last executing test programs: 3.131481916s ago: executing program 0 (id=5342): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) r0 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4008040) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000000)='./file0/bus\x00', 0x104000015) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000040)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0xfffffffffffffe62) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000093a3a0306bafa57c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000", @ANYRES16=r8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.637711383s ago: executing program 2 (id=5353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 2.636967153s ago: executing program 2 (id=5354): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf3, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffed0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@mcast1}, &(0x7f0000000380)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="74c6083d00"/15, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.496517366s ago: executing program 1 (id=5356): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x20000811) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x96, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003"], 0xd8}}, 0x4000040) 2.435774391s ago: executing program 2 (id=5357): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xe5, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f00000028c0), &(0x7f0000000240), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x3) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00'}, 0x18) syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) 2.269693517s ago: executing program 0 (id=5358): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f0000001040)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1, 0x8, 0x1, 0xfffffffffffffff0, 0x3, 0x6, 0x4, 0x75, 0x40, 0x2e1, 0x0, 0x4, 0x38, 0x2, 0x5, 0x2, 0x1}, [{0x6474e551, 0x4, 0x7, 0x2, 0x1, 0x3, 0x482}, {0x70000000, 0xffff, 0x36e9, 0x8, 0x3, 0x6, 0x100000001, 0x3}], "905ee55f6cfaac96629f0f45585ea8", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5bf) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa4, 0x24, 0xa1b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xa4}}, 0x0) 2.223698251s ago: executing program 0 (id=5359): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') tee(r0, r0, 0x81, 0x3) preadv(r0, 0x0, 0x0, 0x10000009, 0xffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x42, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000008c0)) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x20000811) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x96, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003"], 0xd8}}, 0x4000040) 2.087173534s ago: executing program 2 (id=5361): r0 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{}, {0x6}, {0x60, 0x1}, {0x12, 0x1}, {0x12}, {0x3}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c081}, 0x4008040) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000000)='./file0/bus\x00', 0x104000015) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 1.992803033s ago: executing program 3 (id=5364): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x37, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x4, 0x0, 0x8f, 0x10}, {0x0, 0x8, 0xc, 0x2}, {0x0, 0x5, 0x2, 0x8}, {0x7, 0x3, 0x3, 0x8}]}, 0x10) get_robust_list(0x0, &(0x7f00000001c0)=&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000000)}}, &(0x7f0000000200)=0x18) rt_sigqueueinfo(0x0, 0x2, &(0x7f0000000080)={0x13, 0x9, 0x6}) 1.91377773s ago: executing program 3 (id=5365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 1.91318938s ago: executing program 3 (id=5366): mkdirat(0xffffffffffffff9c, 0x0, 0xc) r0 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{}, {0x6}, {0x60, 0x1}, {0x12, 0x1}, {0x12}, {0x3}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c081}, 0x4008040) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0/bus\x00', 0x104000015) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffec", 0xbd}], 0x1}, 0x40800) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r6}, 0xfffffffffffffe62) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000093a3a0306bafa57c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300000000000000", @ANYRES32=r10, @ANYRES16=r9], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.792216082s ago: executing program 0 (id=5368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 1.705019671s ago: executing program 0 (id=5369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) io_setup(0x4, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_mount_image$ext4(&(0x7f0000010300)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x1204000, &(0x7f00000102c0), 0x3, 0x57c, &(0x7f0000010a00)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) 1.539678166s ago: executing program 0 (id=5370): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.17550631s ago: executing program 4 (id=5372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x125001, 0x0) 1.151267392s ago: executing program 1 (id=5373): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x688280, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) mlockall(0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[0xffff, 0x3], 0x2) close(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000240), 0x8) sendto$inet6(r4, &(0x7f0000000000)='X', 0xfffd, 0xe0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x89, 0x2, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x242000, 0x101) 1.137588004s ago: executing program 4 (id=5374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioprio_get$pid(0x2, 0x0) 952.508301ms ago: executing program 4 (id=5375): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000180)=0x4, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0xffee, 0x800, @loopback, 0x401}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d0f, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xffff}, 0x18) dup2(r4, r0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_io_uring_setup(0xbc3, &(0x7f0000000300)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0), &(0x7f00000002c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) 820.687414ms ago: executing program 1 (id=5376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 815.538904ms ago: executing program 4 (id=5377): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) write$cgroup_int(r0, &(0x7f0000000040)=0xfe9e, 0x12) 769.482148ms ago: executing program 1 (id=5378): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') tee(r0, r0, 0x81, 0x3) preadv(r0, 0x0, 0x0, 0x10000009, 0xffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x42, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000008c0)) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x20000811) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x96, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003"], 0xd8}}, 0x4000040) 737.583141ms ago: executing program 4 (id=5379): r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) sendmmsg$inet_sctp(r0, &(0x7f0000000cc0), 0x0, 0x10000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) faccessat2(r1, &(0x7f0000000000)='\x00', 0x2, 0x1100) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000004000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) close(r5) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 644.01566ms ago: executing program 3 (id=5380): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 606.008594ms ago: executing program 3 (id=5381): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf3, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffed0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@mcast1}, &(0x7f0000000380)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="74c6083d00"/15, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 520.326002ms ago: executing program 2 (id=5382): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYRES16=0x0, @ANYRES16=r0, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000001080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x4, 0x0, &(0x7f0000000000)="a318da000000005279ce556ae026", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x2040400) r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x13, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) semop(r4, &(0x7f00000000c0)=[{0x3, 0xa78c, 0x1000}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x44) 403.001052ms ago: executing program 1 (id=5383): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000041ffffff0000008000000000691dd524c0ec031207000000010000007d5b6e861807aef70d48ff114ca107359d9639218120d18792cd0598c521d7d3c9184d161335ec291f2f06cb7990f4f586e1e19acda2cbef91468fb10d87f35801000000beed6ad28f250c2348701753162e609f721c77ffedb3838dbd0775e50978eb15054f5d72db6817b9b3636e80503db1dc2f27024d920b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffff9}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x2, &(0x7f0000000380)=""/96, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f00000004c0), &(0x7f0000000180)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x8040600) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 379.049455ms ago: executing program 3 (id=5384): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x20000811) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x96, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003"], 0xd8}}, 0x4000040) 193.028133ms ago: executing program 4 (id=5385): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000200000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x4e4, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r3, 0x627, 0x4c2, 0x43, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) 36.117217ms ago: executing program 1 (id=5386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x14, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) io_setup(0x4, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=5387): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000180)=0x4, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0xffee, 0x800, @loopback, 0x401}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d0f, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xffff}, 0x18) dup2(r4, r0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_io_uring_setup(0xbc3, &(0x7f0000000300)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0), &(0x7f00000002c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) kernel console output (not intermixed with test programs): fido_id[18613]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 457.765804][T18617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 457.909585][T18620] lo speed is unknown, defaulting to 1000 [ 458.054798][T18626] program syz.3.4515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.074296][T18626] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 458.361164][T18629] loop3: detected capacity change from 0 to 1024 [ 458.373294][T18629] EXT4-fs: Ignoring removed orlov option [ 458.392038][T18629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.668526][T18637] random: crng reseeded on system resumption [ 458.691371][T18637] macvtap0: refused to change device tx_queue_len [ 458.821588][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.879739][ T3488] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 458.947599][T18650] fido_id[18650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 458.976516][T18655] random: crng reseeded on system resumption [ 459.004536][T18655] macvtap0: refused to change device tx_queue_len [ 459.145303][T18666] loop4: detected capacity change from 0 to 1024 [ 459.171259][T18666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.179702][T18666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 459.196308][T18666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 459.205864][T18666] System zones: 0-1, 3-36 [ 459.234156][T18666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.277060][T18669] lo speed is unknown, defaulting to 1000 [ 459.355718][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.361629][T18675] random: crng reseeded on system resumption [ 459.400174][T18675] macvtap0: refused to change device tx_queue_len [ 459.470461][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 459.470477][ T29] audit: type=1326 audit(459.444:14763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.553540][ T29] audit: type=1326 audit(459.474:14764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.576503][ T29] audit: type=1326 audit(459.474:14765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.599517][ T29] audit: type=1326 audit(459.494:14766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.622458][ T29] audit: type=1326 audit(459.494:14767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.645518][ T29] audit: type=1326 audit(459.504:14768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.668527][ T29] audit: type=1326 audit(459.504:14769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.691566][ T29] audit: type=1326 audit(459.504:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.714548][ T29] audit: type=1326 audit(459.504:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.737598][ T29] audit: type=1326 audit(459.504:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 459.841437][ T3967] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 459.922444][T18691] fido_id[18691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 460.161536][T18693] loop2: detected capacity change from 0 to 512 [ 