only [ 48.779247][ T4855] EXT4-fs (loop2): 1 truncate cleaned up [ 48.785419][ T4855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 48.914359][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 48.945048][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.999922][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.001076][ T4879] loop4: detected capacity change from 0 to 512 [ 49.009264][ T3413] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.024365][ T4879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.068297][ T4879] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.084303][ T4885] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 49.087633][ T4879] EXT4-fs (loop4): 1 truncate cleaned up [ 49.092530][ T4885] geneve1: entered promiscuous mode [ 49.106801][ T4885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.115596][ T4885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.124443][ T4885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.133204][ T4885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.145397][ T4885] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 49.154783][ T4879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.181916][ T4883] infiniband syz2: set active [ 49.186842][ T4883] infiniband syz2: added veth0_to_bond [ 49.236877][ T4883] RDS/IB: syz2: added [ 49.253671][ T4883] smc: adding ib device syz2 with port count 1 [ 49.260061][ T4883] smc: ib device syz2 port 1 has pnetid [ 49.274492][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.458340][ T4912] xt_hashlimit: max too large, truncated to 1048576 [ 49.538798][ T4920] loop2: detected capacity change from 0 to 512 [ 49.572110][ T4920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.589147][ T4920] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.660193][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.756245][ T4944] loop2: detected capacity change from 0 to 1024 [ 49.764090][ T4944] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.775714][ T4944] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 49.784419][ T4944] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.792645][ T4944] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.606: bg 0: block 10: padding at end of block bitmap is not set [ 49.808457][ T4944] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.606: Failed to acquire dquot type 0 [ 49.820637][ T4944] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.606: Failed to acquire dquot type 0 [ 49.833369][ T4944] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.606: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.860516][ T4944] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.606: Failed to acquire dquot type 0 [ 49.891799][ T4944] EXT4-fs (loop2): 1 orphan inode deleted [ 49.903553][ T4944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.918792][ T4944] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.954498][ T4944] syz.2.606 (4944) used greatest stack depth: 9016 bytes left [ 50.030828][ T4966] loop1: detected capacity change from 0 to 256 [ 50.046078][ T4966] FAT-fs (loop1): Directory bread(block 64) failed [ 50.054303][ T4966] FAT-fs (loop1): Directory bread(block 65) failed [ 50.061369][ T4966] FAT-fs (loop1): Directory bread(block 66) failed [ 50.069133][ T4966] FAT-fs (loop1): Directory bread(block 67) failed [ 50.075850][ T4966] FAT-fs (loop1): Directory bread(block 68) failed [ 50.084024][ T4966] FAT-fs (loop1): Directory bread(block 69) failed [ 50.093329][ T4966] FAT-fs (loop1): Directory bread(block 70) failed [ 50.100104][ T4966] FAT-fs (loop1): Directory bread(block 71) failed [ 50.108075][ T4966] FAT-fs (loop1): Directory bread(block 72) failed [ 50.114668][ T4966] FAT-fs (loop1): Directory bread(block 73) failed [ 50.136732][ T4966] process 'syz.1.616' launched './file0' with NULL argv: empty string added [ 50.145726][ T4966] bio_check_eod: 18 callbacks suppressed [ 50.145740][ T4966] syz.1.616: attempt to access beyond end of device [ 50.145740][ T4966] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 50.170056][ T4966] syz.1.616: attempt to access beyond end of device [ 50.170056][ T4966] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 50.239637][ T4977] loop1: detected capacity change from 0 to 1024 [ 50.248150][ T4977] EXT4-fs: Ignoring removed bh option [ 50.253795][ T4977] EXT4-fs: inline encryption not supported [ 50.260485][ T4977] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.273190][ T4977] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 50.283454][ T4977] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm GPL: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.299884][ T4977] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm GPL: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.315803][ T4977] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm GPL: Failed to acquire dquot type 0 [ 50.328119][ T4977] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 50.337888][ T4977] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm GPL: mark_inode_dirty error [ 50.350125][ T4977] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 50.360593][ T4977] EXT4-fs (loop1): 1 orphan inode deleted [ 50.368262][ T4977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.381512][ T37] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.397429][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 50.436809][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.463111][ T3303] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.480719][ T3303] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 50.510796][ T3303] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 50.608282][ T5018] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 50.631292][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.645076][ T5018] bridge_slave_1: left allmulticast mode [ 50.650885][ T5018] bridge_slave_1: left promiscuous mode [ 50.656984][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.672490][ T5018] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 51.112844][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 51.137624][ T5069] bridge0: port 3(macvlan2) entered blocking state [ 51.144273][ T5069] bridge0: port 3(macvlan2) entered disabled state [ 51.153913][ T5074] loop4: detected capacity change from 0 to 512 [ 51.162161][ T5069] macvlan2: entered allmulticast mode [ 51.167670][ T5069] bridge0: entered allmulticast mode [ 51.175818][ T5069] macvlan2: left allmulticast mode [ 51.181268][ T5069] bridge0: left allmulticast mode [ 51.190828][ T5074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.204143][ T5074] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.337030][ T5091] loop3: detected capacity change from 0 to 256 [ 51.337539][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.369672][ T5091] FAT-fs (loop3): Directory bread(block 64) failed [ 51.378618][ T5091] FAT-fs (loop3): Directory bread(block 65) failed [ 51.385440][ T5091] FAT-fs (loop3): Directory bread(block 66) failed [ 51.392119][ T5091] FAT-fs (loop3): Directory bread(block 67) failed [ 51.398810][ T5091] FAT-fs (loop3): Directory bread(block 68) failed [ 51.406436][ T5091] FAT-fs (loop3): Directory bread(block 69) failed [ 51.418097][ T5094] loop4: detected capacity change from 0 to 1024 [ 51.425434][ T5094] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.437242][ T5091] FAT-fs (loop3): Directory bread(block 70) failed [ 51.443832][ T5091] FAT-fs (loop3): Directory bread(block 71) failed [ 51.451495][ T5091] FAT-fs (loop3): Directory bread(block 72) failed [ 51.458179][ T5096] SELinux: policydb version -832023019 does not match my version range 15-34 [ 51.460064][ T5094] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.467625][ T5091] FAT-fs (loop3): Directory bread(block 73) failed [ 51.475090][ T5094] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.488839][ T5096] SELinux: failed to load policy [ 51.498253][ T5094] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.673: bg 0: block 10: padding at end of block bitmap is not set [ 51.533098][ T5094] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.673: Failed to acquire dquot type 0 [ 51.554770][ T5091] syz.3.672: attempt to access beyond end of device [ 51.554770][ T5091] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 51.571426][ T5094] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.673: Failed to acquire dquot type 0 [ 51.583048][ T5091] syz.3.672: attempt to access beyond end of device [ 51.583048][ T5091] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 51.597933][ T5094] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.673: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.646964][ T5094] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.673: Failed to acquire dquot type 0 [ 51.660430][ T5094] EXT4-fs (loop4): 1 orphan inode deleted [ 51.667793][ T5094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.685420][ T5094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.760806][ T5094] syz.4.673 (5094) used greatest stack depth: 8824 bytes left [ 51.777885][ T5108] capability: warning: `syz.0.678' uses 32-bit capabilities (legacy support in use) [ 52.059025][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 52.059042][ T29] audit: type=1326 audit(1752358220.130:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.108480][ T29] audit: type=1326 audit(1752358220.170:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.131833][ T29] audit: type=1326 audit(1752358220.170:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.155287][ T29] audit: type=1326 audit(1752358220.170:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.178852][ T29] audit: type=1326 audit(1752358220.170:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.202173][ T29] audit: type=1326 audit(1752358220.170:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.225658][ T29] audit: type=1326 audit(1752358220.170:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.249521][ T29] audit: type=1326 audit(1752358220.170:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.273067][ T29] audit: type=1326 audit(1752358220.170:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.296470][ T29] audit: type=1326 audit(1752358220.170:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 52.296850][ T5148] SELinux: GPL (5148) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 52.454435][ T5165] loop4: detected capacity change from 0 to 2048 [ 52.487507][ T5165] loop4: p1 < > p4 [ 52.493488][ T5165] loop4: p4 size 8388608 extends beyond EOD, truncated [ 52.661077][ T5179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.913519][ T5215] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.938721][ T5207] loop3: detected capacity change from 0 to 8192 [ 52.953937][ T5207] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.168369][ T5250] loop7: detected capacity change from 0 to 16384 [ 53.227837][ T5250] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 53.239965][ T5250] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 53.256340][ T5250] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.265834][ T5250] buffer_io_error: 16 callbacks suppressed [ 53.265849][ T5250] Buffer I/O error on dev loop7, logical block 544, async page read [ 53.328211][ T5249] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.337947][ T5249] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 53.346638][ T5249] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 53.355033][ T5249] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 53.362071][ T5261] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.363453][ T5249] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 53.379214][ T5249] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 53.387669][ T5249] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 53.396021][ T5249] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 53.404442][ T5249] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 53.412880][ T5249] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 53.427322][ T5249] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.441618][ T5249] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.454990][ T5249] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.466805][ T5249] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 53.544239][ T5266] loop2: detected capacity change from 0 to 1024 [ 53.563542][ T5266] EXT4-fs: Ignoring removed bh option [ 53.578968][ T5266] EXT4-fs: inline encryption not supported [ 53.593086][ T5266] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.624882][ T5266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 53.645946][ T5266] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm GPL: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.648977][ T2958] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.668606][ T5266] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm GPL: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.669341][ T2958] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.682579][ T5266] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm GPL: Failed to acquire dquot type 0 [ 53.704528][ T5266] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 53.715227][ T5266] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm GPL: mark_inode_dirty error [ 53.730544][ T5266] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 53.740903][ T5266] EXT4-fs (loop2): 1 orphan inode deleted [ 53.747456][ T5266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.760026][ T112] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.774328][ T112] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 53.795313][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.805146][ T3304] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 53.819002][ T3304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 53.828665][ T3304] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 53.974866][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 53.989970][ T5296] bridge0: port 3(macvlan2) entered blocking state [ 53.996616][ T5296] bridge0: port 3(macvlan2) entered disabled state [ 54.003458][ T5296] macvlan2: entered allmulticast mode [ 54.009071][ T5296] bridge0: entered allmulticast mode [ 54.016989][ T5296] macvlan2: left allmulticast mode [ 54.022200][ T5296] bridge0: left allmulticast mode [ 54.185837][ T5314] bridge0: port 3(syz_tun) entered blocking state [ 54.192754][ T5314] bridge0: port 3(syz_tun) entered disabled state [ 54.199320][ T5314] syz_tun: entered allmulticast mode [ 54.205185][ T5314] syz_tun: entered promiscuous mode [ 54.210636][ T5314] bridge0: port 3(syz_tun) entered blocking state [ 54.217145][ T5314] bridge0: port 3(syz_tun) entered forwarding state [ 54.455940][ T5329] sg_write: data in/out 16514940/1 bytes for SCSI command 0x25-- guessing data in; [ 54.455940][ T5329] program +}[@ not setting count and/or reply_len properly [ 54.536845][ T5334] loop3: detected capacity change from 0 to 1024 [ 54.640421][ T5342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5342 comm=syz.0.783 [ 54.652957][ T5342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5342 comm=syz.0.783 [ 55.974862][ T5470] SELinux: ebitmap: truncated map [ 56.003745][ T5470] SELinux: failed to load policy [ 56.821995][ T5535] vhci_hcd: invalid port number 23 [ 56.827209][ T5535] vhci_hcd: default hub control req: a306 v0000 i0017 l0 [ 57.074080][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 57.074095][ T29] audit: type=1400 audit(1752358738.147:949): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.102890][ T5552] SELinux: failed to load policy [ 57.119261][ T5562] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.161122][ T29] audit: type=1400 audit(1752358738.217:950): avc: denied { write } for pid=5563 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.180977][ T5569] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 57.187517][ T5569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.195238][ T5569] vhci_hcd vhci_hcd.0: Device attached [ 57.239618][ T29] audit: type=1400 audit(1752358738.317:951): avc: denied { ioctl } for pid=5574 comm="syz.0.851" path="socket:[10218]" dev="sockfs" ino=10218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.285318][ T5570] vhci_hcd: connection closed [ 57.288745][ T112] vhci_hcd: stop threads [ 57.297925][ T112] vhci_hcd: release socket [ 57.302454][ T112] vhci_hcd: disconnect device [ 57.313279][ T5579] netlink: 80 bytes leftover after parsing attributes in process `syz.3.853'. [ 57.361265][ T5586] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.368553][ T5585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.855'. [ 57.406091][ T29] audit: type=1400 audit(1752358738.477:952): avc: denied { read } for pid=5588 comm="syz.4.857" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.468750][ T29] audit: type=1326 audit(1752358738.517:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 57.492115][ T29] audit: type=1326 audit(1752358738.517:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 57.515560][ T29] audit: type=1326 audit(1752358738.517:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 57.538962][ T29] audit: type=1326 audit(1752358738.517:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 57.562391][ T29] audit: type=1326 audit(1752358738.517:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 57.585777][ T29] audit: type=1326 audit(1752358738.517:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 57.650344][ T5605] mmap: syz.3.864 (5605) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.077048][ T5673] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 58.080579][ T5675] loop4: detected capacity change from 0 to 1024 [ 58.116231][ T5675] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.161581][ T3434] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 15) [ 58.179477][ T3434] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 58.192021][ T3434] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.192021][ T3434] [ 58.225247][ T5694] tls_set_device_offload: netdev not found [ 58.315412][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 58.330787][ T5703] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.339727][ T5703] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.348548][ T5703] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.357284][ T5703] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.370383][ T5703] vxlan0: entered promiscuous mode [ 58.503669][ T5712] netlink: 344 bytes leftover after parsing attributes in process `syz.3.912'. [ 58.560776][ T5718] SELinux: syz.0.915 (5718) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.620872][ T5724] loop3: detected capacity change from 0 to 1024 [ 58.638207][ T5724] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 58.653767][ T5724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 58.668112][ T5724] System zones: 0-1, 3-36 [ 58.672859][ T5724] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.681709][ T5724] EXT4-fs (loop3): 1 orphan inode deleted [ 58.856700][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 58.869756][ T5753] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.879064][ T5753] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.887876][ T5753] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.896715][ T5753] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.906423][ T5753] vxlan0: entered promiscuous mode [ 58.920317][ T5758] loop2: detected capacity change from 0 to 1024 [ 58.928396][ T5758] EXT4-fs: Ignoring removed nobh option [ 58.934046][ T5758] EXT4-fs: Ignoring removed bh option [ 58.976883][ T5763] loop2: detected capacity change from 0 to 512 [ 58.987916][ T5763] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.003754][ T5763] EXT4-fs (loop2): mount failed [ 59.104106][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 59.127865][ T5778] sg_write: data in/out 16514940/1 bytes for SCSI command 0x25-- guessing data in; [ 59.127865][ T5778] program +}[@ not setting count and/or reply_len properly [ 59.357312][ T5788] loop2: detected capacity change from 0 to 1024 [ 60.304927][ T5910] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.976'. [ 60.435357][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.984'. [ 60.451878][ T5925] loop3: detected capacity change from 0 to 1024 [ 60.472370][ T5925] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.516333][ T5925] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.982: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 60.547421][ T5925] EXT4-fs (loop3): Remounting filesystem read-only [ 60.771633][ T5945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.992'. [ 60.898930][ T5953] loop4: detected capacity change from 0 to 2048 [ 61.274307][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1010'. [ 61.390885][ T5999] loop0: detected capacity change from 0 to 2048 [ 61.534490][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1019'. [ 61.725721][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 61.734892][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 61.809538][ T6011] wireguard0: entered promiscuous mode [ 61.815189][ T6011] wireguard0: entered allmulticast mode [ 61.958024][ T6024] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 61.977546][ T6024] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 62.169839][ T6039] $H: renamed from bond0 (while UP) [ 62.200321][ T6039] $H: entered promiscuous mode [ 62.205396][ T6039] bond_slave_0: entered promiscuous mode [ 62.211415][ T6039] bond_slave_1: entered promiscuous mode [ 62.276955][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 62.276983][ T29] audit: type=1400 audit(1752358743.347:1150): avc: denied { connect } for pid=6050 comm="syz.1.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.333864][ T6058] netlink: 'syz.1.1041': attribute type 39 has an invalid length. [ 62.343010][ T29] audit: type=1400 audit(1752358743.407:1151): avc: denied { write } for pid=6056 comm="syz.4.1043" path="socket:[12590]" dev="sockfs" ino=12590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.477065][ T29] audit: type=1400 audit(1752358743.557:1152): avc: denied { watch } for pid=6064 comm="syz.1.1045" path="/203/file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.638450][ T6075] sit0: entered promiscuous mode [ 62.649960][ T6075] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 62.657814][ T6075] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1052'. [ 62.762315][ T6093] loop3: detected capacity change from 0 to 512 [ 62.793025][ T6093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.826021][ T6093] EXT4-fs (loop3): 1 truncate cleaned up [ 62.843816][ T6097] loop2: detected capacity change from 0 to 2048 [ 62.954929][ T29] audit: type=1326 audit(1752358744.027:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 62.986383][ T29] audit: type=1326 audit(1752358744.057:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 63.010030][ T29] audit: type=1326 audit(1752358744.057:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 63.033457][ T29] audit: type=1326 audit(1752358744.057:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 63.057071][ T29] audit: type=1326 audit(1752358744.057:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 63.080847][ T29] audit: type=1326 audit(1752358744.057:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de0dce929 code=0x7ffc0000 [ 63.233432][ T29] audit: type=1400 audit(1752358744.287:1159): avc: denied { read } for pid=6113 comm="syz.3.1068" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.313215][ T6125] loop0: detected capacity change from 0 to 1024 [ 63.320732][ T6125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.358831][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 63.574959][ T6163] loop3: detected capacity change from 0 to 1024 [ 63.616159][ T6163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.734993][ T6181] xt_CT: No such helper "pptp" [ 63.785478][ T6192] loop4: detected capacity change from 0 to 512 [ 63.830696][ T6192] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.903090][ T6211] loop2: detected capacity change from 0 to 1024 [ 63.911566][ T6211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.941033][ T6216] atomic_op ffff888103609928 conn xmit_atomic 0000000000000000 [ 64.048990][ T6227] loop1: detected capacity change from 0 to 2048 [ 64.183190][ T6253] __nla_validate_parse: 14 callbacks suppressed [ 64.183209][ T6253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1123'. [ 64.312250][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 64.540445][ T6304] can0: slcan on ttyS3. [ 64.673296][ T6303] can0 (unregistered): slcan off ttyS3. [ 65.004266][ T6355] loop1: detected capacity change from 0 to 164 [ 65.009249][ T6353] loop3: detected capacity change from 0 to 2048 [ 65.022156][ T6355] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.045756][ T6355] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.054581][ T6355] Symlink component flag not implemented [ 65.060262][ T6355] Symlink component flag not implemented [ 65.066530][ T6355] Symlink component flag not implemented (7) [ 65.072572][ T6355] Symlink component flag not implemented (116) [ 65.348730][ T6378] xt_CT: No such helper "pptp" [ 65.378970][ T6385] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 65.909272][ T6440] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1193'. [ 65.922975][ T6445] loop3: detected capacity change from 0 to 164 [ 65.931006][ T6445] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.942411][ T6445] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.951381][ T6445] Symlink component flag not implemented [ 65.957356][ T6445] Symlink component flag not implemented [ 65.963249][ T6445] Symlink component flag not implemented (7) [ 65.969380][ T6445] Symlink component flag not implemented (116) [ 66.165764][ T6476] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1207'. [ 66.180822][ T6470] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1207'. [ 66.224515][ T6483] loop0: detected capacity change from 0 to 164 [ 66.236561][ T6483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.268196][ T6483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.272842][ T6489] loop2: detected capacity change from 0 to 1024 [ 66.284934][ T6489] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 66.294466][ T6483] Symlink component flag not implemented [ 66.297433][ T6489] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 66.300265][ T6483] Symlink component flag not implemented [ 66.318239][ T6483] Symlink component flag not implemented (7) [ 66.324278][ T6483] Symlink component flag not implemented (116) [ 66.460692][ T6504] xt_CT: No such helper "pptp" [ 66.527028][ T6516] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1224'. [ 66.539969][ T6512] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1224'. [ 66.630177][ T6524] SELinux: syz.1.1231 (6524) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 66.731488][ T6532] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 66.770587][ T6535] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1246'. [ 66.870417][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 66.879330][ T6546] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1239'. [ 66.987239][ T6560] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 67.081477][ T6574] netlink: 'syz.2.1254': attribute type 3 has an invalid length. [ 67.929134][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 67.929148][ T29] audit: type=1400 audit(1752358749.007:1257): avc: denied { setopt } for pid=6634 comm="syz.3.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.002059][ T29] audit: type=1400 audit(1752358749.077:1258): avc: denied { append } for pid=6644 comm="syz.0.1267" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.057698][ T6651] syzkaller0: refused to change device tx_queue_len [ 68.065386][ T29] audit: type=1326 audit(1752358749.137:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.3.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2d6e929 code=0x7ffc0000 [ 68.102230][ T29] audit: type=1326 audit(1752358749.137:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.3.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f38b2d6e929 code=0x7ffc0000 [ 68.125968][ T29] audit: type=1326 audit(1752358749.137:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.3.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2d6e929 code=0x7ffc0000 [ 68.149593][ T29] audit: type=1326 audit(1752358749.137:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.3.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f38b2d6e929 code=0x7ffc0000 [ 68.173161][ T29] audit: type=1326 audit(1752358749.137:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.3.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2d6e929 code=0x7ffc0000 [ 68.196694][ T29] audit: type=1326 audit(1752358749.167:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.3.