460.173083][T18693] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4536: error while reading EA inode 32 err=-116 [ 460.185682][T18693] EXT4-fs (loop2): Remounting filesystem read-only [ 460.192257][T18693] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 460.202468][T18693] EXT4-fs (loop2): 1 orphan inode deleted [ 460.208632][T18693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.241406][T18693] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.259495][T18693] netlink: 'syz.2.4536': attribute type 12 has an invalid length. [ 460.331328][T18709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4540'. [ 460.357006][T18709] loop4: detected capacity change from 0 to 2048 [ 460.383532][T18709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.403435][T18709] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.4540: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 460.491157][T18715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4543'. [ 460.504766][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.632308][T18720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18720 comm=syz.2.4542 [ 461.240997][ T3491] hid-generic 0000:3000000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 461.276011][T18708] loop3: detected capacity change from 0 to 512 [ 461.288517][T18727] loop4: detected capacity change from 0 to 512 [ 461.298329][T18731] fido_id[18731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 461.323007][T18708] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4541: error while reading EA inode 32 err=-116 [ 461.346325][T18727] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4546: error while reading EA inode 32 err=-116 [ 461.368197][T18708] EXT4-fs (loop3): Remounting filesystem read-only [ 461.429033][T18708] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 461.439435][T18708] EXT4-fs (loop3): 1 orphan inode deleted [ 461.445219][T18727] EXT4-fs (loop4): Remounting filesystem read-only [ 461.451865][T18727] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 461.463270][T18708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.475400][T18727] EXT4-fs (loop4): 1 orphan inode deleted [ 461.481668][T18727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.494462][T18708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.503914][T18727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.545695][T18708] netlink: 'syz.3.4541': attribute type 12 has an invalid length. [ 461.571905][T18736] lo speed is unknown, defaulting to 1000 [ 461.844290][T18745] loop4: detected capacity change from 0 to 1024 [ 461.862395][T18745] EXT4-fs: Ignoring removed orlov option [ 461.888028][T18747] lo speed is unknown, defaulting to 1000 [ 461.895081][T18745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.956741][T18749] loop3: detected capacity change from 0 to 1024 [ 461.998063][T18749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 462.421921][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.524455][T18776] random: crng reseeded on system resumption [ 463.537276][T18776] macvtap0: refused to change device tx_queue_len [ 463.634014][T18779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4561'. [ 463.643616][T18754] loop3: detected capacity change from 0 to 512 [ 463.680598][T18784] loop2: detected capacity change from 0 to 1024 [ 463.695264][T18754] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4553: error while reading EA inode 32 err=-116 [ 463.728141][T18784] EXT4-fs: Ignoring removed orlov option [ 463.743391][T18754] EXT4-fs (loop3): Remounting filesystem read-only [ 463.763018][T18754] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 463.778577][T18754] EXT4-fs (loop3): 1 orphan inode deleted [ 463.806611][T18784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.840428][T18754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.915547][T18754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.009826][T18754] netlink: 'syz.3.4553': attribute type 12 has an invalid length. [ 464.860466][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.860860][T18805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18805 comm=syz.3.4567 [ 465.726809][T18824] loop4: detected capacity change from 0 to 1024 [ 465.759216][T18824] EXT4-fs: Ignoring removed orlov option [ 465.773743][T18824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.063936][ T4096] hid_parser_main: 41 callbacks suppressed [ 466.063955][ T4096] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x4 [ 466.077521][ T4096] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x2 [ 466.096745][ T4096] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x3 [ 466.104642][ T4096] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 466.112370][ T4096] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 466.120098][ T4096] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 466.127828][ T4096] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 466.135580][ T4096] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 466.149759][ T4096] hid-generic 0000:3000000:0000.0028: hidraw0: HID v0.00 Device [sy] on syz0 [ 466.193973][T18843] fido_id[18843]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 466.423904][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.728579][T18864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4591'. [ 466.786131][T18864] loop1: detected capacity change from 0 to 2048 [ 466.812796][T18868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18868 comm=syz.4.4590 [ 466.829645][T18864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.860881][T18864] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.4591: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 466.930770][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.993443][T18873] macvtap0: refused to change device tx_queue_len [ 467.076004][T18875] loop1: detected capacity change from 0 to 1024 [ 467.092284][T18875] EXT4-fs: Ignoring removed orlov option [ 467.108839][T18875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.273847][T18867] netlink: 'syz.0.4592': attribute type 12 has an invalid length. [ 467.422013][T18884] loop3: detected capacity change from 0 to 1024 [ 467.435671][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 467.435685][ T29] audit: type=1326 audit(467.414:14832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.468314][T18884] EXT4-fs: Ignoring removed orlov option [ 467.479972][ T29] audit: type=1326 audit(467.444:14833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.503058][ T29] audit: type=1326 audit(467.444:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.504630][T18888] program syz.0.4597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.526165][ T29] audit: type=1326 audit(467.444:14835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.526203][ T29] audit: type=1326 audit(467.444:14836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.581561][ T29] audit: type=1326 audit(467.444:14837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.604608][ T29] audit: type=1326 audit(467.444:14838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.627640][ T29] audit: type=1326 audit(467.444:14839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.650707][ T29] audit: type=1326 audit(467.444:14840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.673721][ T29] audit: type=1326 audit(467.454:14842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 467.686403][T18888] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 467.716341][T18884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.802983][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.005808][T18900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 468.012389][T18900] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 468.020201][T18900] vhci_hcd vhci_hcd.0: Device attached [ 468.068813][T18901] vhci_hcd: connection closed [ 468.069091][T13449] vhci_hcd vhci_hcd.0: stop threads [ 468.079194][T13449] vhci_hcd vhci_hcd.0: release socket [ 468.084672][T13449] vhci_hcd vhci_hcd.0: disconnect device [ 468.281644][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.335664][T18905] usb usb7: usbfs: process 18905 (syz.4.4604) did not claim interface 0 before use [ 468.801305][T18922] random: crng reseeded on system resumption [ 468.815133][T18922] macvtap0: refused to change device tx_queue_len [ 468.983423][T18928] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4613'. [ 469.111745][T18918] netlink: 'syz.0.4609': attribute type 12 has an invalid length. [ 469.179682][T18937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18937 comm=syz.2.4614 [ 469.824025][T18943] netlink: 'syz.0.4618': attribute type 5 has an invalid length. [ 469.831934][T18943] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4618'. [ 469.861848][T18943] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4618'. [ 469.891166][T18943] netlink: 'syz.0.4618': attribute type 13 has an invalid length. [ 469.980879][T18947] random: crng reseeded on system resumption [ 469.992497][T18947] macvtap0: refused to change device tx_queue_len [ 470.062804][T18952] program syz.0.4621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.080799][T18953] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 470.101043][T18952] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.399444][T18967] usb usb7: usbfs: process 18967 (syz.1.4626) did not claim interface 0 before use [ 470.504622][T18973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 470.645496][T18977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18977 comm=syz.2.4630 [ 470.839361][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4632'. [ 471.392851][T18982] loop3: detected capacity change from 0 to 2048 [ 471.431395][T18982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.447050][T18982] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.4632: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 471.521342][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.753461][T18997] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 472.992798][T19012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19012 comm=syz.1.4640 [ 473.128002][T19015] lo speed is unknown, defaulting to 1000 [ 473.566541][T19021] usb usb7: usbfs: process 19021 (syz.0.4643) did not claim interface 0 before use [ 473.580769][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 473.580784][ T29] audit: type=1326 audit(473.554:15427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19019 comm="syz.0.4643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb57cdf749 code=0x0 [ 473.718959][T19023] netlink: 'syz.3.4644': attribute type 9 has an invalid length. [ 473.913588][T19026] macvtap0: refused to change device tx_queue_len [ 474.079736][T19033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 474.347072][T19037] loop3: detected capacity change from 0 to 1024 [ 474.374076][T19037] EXT4-fs: Ignoring removed orlov option [ 474.425160][T19037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.583936][T19043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4650'. [ 475.567538][T19056] netlink: 'syz.4.4654': attribute type 5 has an invalid length. [ 475.575362][T19056] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4654'. [ 475.625645][T19057] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4654'. [ 475.658729][T19056] netlink: 'syz.4.4654': attribute type 13 has an invalid length. [ 475.947392][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.948747][T19063] random: crng reseeded on system resumption [ 476.023670][T19063] macvtap0: refused to change device tx_queue_len [ 476.248607][T19075] usb usb7: usbfs: process 19075 (syz.1.4660) did not claim interface 0 before use [ 476.258993][ T29] audit: type=1326 audit(476.234:15428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19070 comm="syz.1.4660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x0 [ 476.737591][T19082] lo speed is unknown, defaulting to 1000 [ 476.895758][T19086] loop2: detected capacity change from 0 to 512 [ 476.932547][T19086] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4663: inode has both inline data and extents flags [ 476.957019][ T29] audit: type=1400 audit(476.934:15429): avc: denied { setopt } for pid=19089 comm="syz.3.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 477.037198][T19086] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4663: couldn't read orphan inode 15 (err -117) [ 477.067360][T19093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4664'. [ 477.100765][ T29] audit: type=1400 audit(477.034:15430): avc: denied { bind } for pid=19089 comm="syz.3.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.119865][ T29] audit: type=1400 audit(477.034:15431): avc: denied { node_bind } for pid=19089 comm="syz.3.4664" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 477.140909][ T29] audit: type=1400 audit(477.034:15432): avc: denied { lock } for pid=19089 comm="syz.3.4664" path="socket:[91209]" dev="sockfs" ino=91209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.152581][T19086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.271835][ T29] audit: type=1326 audit(477.184:15433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19085 comm="syz.2.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 477.295047][ T29] audit: type=1326 audit(477.184:15434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19085 comm="syz.2.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 477.318108][ T29] audit: type=1326 audit(477.204:15435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19085 comm="syz.2.