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2d6e929 code=0x7ffc0000 [ 68.276197][ T6673] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 68.282847][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.290398][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 68.330626][ T6673] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 68.337186][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 68.344933][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 68.356472][ T4114] bridge0: port 3(syz_tun) entered disabled state [ 68.391802][ T4114] syz_tun (unregistering): left allmulticast mode [ 68.398397][ T4114] syz_tun (unregistering): left promiscuous mode [ 68.404836][ T4114] bridge0: port 3(syz_tun) entered disabled state [ 68.415318][ T6673] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 68.421884][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.429552][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 68.445446][ T6673] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 68.452066][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.459937][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 68.470563][ T6673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.474088][ T29] audit: type=1400 audit(1752358749.547:1265): avc: denied { append } for pid=6696 comm="syz.3.1279" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.502560][ T6673] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 68.502587][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.502654][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 68.510049][ T6694] vhci_hcd: connection closed [ 68.522663][ T6676] vhci_hcd: connection closed [ 68.525657][ T6689] vhci_hcd: connection closed [ 68.527381][ T6700] vhci_hcd: connection closed [ 68.546624][ T6681] vhci_hcd: connection closed [ 68.551549][ T10] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 68.554829][ T37] vhci_hcd: stop threads [ 68.564228][ T6677] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 68.567888][ T37] vhci_hcd: release socket [ 68.578350][ T37] vhci_hcd: disconnect device [ 68.587561][ T37] vhci_hcd: stop threads [ 68.591839][ T37] vhci_hcd: release socket [ 68.596381][ T37] vhci_hcd: disconnect device [ 68.606487][ T37] vhci_hcd: stop threads [ 68.610768][ T37] vhci_hcd: release socket [ 68.615224][ T37] vhci_hcd: disconnect device [ 68.631287][ T37] vhci_hcd: stop threads [ 68.635593][ T37] vhci_hcd: release socket [ 68.640085][ T37] vhci_hcd: disconnect device [ 68.664350][ T37] vhci_hcd: stop threads [ 68.668854][ T37] vhci_hcd: release socket [ 68.673645][ T37] vhci_hcd: disconnect device [ 68.723584][ T6705] SELinux: failed to load policy [ 68.737400][ T29] audit: type=1400 audit(1752358749.817:1266): avc: denied { mounton } for pid=6711 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.896615][ T6732] xt_CT: No such helper "pptp" [ 68.962297][ T6711] chnl_net:caif_netlink_parms(): no params data found [ 69.035521][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.042702][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.087968][ T6711] bridge_slave_0: entered allmulticast mode [ 69.094855][ T6711] bridge_slave_0: entered promiscuous mode [ 69.102643][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.109779][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.117005][ T6711] bridge_slave_1: entered allmulticast mode [ 69.123860][ T6711] bridge_slave_1: entered promiscuous mode [ 69.192052][ T6711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.204335][ T6711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.231957][ T6711] team0: Port device team_slave_0 added [ 69.239350][ T6711] team0: Port device team_slave_1 added [ 69.266954][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.274023][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.300017][ T6711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.335900][ T6773] xt_CT: No such helper "pptp" [ 69.354776][ T3434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.368151][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.375160][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.401474][ T6711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.440621][ T3434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.484922][ T6711] hsr_slave_0: entered promiscuous mode [ 69.498557][ T6711] hsr_slave_1: entered promiscuous mode [ 69.504576][ T6711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.516149][ T6711] Cannot create hsr debugfs directory [ 69.537689][ T3434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.608889][ T6788] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 69.615492][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.623130][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 69.644250][ T3434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.659977][ T6792] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 69.666512][ T6792] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.674124][ T6792] vhci_hcd vhci_hcd.0: Device attached [ 69.693609][ T6788] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 69.700315][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.707874][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 69.737438][ T6788] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 69.744043][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.751668][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 69.766443][ T6788] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.818311][ T6788] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 69.824965][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.832623][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 69.839487][ T3434] bridge_slave_0: left allmulticast mode [ 69.843143][ T6802] vhci_hcd: connection closed [ 69.845176][ T3434] bridge_slave_0: left promiscuous mode [ 69.845431][ T288] vhci_hcd: stop threads [ 69.850004][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.855453][ T288] vhci_hcd: release socket [ 69.855465][ T288] vhci_hcd: disconnect device [ 69.855791][ T6797] vhci_hcd: connection closed [ 69.863811][ T6795] vhci_hcd: connection closed [ 69.867247][ T6789] vhci_hcd: connection closed [ 69.872156][ T6793] vhci_hcd: connection closed [ 69.876574][ T3413] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 69.884352][ T12] vhci_hcd: stop threads [ 69.886678][ T6790] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 69.890175][ T12] vhci_hcd: release socket [ 69.895051][ T6806] __nla_validate_parse: 8 callbacks suppressed [ 69.895066][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1313'. [ 69.902355][ T12] vhci_hcd: disconnect device [ 69.937227][ T12] vhci_hcd: stop threads [ 69.941511][ T12] vhci_hcd: release socket [ 69.946329][ T12] vhci_hcd: disconnect device [ 69.951109][ T12] vhci_hcd: stop threads [ 69.955360][ T12] vhci_hcd: release socket [ 69.959943][ T12] vhci_hcd: disconnect device [ 69.969004][ T12] vhci_hcd: stop threads [ 69.973297][ T12] vhci_hcd: release socket [ 69.978349][ T12] vhci_hcd: disconnect device [ 70.007286][ T6808] loop3: detected capacity change from 0 to 128 [ 70.015798][ T6808] EXT4-fs mount: 32 callbacks suppressed [ 70.015809][ T6808] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.035613][ T6808] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.068839][ T6808] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 70.078271][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.088965][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.102619][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.114232][ T3434] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 70.124922][ T3434] bond0 (unregistering): Released all slaves [ 70.140617][ T6711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.151020][ T6711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.177381][ T6711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.184480][ T6812] netlink: 'syz.3.1315': attribute type 1 has an invalid length. [ 70.200217][ T6711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.266187][ T3434] hsr_slave_0: left promiscuous mode [ 70.274117][ T3434] hsr_slave_1: left promiscuous mode [ 70.280973][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.288487][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.296979][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.304397][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.315281][ T3434] veth1_macvtap: left promiscuous mode [ 70.320934][ T3434] veth0_macvtap: left promiscuous mode [ 70.326558][ T3434] veth1_vlan: left promiscuous mode [ 70.331851][ T3434] veth0_vlan: left promiscuous mode [ 70.436753][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 70.449383][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 70.558544][ T6776] chnl_net:caif_netlink_parms(): no params data found [ 70.653930][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.661342][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.675617][ T6776] bridge_slave_0: entered allmulticast mode [ 70.683414][ T6776] bridge_slave_0: entered promiscuous mode [ 70.715800][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.723187][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.747795][ T6776] bridge_slave_1: entered allmulticast mode [ 70.756615][ T6776] bridge_slave_1: entered promiscuous mode [ 70.774395][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.799316][ T6876] loop4: detected capacity change from 0 to 8192 [ 70.817738][ T6876] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.830040][ T6776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.842331][ T6776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.893755][ T6711] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.908053][ T6776] team0: Port device team_slave_0 added [ 70.952114][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.959224][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.987620][ T6776] team0: Port device team_slave_1 added [ 71.014279][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.021502][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.069862][ T6711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.080400][ T6711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.102254][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.109279][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.135260][ T6776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.189706][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.199337][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.206352][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.232455][ T6776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.316767][ T6776] hsr_slave_0: entered promiscuous mode [ 71.323158][ T6776] hsr_slave_1: entered promiscuous mode [ 71.391473][ T6908] SELinux: Context system_u:object_r:dpkg_var_lib_t:s0 is not valid (left unmapped). [ 71.465734][ T6912] SELinux: failed to load policy [ 71.567223][ T6711] veth0_vlan: entered promiscuous mode [ 71.584727][ T6776] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.600610][ T6711] veth1_vlan: entered promiscuous mode [ 71.607198][ T6929] loop0: detected capacity change from 0 to 512 [ 71.620840][ T6929] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 71.624047][ T6776] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.642235][ T6776] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.660551][ T6776] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.679826][ T6711] veth0_macvtap: entered promiscuous mode [ 71.737454][ T6711] veth1_macvtap: entered promiscuous mode [ 71.775283][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.828649][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.853897][ T6711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.863070][ T6711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.871914][ T6711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.880703][ T6711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.899636][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.911985][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.924899][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.932070][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.963381][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.970567][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.031371][ T6966] vlan2: entered promiscuous mode [ 72.036851][ T6966] bond0: entered promiscuous mode [ 72.041887][ T6966] bond_slave_0: entered promiscuous mode [ 72.048155][ T6966] bond_slave_1: entered promiscuous mode [ 72.054918][ T6966] vlan2: entered allmulticast mode [ 72.060181][ T6966] bond0: entered allmulticast mode [ 72.065382][ T6966] bond_slave_0: entered allmulticast mode [ 72.071257][ T6966] bond_slave_1: entered allmulticast mode [ 72.101637][ T6776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.249172][ T6776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.296526][ T6993] loop3: detected capacity change from 0 to 8192 [ 72.315253][ T6993] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.338970][ T7003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.476678][ T6776] veth0_vlan: entered promiscuous mode [ 72.487193][ T6776] veth1_vlan: entered promiscuous mode [ 72.507472][ T6776] veth0_macvtap: entered promiscuous mode [ 72.515548][ T6776] veth1_macvtap: entered promiscuous mode [ 72.538145][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.559920][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.576161][ T6776] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.585226][ T6776] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.594055][ T6776] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.602845][ T6776] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.614437][ T7037] netlink: 'syz.0.1395': attribute type 4 has an invalid length. [ 72.630478][ T7037] netlink: 'syz.0.1395': attribute type 4 has an invalid length. [ 72.691544][ T7040] vlan2: entered promiscuous mode [ 72.696678][ T7040] bond0: entered promiscuous mode [ 72.701718][ T7040] bond_slave_0: entered promiscuous mode [ 72.707549][ T7040] bond_slave_1: entered promiscuous mode [ 72.713624][ T7040] vlan2: entered allmulticast mode [ 72.718831][ T7040] bond0: entered allmulticast mode [ 72.724144][ T7040] bond_slave_0: entered allmulticast mode [ 72.730041][ T7040] bond_slave_1: entered allmulticast mode [ 72.735785][ T7040] geneve1: entered allmulticast mode [ 72.791102][ T7051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.952394][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 72.952410][ T29] audit: type=1400 audit(1752358754.027:1410): avc: denied { ioctl } for pid=7074 comm="syz.3.1414" path="socket:[16401]" dev="sockfs" ino=16401 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.166170][ T29] audit: type=1400 audit(1752358754.237:1411): avc: denied { mounton } for pid=7102 comm="syz.3.1412" path="/324/file0" dev="tmpfs" ino=1686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.190659][ T7104] 9pnet: Could not find request transport: 0xffffffffffffffff [ 73.230065][ T29] audit: type=1326 audit(1752358754.297:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.6.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551dd9e929 code=0x7ffc0000 [ 73.253666][ T29] audit: type=1326 audit(1752358754.297:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.6.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551dd9e929 code=0x7ffc0000 [ 73.277197][ T29] audit: type=1326 audit(1752358754.297:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.6.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551dd9e929 code=0x7ffc0000 [ 73.300886][ T29] audit: type=1326 audit(1752358754.297:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.6.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551dd9e929 code=0x7ffc0000 [ 73.324480][ T29] audit: type=1326 audit(1752358754.297:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.6.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551dd9e929 code=0x7ffc0000 [ 73.348078][ T29] audit: type=1326 audit(1752358754.297:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.6.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551dd9e929 code=0x7ffc0000 [ 73.362764][ T7111] SELinux: failed to load policy [ 73.371663][ T29] audit: type=1326 audit(1752358754.297:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.6.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551dd9e929 code=0x7ffc0000 [ 73.400174][ T29] audit: type=1326 audit(1752358754.297:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.6.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551dd9e929 code=0x7ffc0000 [ 73.570710][ T7141] netlink: 'syz.6.1422': attribute type 4 has an invalid length. [ 73.594283][ T7141] netlink: 'syz.6.1422': attribute type 4 has an invalid length. [ 73.597901][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.616808][ T10] usb 1-1: enqueue for inactive port 0 [ 73.621071][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.630594][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.638149][ T10] usb 1-1: enqueue for inactive port 0 [ 73.659662][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.659689][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.668286][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.676360][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.683998][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.692695][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.694113][ T7151] loop6: detected capacity change from 0 to 1024 [ 73.706190][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.708346][ T10] vhci_hcd: vhci_device speed not set [ 73.714587][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.731769][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.740346][ T7151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.766367][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.766445][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.791106][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.822696][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.831997][ T6776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.850288][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.850317][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.859467][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.867057][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.874877][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.916715][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.960116][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.986173][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 73.995050][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.004428][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.013209][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.021360][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.030034][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.038153][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.066593][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.085572][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.120042][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.120063][ T7172] vlan2: entered promiscuous mode [ 74.120085][ T7172] bond0: entered promiscuous mode [ 74.120096][ T7172] bond_slave_0: entered promiscuous mode [ 74.120212][ T7172] bond_slave_1: entered promiscuous mode [ 74.140316][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.145961][ T7172] vlan2: entered allmulticast mode [ 74.164606][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.169610][ T7172] bond0: entered allmulticast mode [ 74.169624][ T7172] bond_slave_0: entered allmulticast mode [ 74.169636][ T7172] bond_slave_1: entered allmulticast mode [ 74.205666][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.205701][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.222798][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.232158][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.239753][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.249555][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.257421][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.277519][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.336012][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.403624][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.432058][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.439956][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.449385][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.457426][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.470975][ T7143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.620727][ T7218] siw: device registration error -23 [ 74.754826][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1466'. [ 74.787825][ T7241] loop0: detected capacity change from 0 to 1024 [ 74.794854][ T7241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.811548][ T7241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.853539][ T4512] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.898933][ T3413] usb 9-1: enqueue for inactive port 0 [ 74.908851][ T3413] usb 9-1: enqueue for inactive port 0 [ 74.933092][ T7261] siw: device registration error -23 [ 74.997232][ T3413] vhci_hcd: vhci_device speed not set [ 75.054315][ T7264] SELinux: failed to load policy [ 75.123144][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1486'. [ 75.135151][ T7282] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 75.380815][ T7304] loop5: detected capacity change from 0 to 1024 [ 75.398733][ T7304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.477841][ T7304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.521073][ T7306] siw: device registration error -23 [ 75.575880][ T6711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.755231][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 75.934726][ T7341] loop4: detected capacity change from 0 to 1024 [ 75.942944][ T7341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.946125][ T7345] batman_adv: batadv0: Adding interface: gretap1 [ 75.956358][ T7345] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.985481][ T7345] batman_adv: batadv0: Interface activated: gretap1 [ 76.020980][ T7341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.051139][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.139564][ T7355] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 76.164704][ T7358] siw: device registration error -23 [ 76.276537][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.287877][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.297660][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.305188][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.326492][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.334160][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.342742][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.359714][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.367842][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.375394][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.397799][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.415157][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.431645][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.444715][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.463189][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.470919][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.491808][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.500541][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.510535][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.518223][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.525930][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.535091][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.542894][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.550640][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.558532][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.566097][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.573741][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.582043][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.589665][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.597309][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.604861][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.612500][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.620427][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.628066][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.635757][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.643348][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.651034][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.659120][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.666782][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.674383][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.682085][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.689679][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.697365][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.704941][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.712665][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.720228][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.727893][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.735484][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.743237][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.750931][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.758562][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.766108][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.774044][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.781643][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.789298][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.816872][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.836825][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.855396][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.863250][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.871913][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.879747][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.887413][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.945370][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 76.975102][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.014226][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.029220][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.038284][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.045911][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.053698][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.099733][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.108379][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.116014][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.129452][ T7368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.178346][ T7406] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 77.290176][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 77.668481][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.684963][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.701999][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.715949][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.736538][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.763824][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.783290][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.793409][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.801583][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.810692][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.819985][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.829026][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.836805][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.844394][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.853125][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.861796][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.872883][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.880619][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.889667][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.904918][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.914856][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.922774][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.932383][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.941586][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 77.959096][ T7451] batman_adv: batadv0: Adding interface: gretap1 [ 77.972994][ T7451] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.002191][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.002233][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.010088][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.019592][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.027325][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.034875][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.042436][ T7451] batman_adv: batadv0: Interface activated: gretap1 [ 78.059405][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.059434][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.067308][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.075465][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.083027][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.092326][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.100501][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.109471][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.146509][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.166675][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.174186][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.190000][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.197610][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.231642][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 