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 477.341175][ T29] audit: type=1326 audit(477.204:15436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19085 comm="syz.2.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 477.421570][T19104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19104 comm=syz.3.4667 [ 477.516555][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.810889][T19111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4670'. [ 477.933260][T19101] loop1: detected capacity change from 0 to 512 [ 477.966704][T19101] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.4668: error while reading EA inode 32 err=-116 [ 477.993923][T19114] loop4: detected capacity change from 0 to 1024 [ 478.025813][T19114] EXT4-fs: Ignoring removed orlov option [ 478.051753][T19101] EXT4-fs (loop1): Remounting filesystem read-only [ 478.090035][T19114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.107532][T19101] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 478.151343][T19101] EXT4-fs (loop1): 1 orphan inode deleted [ 478.157511][T19101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.246601][T19101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.548488][T19108] loop2: detected capacity change from 0 to 512 [ 478.593874][T19132] xt_hashlimit: max too large, truncated to 1048576 [ 478.612689][T19108] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4669: error while reading EA inode 32 err=-116 [ 478.644326][T19108] EXT4-fs (loop2): Remounting filesystem read-only [ 478.656100][T19108] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 478.678518][T19108] EXT4-fs (loop2): 1 orphan inode deleted [ 478.692240][T19108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.722404][T19108] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.944407][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.008398][T19141] program syz.3.4677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.040811][T19141] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 479.116941][T19148] loop4: detected capacity change from 0 to 1024 [ 479.173291][T19148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.197426][T19149] lo speed is unknown, defaulting to 1000 [ 479.234545][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 479.234561][ T29] audit: type=1400 audit(479.214:15457): avc: denied { connect } for pid=19147 comm="syz.4.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 479.315440][T19156] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 479.365455][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4681'. [ 479.447890][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4681'. [ 479.587369][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4681'. [ 479.698605][T19178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19178 comm=syz.3.4687 [ 479.772468][ T29] audit: type=1326 audit(479.754:15458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.007792][ T29] audit: type=1326 audit(479.774:15459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.030877][ T29] audit: type=1326 audit(479.774:15460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.053889][ T29] audit: type=1326 audit(479.774:15461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.076961][ T29] audit: type=1326 audit(479.794:15462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.099879][ T29] audit: type=1326 audit(479.794:15463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.122992][ T29] audit: type=1326 audit(479.794:15464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.146032][ T29] audit: type=1326 audit(479.794:15465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.169140][ T29] audit: type=1326 audit(479.794:15466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19171 comm="syz.3.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 480.591307][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.625902][T19188] loop2: detected capacity change from 0 to 1024 [ 480.646322][T19188] EXT4-fs: Ignoring removed orlov option [ 480.693180][T19190] macvtap0: refused to change device tx_queue_len [ 480.768180][T19188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.955041][T19197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 480.961610][T19197] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 480.969428][T19197] vhci_hcd vhci_hcd.0: Device attached [ 481.150805][ T3403] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 481.240774][ T3403] usb 3-1: new full-speed USB device number 9 using vhci_hcd [ 481.268769][T19212] program syz.0.4698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.278520][T19212] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 481.301961][T19214] netlink: 'syz.4.4699': attribute type 5 has an invalid length. [ 481.309759][T19214] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4699'. [ 481.321724][T19214] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4699'. [ 481.331431][T19214] netlink: 'syz.4.4699': attribute type 13 has an invalid length. [ 481.375436][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.476020][T19220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19220 comm=syz.4.4700 [ 481.544576][T19224] macvtap0: refused to change device tx_queue_len [ 481.619583][T19206] vhci_hcd: connection reset by peer [ 481.621135][T19227] tmpfs: Unknown parameter '/dev/sg#' [ 481.627802][ T2201] vhci_hcd vhci_hcd.1: stop threads [ 481.635712][ T2201] vhci_hcd vhci_hcd.1: release socket [ 481.641167][ T2201] vhci_hcd vhci_hcd.1: disconnect device [ 481.829845][T19238] loop3: detected capacity change from 0 to 1024 [ 481.837629][T19238] EXT4-fs: Ignoring removed orlov option [ 481.851879][T19238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.965673][T19229] netlink: 'syz.0.4705': attribute type 12 has an invalid length. [ 482.173851][T19242] netlink: 'syz.1.4710': attribute type 5 has an invalid length. [ 482.181700][T19242] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4710'. [ 482.223476][T19244] lo speed is unknown, defaulting to 1000 [ 482.235781][T19242] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4710'. [ 482.255770][T19242] netlink: 'syz.1.4710': attribute type 13 has an invalid length. [ 482.275560][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.493664][T19257] program syz.2.4716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.531236][T19257] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 482.682548][T19274] lo speed is unknown, defaulting to 1000 [ 482.739369][T19277] loop4: detected capacity change from 0 to 1024 [ 482.766553][T19277] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 482.833240][T19283] program syz.3.4724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.896917][T19283] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 483.617403][T19315] macvtap0: refused to change device tx_queue_len [ 483.637212][T19316] program syz.0.4735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.659357][T19316] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 483.772466][T19321] lo speed is unknown, defaulting to 1000 [ 483.807407][T19298] loop4: detected capacity change from 0 to 512 [ 483.857422][T19298] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4731: error while reading EA inode 32 err=-116 [ 483.922603][T19298] EXT4-fs (loop4): Remounting filesystem read-only [ 483.929434][T19298] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 483.951031][T19298] EXT4-fs (loop4): 1 orphan inode deleted [ 483.957514][T19298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.982440][T19298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.994279][T19331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19331 comm=syz.1.4740 [ 484.052079][T19333] loop7: detected capacity change from 0 to 7 [ 484.071456][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.081143][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.090688][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.100337][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.108470][T13215] loop7: unable to read partition table [ 484.161256][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.171024][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.179293][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.188943][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.196829][T19333] loop7: unable to read partition table [ 484.211696][T19333] loop_reread_partitions: partition scan of loop7 (VÅå=ì³pÿ7ª·¤ ËŠ6ΘhÄ ¶–)·rìjó‡ÅêzNâ5î& ‘ôÑŠqMqÏ-+ƒ-¶@ß+) failed (rc=-5) [ 484.226020][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.235667][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.245043][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.254685][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.263877][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.273518][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.281705][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.291333][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.300491][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.310114][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.329636][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 484.339305][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 484.425264][T19342] program syz.2.4743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.452634][T19342] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 484.878378][ T3008] loop7: unable to read partition table [ 485.154562][T19360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4750'. [ 485.205254][T19363] macvtap0: refused to change device tx_queue_len [ 485.540331][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 485.540345][ T29] audit: type=1326 audit(485.514:15523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.583739][T19348] loop2: detected capacity change from 0 to 512 [ 485.603438][ T29] audit: type=1326 audit(485.544:15524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.626502][ T29] audit: type=1326 audit(485.554:15525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.649400][ T29] audit: type=1326 audit(485.554:15526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.672485][ T29] audit: type=1326 audit(485.554:15527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.695497][ T29] audit: type=1326 audit(485.554:15528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.718529][ T29] audit: type=1326 audit(485.554:15529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.741520][ T29] audit: type=1326 audit(485.554:15530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.764562][ T29] audit: type=1326 audit(485.554:15531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.787620][ T29] audit: type=1326 audit(485.554:15532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19367 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 485.811072][T19348] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4747: error while reading EA inode 32 err=-116 [ 485.826103][T19348] EXT4-fs (loop2): Remounting filesystem read-only [ 485.833205][T19348] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 485.843344][T19348] EXT4-fs (loop2): 1 orphan inode deleted [ 485.849419][T19348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.862376][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.897254][T19372] loop1: detected capacity change from 0 to 1024 [ 485.921050][T19372] EXT4-fs: Ignoring removed orlov option [ 485.942514][T19372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.955373][T19348] netlink: 'syz.2.4747': attribute type 12 has an invalid length. [ 486.109261][T19383] lo speed is unknown, defaulting to 1000 [ 486.140149][T19384] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.177870][T19387] loop3: detected capacity change from 0 to 1024 [ 486.195664][T19387] EXT4-fs: Ignoring removed orlov option [ 486.219396][T19387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.307870][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.319733][ T3403] usb 3-1: enqueue for inactive port 0 [ 486.328446][ T3403] usb 3-1: enqueue for inactive port 0 [ 486.400923][ T3403] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 486.420526][T19401] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.673595][T19408] macvtap0: refused to change device tx_queue_len [ 486.741833][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.757040][T19410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4766'. [ 486.922115][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 486.934958][T19425] loop4: detected capacity change from 0 to 1024 [ 486.941864][T19425] EXT4-fs: Ignoring removed orlov option [ 486.958638][T19425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.177313][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.395601][T19441] lo speed is unknown, defaulting to 1000 [ 487.443396][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4776'. [ 487.571240][T19447] loop1: detected capacity change from 0 to 1024 [ 487.577998][T19447] EXT4-fs: Ignoring removed orlov option [ 487.586234][T19447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.703372][T19454] FAULT_INJECTION: forcing a failure. [ 487.703372][T19454] name failslab, interval 1, probability 0, space 0, times 0 [ 487.716124][T19454] CPU: 1 UID: 0 PID: 19454 Comm: syz.4.4780 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 487.716221][T19454] Tainted: [W]=WARN [ 487.716229][T19454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.716245][T19454] Call Trace: [ 487.716253][T19454] [ 487.716262][T19454] __dump_stack+0x1d/0x30 [ 487.716292][T19454] dump_stack_lvl+0x95/0xd0 [ 487.716319][T19454] dump_stack+0x15/0x1b [ 487.716359][T19454] should_fail_ex+0x265/0x280 [ 487.716409][T19454] should_failslab+0x8c/0xb0 [ 487.716437][T19454] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 487.716470][T19454] ? alloc_workqueue_noprof+0x63f/0x1320 [ 487.716497][T19454] alloc_workqueue_noprof+0x63f/0x1320 [ 487.716537][T19454] ? dev_set_name+0x83/0xb0 [ 487.716579][T19454] hci_register_dev+0x1a7/0x570 [ 487.716606][T19454] hci_uart_tty_ioctl+0x520/0x5c0 [ 487.716686][T19454] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 487.716756][T19454] tty_ioctl+0x83f/0xb80 [ 487.716783][T19454] ? __pfx_tty_ioctl+0x10/0x10 [ 487.716803][T19454] __se_sys_ioctl+0xce/0x140 [ 487.716841][T19454] __x64_sys_ioctl+0x43/0x50 [ 487.716912][T19454] x64_sys_call+0x14b0/0x3000 [ 487.716945][T19454] do_syscall_64+0xca/0x2b0 [ 487.716996][T19454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.717017][T19454] RIP: 0033:0x7eff34b5f749 [ 487.717032][T19454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.717051][T19454] RSP: 002b:00007eff335bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.717072][T19454] RAX: ffffffffffffffda RBX: 00007eff34db5fa0 RCX: 00007eff34b5f749 [ 487.717102][T19454] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 487.717119][T19454] RBP: 00007eff335bf090 R08: 0000000000000000 R09: 0000000000000000 [ 487.717132][T19454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.717144][T19454] R13: 00007eff34db6038 R14: 00007eff34db5fa0 R15: 00007ffe9b673d38 [ 487.717169][T19454] [ 487.717493][T19454] Bluetooth: Can't register HCI device [ 488.047406][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.109207][T19464] lo speed is unknown, defaulting to 1000 [ 488.109221][T19466] loop2: detected capacity change from 0 to 1024 [ 488.109807][T19466] EXT4-fs: Ignoring removed orlov option [ 488.149254][T19467] loop1: detected capacity change from 0 to 1024 [ 488.161746][T19467] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 488.181946][T19466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.614368][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.746709][T19488] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 488.753347][T19488] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.761070][T19488] vhci_hcd vhci_hcd.0: Device attached [ 488.848537][T19496] loop3: detected capacity change from 0 to 1024 [ 488.855462][T19496] EXT4-fs: Ignoring removed orlov option [ 488.869400][T19496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.909141][T19499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4795'. [ 488.931161][T19499] loop4: detected capacity change from 0 to 2048 [ 488.950761][ T3598] Bluetooth: hci0: command 0x1003 tx timeout [ 488.950788][ T3403] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 488.963806][T12535] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 488.973925][T19499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.003461][T19499] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.4795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 489.021210][ T3403] usb 3-1: new full-speed USB device number 10 using vhci_hcd [ 489.157133][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.254790][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.281354][T19514] netlink: 'syz.4.4801': attribute type 5 has an invalid length. [ 489.289168][T19514] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4801'. [ 489.321876][T19514] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4801'. [ 489.343329][T19514] netlink: 'syz.4.4801': attribute type 13 has an invalid length. [ 489.523982][T19489] vhci_hcd: connection reset by peer [ 489.533981][ T31] vhci_hcd vhci_hcd.1: stop threads [ 489.539320][ T31] vhci_hcd vhci_hcd.1: release socket [ 489.545263][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 489.846305][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4806'. [ 489.855633][T19532] syz_tun: entered promiscuous mode [ 489.861332][T19532] syz_tun: refused to change device tx_queue_len [ 489.895723][T19534] macvtap0: refused to change device tx_queue_len [ 490.065712][T19541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4809'. [ 490.092535][T19541] loop1: detected capacity change from 0 to 2048 [ 490.112596][T19541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.126531][T19541] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.4809: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 490.170296][T19547] lo speed is unknown, defaulting to 1000 [ 490.183394][T19549] loop3: detected capacity change from 0 to 1024 [ 490.191044][T19549] EXT4-fs: Ignoring removed orlov option [ 490.209205][T19549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.222614][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.517448][T19568] program syz.1.4819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.530338][T19568] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 490.541538][T19566] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 490.647478][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.756656][T19578] lo speed is unknown, defaulting to 1000 [ 490.826510][T19581] usb usb7: usbfs: process 19581 (syz.1.4823) did not claim interface 0 before use [ 490.920716][ T29] kauditd_printk_skb: 730 callbacks suppressed [ 490.920736][ T29] audit: type=1326 audit(490.814:16263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19573 comm="syz.1.4823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x0 [ 491.037105][T19583] netlink: 'syz.2.4826': attribute type 5 has an invalid length. [ 491.045098][T19583] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4826'. [ 491.092830][T19583] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4826'. [ 491.140061][T19585] netlink: 'syz.2.4826': attribute type 13 has an invalid length. [ 491.201372][ T29] audit: type=1326 audit(491.184:16264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.234547][ T29] audit: type=1326 audit(491.184:16265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.257680][ T29] audit: type=1326 audit(491.184:16266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.280794][ T29] audit: type=1326 audit(491.184:16267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.303809][ T29] audit: type=1326 audit(491.184:16268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.326793][ T29] audit: type=1326 audit(491.184:16269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.349848][ T29] audit: type=1326 audit(491.184:16270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.372836][ T29] audit: type=1326 audit(491.184:16271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.395917][ T29] audit: type=1326 audit(491.184:16272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.2.