78.231660][ T29] audit: type=1400 audit(1752358759.307:1552): avc: denied { create } for pid=7464 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.277516][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.277555][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.305656][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.313733][ T29] audit: type=1400 audit(1752358759.357:1553): avc: denied { bind } for pid=7464 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.349877][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.349911][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.366336][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.394124][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.402722][ T29] audit: type=1326 audit(1752358759.477:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.5.1573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e89cae929 code=0x0 [ 78.410461][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.436114][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.444687][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.473652][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.481558][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.490309][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.510698][ T7439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.613034][ T7485] loop6: detected capacity change from 0 to 764 [ 78.643253][ T29] audit: type=1400 audit(1752358759.717:1555): avc: denied { read } for pid=7488 comm="syz.3.1578" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.666493][ T29] audit: type=1400 audit(1752358759.717:1556): avc: denied { open } for pid=7488 comm="syz.3.1578" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.666513][ T7485] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.740137][ T7494] loop3: detected capacity change from 0 to 1024 [ 78.747516][ T7494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.754581][ T29] audit: type=1400 audit(1752358759.767:1557): avc: denied { mount } for pid=7484 comm="syz.6.1585" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 78.777227][ T29] audit: type=1400 audit(1752358759.787:1558): avc: denied { ioctl } for pid=7488 comm="syz.3.1578" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.806843][ T29] audit: type=1400 audit(1752358759.857:1559): avc: denied { unmount } for pid=6776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 78.830160][ T29] audit: type=1400 audit(1752358759.907:1560): avc: denied { audit_write } for pid=7493 comm="syz.0.1590" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.839928][ T7494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.851359][ T29] audit: type=1107 audit(1752358759.907:1561): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 78.919334][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.953859][ T7508] loop3: detected capacity change from 0 to 512 [ 78.967437][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.977466][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.985126][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.992960][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.994187][ T7508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.001152][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.009587][ T7508] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.036035][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.043172][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.059721][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.072715][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.080545][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.082912][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.088313][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.104792][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.112685][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.120388][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.127975][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.134747][ T7518] netlink: 'syz.0.1592': attribute type 13 has an invalid length. [ 79.135645][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.153934][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.161606][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.170458][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.178177][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.185678][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.204866][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.213974][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.221838][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.232072][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.248019][ T7518] 8021q: adding VLAN 0 to HW filter on device $H [ 79.263004][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.263099][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.271349][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.310393][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.315006][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.323186][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.330110][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.330131][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.330151][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.330170][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.338998][ T7518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.345572][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.384747][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.394011][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.401675][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.411085][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.419147][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.427239][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.437855][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.445797][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.453371][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.461233][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.468965][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.476579][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.484127][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.491764][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.506509][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.514165][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.521785][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.529392][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.536992][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.544473][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.552018][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.559599][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.567242][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.574733][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.582286][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.590437][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.597954][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.605459][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.612998][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.623193][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.632454][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.643192][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 79.643215][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.659627][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.682813][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.691563][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.704427][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.714874][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.727874][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1603'. [ 79.744490][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1603'. [ 79.747453][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.753454][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.754272][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1603'. [ 79.767418][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.778605][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.786308][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.794032][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.829170][ T7510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 79.845035][ T7557] loop5: detected capacity change from 0 to 764 [ 79.879783][ T7557] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.939970][ T7568] program syz.6.1612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.982373][ T7572] loop6: detected capacity change from 0 to 1024 [ 79.989814][ T7572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.999254][ T7575] netlink: 'syz.4.1617': attribute type 13 has an invalid length. [ 80.020568][ T7572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.048828][ T7575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.066879][ T6776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.117811][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1621'. [ 80.126918][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1621'. [ 80.136537][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1621'. [ 80.185616][ T7590] loop6: detected capacity change from 0 to 512 [ 80.197618][ T7590] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.1622: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 80.215991][ T7590] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.1622: Bad quota inode: 3, type: 0 [ 80.227101][ T7590] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 80.241960][ T7590] EXT4-fs (loop6): mount failed [ 80.452931][ T7613] syzkaller1: entered promiscuous mode [ 80.458569][ T7613] syzkaller1: entered allmulticast mode [ 80.569431][ T7623] loop4: detected capacity change from 0 to 512 [ 80.588738][ T7623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.601488][ T7623] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.644681][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.681682][ T7632] loop4: detected capacity change from 0 to 512 [ 80.689683][ T7632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.705729][ T7632] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 80.722084][ T7632] EXT4-fs (loop4): 1 truncate cleaned up [ 80.728366][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.755603][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.793017][ T7637] netlink: 'syz.5.1642': attribute type 13 has an invalid length. [ 80.801117][ T7627] loop3: detected capacity change from 0 to 32768 [ 80.847743][ T7637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.864472][ T7627] loop3: p1 p2 p3 < p5 p6 > [ 80.869598][ T7627] loop3: p1 size 242222080 extends beyond EOD, truncated [ 80.880469][ T7627] loop3: p2 start 4294967295 is beyond EOD, truncated [ 81.110893][ T7666] loop0: detected capacity change from 0 to 512 [ 81.128701][ T7666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.154145][ T7666] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.203768][ T4512] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.810994][ T7686] loop6: detected capacity change from 0 to 32768 [ 81.867035][ T7686] loop6: p1 p2 p3 < p5 p6 > [ 81.871725][ T7686] loop6: p1 size 242222080 extends beyond EOD, truncated [ 81.879923][ T7686] loop6: p2 start 4294967295 is beyond EOD, truncated [ 82.220161][ T7714] 9pnet: p9_errstr2errno: server reported unknown error pA [ 82.292187][ T7722] loop4: detected capacity change from 0 to 512 [ 82.313753][ T7725] syzkaller1: entered promiscuous mode [ 82.319359][ T7725] syzkaller1: entered allmulticast mode [ 82.329389][ T7722] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1675: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 82.378950][ T7722] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1675: Bad quota inode: 3, type: 0 [ 82.401892][ T7722] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 82.422398][ T7730] loop6: detected capacity change from 0 to 764 [ 82.429605][ T7722] EXT4-fs (loop4): mount failed [ 82.440120][ T7730] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.521949][ T7736] SELinux: syz.4.1681 (7736) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.644553][ T7748] netlink: 'syz.6.1685': attribute type 1 has an invalid length. [ 82.681447][ T7748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.697275][ T7748] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 82.861458][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1691'. [ 82.924986][ T7771] loop5: detected capacity change from 0 to 512 [ 82.950093][ T7771] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1692: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 82.969448][ T7771] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1692: Bad quota inode: 3, type: 0 [ 82.982584][ T7771] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 82.999405][ T7771] EXT4-fs (loop5): mount failed [ 83.374347][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 83.374363][ T29] audit: type=1400 audit(1752358764.447:1787): avc: denied { audit_write } for pid=7788 comm="syz.4.1700" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.405214][ T7790] loop6: detected capacity change from 0 to 512 [ 83.430792][ T7790] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.436289][ T29] audit: type=1107 audit(1752358764.477:1788): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 83.462170][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1704'. [ 83.468213][ T7790] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 83.486605][ T7790] EXT4-fs (loop6): 1 truncate cleaned up [ 83.500709][ T7790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.528847][ T6776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.554057][ T7806] loop0: detected capacity change from 0 to 764 [ 83.565129][ T7806] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 83.596065][ T29] audit: type=1400 audit(1752358764.667:1789): avc: denied { execmem } for pid=7810 comm="syz.0.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.622612][ T7813] loop6: detected capacity change from 0 to 128 [ 83.639408][ T29] audit: type=1400 audit(1752358764.707:1790): avc: denied { mount } for pid=7812 comm="syz.6.1710" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 83.661486][ T29] audit: type=1400 audit(1752358764.707:1791): avc: denied { write } for pid=7812 comm="syz.6.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.682113][ T29] audit: type=1400 audit(1752358764.757:1792): avc: denied { unmount } for pid=6776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 83.713198][ T7815] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.764097][ T29] audit: type=1400 audit(1752358764.787:1793): avc: denied { write } for pid=7814 comm="syz.6.1711" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.787943][ T29] audit: type=1400 audit(1752358764.787:1794): avc: denied { ioctl } for pid=7814 comm="syz.6.1711" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.813583][ T29] audit: type=1400 audit(1752358764.827:1795): avc: denied { name_bind } for pid=7816 comm="syz.6.1712" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 83.885261][ T7811] futex_wake_op: syz.0.1708 tries to shift op by -1; fix this program [ 84.093165][ T29] audit: type=1400 audit(1752358765.167:1796): avc: denied { create } for pid=7846 comm="syz.5.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.114686][ T7849] Cannot find add_set index 0 as target [ 84.496921][ T7876] loop0: detected capacity change from 0 to 1024 [ 84.537732][ T7876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.594090][ T7893] xt_hashlimit: max too large, truncated to 1048576 [ 84.607718][ T7894] loop5: detected capacity change from 0 to 2048 [ 84.628238][ T7894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.645322][ T7876] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1738: Allocating blocks 449-513 which overlap fs metadata [ 84.661866][ T7894] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 84.679306][ T7894] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.691648][ T7894] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.691648][ T7894] [ 84.701399][ T7894] EXT4-fs (loop5): Total free blocks count 0 [ 84.707435][ T7894] EXT4-fs (loop5): Free/Dirty block details [ 84.713357][ T7894] EXT4-fs (loop5): free_blocks=4096 [ 84.716464][ T7900] loop4: detected capacity change from 0 to 512 [ 84.718646][ T7894] EXT4-fs (loop5): dirty_blocks=16 [ 84.730055][ T7894] EXT4-fs (loop5): Block reservation details [ 84.736070][ T7894] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 84.751322][ T7900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.762552][ T7875] EXT4-fs (loop0): pa ffff8881069e28c0: logic 48, phys. 177, len 21 [ 84.770792][ T7875] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 84.777772][ T7900] EXT4-fs (loop4): 1 truncate cleaned up [ 84.795560][ T288] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 84.795865][ T7900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.823234][ T6711] ================================================================== [ 84.824164][ T7905] random: crng reseeded on system resumption [ 84.831338][ T6711] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 84.831391][ T6711] [ 84.831397][ T6711] read-write to 0xffff888237d26f10 of 8 bytes by task 3290 on cpu 1: [ 84.831412][ T6711] find_get_block_common+0x4f0/0x960 [ 84.831446][ T6711] bdev_getblk+0x83/0x3d0 [ 84.838539][ T4512] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.845133][ T6711] __ext4_get_inode_loc+0x303/0x930 [ 84.879398][ T6711] ext4_reserve_inode_write+0xd7/0x250 [ 84.884885][ T6711] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 84.890283][ T6711] ext4_dirty_inode+0x92/0xc0 [ 84.894984][ T6711] __mark_inode_dirty+0x15f/0x760 [ 84.900023][ T6711] file_update_time+0x288/0x2b0 [ 84.904886][ T6711] ext4_page_mkwrite+0x18b/0xba0 [ 84.909834][ T6711] do_wp_page+0xe5a/0x2400 [ 84.914261][ T6711] handle_mm_fault+0x77d/0x2be0 [ 84.919118][ T6711] do_user_addr_fault+0x636/0x1090 [ 84.924275][ T6711] exc_page_fault+0x62/0xa0 [ 84.928815][ T6711] asm_exc_page_fault+0x26/0x30 [ 84.933686][ T6711] [ 84.936022][ T6711] read to 0xffff888237d26f10 of 8 bytes by task 6711 on cpu 0: [ 84.943587][ T6711] has_bh_in_lru+0x35/0x1f0 [ 84.948156][ T6711] __lru_add_drain_all+0x234/0x3f0 [ 84.953314][ T6711] lru_add_drain_all+0x10/0x20 [ 84.958124][ T6711] invalidate_bdev+0x47/0x70 [ 84.962740][ T6711] ext4_put_super+0x624/0x7d0 [ 84.967443][ T6711] generic_shutdown_super+0xe6/0x210 [ 84.972757][ T6711] kill_block_super+0x2a/0x70 [ 84.977472][ T6711] ext4_kill_sb+0x42/0x80 [ 84.981827][ T6711] deactivate_locked_super+0x75/0x1c0 [ 84.987232][ T6711] deactivate_super+0x97/0xa0 [ 84.991978][ T6711] cleanup_mnt+0x269/0x2e0 [ 84.996423][ T6711] __cleanup_mnt+0x19/0x20 [ 85.000891][ T6711] task_work_run+0x131/0x1a0 [ 85.005507][ T6711] exit_to_user_mode_loop+0xe4/0x100 [ 85.010813][ T6711] do_syscall_64+0x1d6/0x200 [ 85.015418][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.021332][ T6711] [ 85.023660][ T6711] value changed: 0x0000000000000000 -> 0xffff8881069841a0 [ 85.030769][ T6711] [ 85.033113][ T6711] Reported by Kernel Concurrency Sanitizer on: [ 85.039300][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 85.051904][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.062005][ T6711] ================================================================== [ 85.213774][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.