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 491.477520][T19597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19597 comm=syz.0.4829 [ 491.644781][T19605] program syz.4.4831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 491.660989][T19607] loop3: detected capacity change from 0 to 1024 [ 491.676717][T19605] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 491.685513][T19607] EXT4-fs: Ignoring removed orlov option [ 491.715165][T19607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.068161][T19623] lo speed is unknown, defaulting to 1000 [ 492.318136][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.392282][T19630] usb usb7: usbfs: process 19630 (syz.4.4842) did not claim interface 0 before use [ 492.915165][T19653] program syz.1.4850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.935217][T19653] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 492.979224][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4854'. [ 492.988295][T19657] netlink: 484 bytes leftover after parsing attributes in process `syz.3.4854'. [ 494.079160][ T3403] usb 3-1: enqueue for inactive port 0 [ 494.103543][ T3403] usb 3-1: enqueue for inactive port 0 [ 494.173072][T19683] loop4: detected capacity change from 0 to 512 [ 494.182189][ T3403] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 494.208944][T19683] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4862: error while reading EA inode 32 err=-116 [ 494.281143][T19683] EXT4-fs (loop4): Remounting filesystem read-only [ 494.307865][T19683] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 494.430731][T19683] EXT4-fs (loop4): 1 orphan inode deleted [ 494.436947][T19683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.439953][T19697] $Hÿ: renamed from bond0 [ 494.459826][T19683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.470525][T19697] $Hÿ: entered promiscuous mode [ 494.475734][T19697] bond_slave_0: entered promiscuous mode [ 494.481599][T19697] bond_slave_1: entered promiscuous mode [ 494.488511][T19695] usb usb7: usbfs: process 19695 (syz.3.4866) did not claim interface 0 before use [ 494.538320][T19697] netlink: 1692 bytes leftover after parsing attributes in process `syz.1.4867'. [ 494.581880][T19708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4871'. [ 494.627214][T19708] loop1: detected capacity change from 0 to 2048 [ 494.664536][T19708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.696061][T19708] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.4871: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 494.761796][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.844583][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4876'. [ 495.013338][T19731] macvtap0: refused to change device tx_queue_len [ 495.055420][T19733] lo speed is unknown, defaulting to 1000 [ 495.101043][T19735] loop4: detected capacity change from 0 to 1024 [ 495.108884][T19735] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 495.383699][T19746] lo speed is unknown, defaulting to 1000 [ 495.752897][T19753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4885'. [ 495.864040][T19753] loop1: detected capacity change from 0 to 2048 [ 495.911775][T19753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.936763][T19753] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.4885: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 496.057417][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.167827][T19745] loop4: detected capacity change from 0 to 512 [ 496.203222][T19745] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4883: error while reading EA inode 32 err=-116 [ 496.220826][T19745] EXT4-fs (loop4): Remounting filesystem read-only [ 496.232339][T19745] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 496.252941][T19745] EXT4-fs (loop4): 1 orphan inode deleted [ 496.265786][T19745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.278698][T19745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.318518][T19766] vlan2: entered promiscuous mode [ 496.323841][T19766] batadv0: entered promiscuous mode [ 496.343645][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 496.343663][ T29] audit: type=1326 audit(496.324:16609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb57cdf749 code=0x7ffc0000 [ 496.363167][T19762] FAULT_INJECTION: forcing a failure. [ 496.363167][T19762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.385999][T19762] CPU: 0 UID: 0 PID: 19762 Comm: syz.0.4889 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 496.386064][T19762] Tainted: [W]=WARN [ 496.386071][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.386140][T19762] Call Trace: [ 496.386147][T19762] [ 496.386155][T19762] __dump_stack+0x1d/0x30 [ 496.386183][T19762] dump_stack_lvl+0x95/0xd0 [ 496.386207][T19762] dump_stack+0x15/0x1b [ 496.386246][T19762] should_fail_ex+0x265/0x280 [ 496.386303][T19762] should_fail+0xb/0x20 [ 496.386323][T19762] should_fail_usercopy+0x1a/0x20 [ 496.386344][T19762] _copy_to_user+0x20/0xa0 [ 496.386375][T19762] simple_read_from_buffer+0xb5/0x130 [ 496.386401][T19762] proc_fail_nth_read+0x10e/0x150 [ 496.386474][T19762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.386504][T19762] vfs_read+0x1a8/0x770 [ 496.386524][T19762] ? __rcu_read_unlock+0x4f/0x70 [ 496.386548][T19762] ? __fget_files+0x184/0x1c0 [ 496.386661][T19762] ? mutex_lock+0x58/0x90 [ 496.386688][T19762] ksys_read+0xda/0x1a0 [ 496.386705][T19762] __x64_sys_read+0x40/0x50 [ 496.386721][T19762] x64_sys_call+0x2889/0x3000 [ 496.386774][T19762] do_syscall_64+0xca/0x2b0 [ 496.386815][T19762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.386840][T19762] RIP: 0033:0x7ffb57cde15c [ 496.386857][T19762] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 496.386950][T19762] RSP: 002b:00007ffb56747030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.386968][T19762] RAX: ffffffffffffffda RBX: 00007ffb57f35fa0 RCX: 00007ffb57cde15c [ 496.386982][T19762] RDX: 000000000000000f RSI: 00007ffb567470a0 RDI: 0000000000000007 [ 496.386997][T19762] RBP: 00007ffb56747090 R08: 0000000000000000 R09: 0000000000000000 [ 496.387012][T19762] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 496.387027][T19762] R13: 00007ffb57f36038 R14: 00007ffb57f35fa0 R15: 00007ffcae6b1038 [ 496.387047][T19762] [ 496.392601][ T29] audit: type=1326 audit(496.324:16610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19761 comm="syz.0.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb57cdf749 code=0x7ffc0000 [ 496.402526][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4888'. [ 496.688818][T19772] loop3: detected capacity change from 0 to 1024 [ 496.695698][T19772] EXT4-fs: Ignoring removed orlov option [ 496.704118][T19772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.854594][T19780] lo speed is unknown, defaulting to 1000 [ 496.940312][T19785] loop1: detected capacity change from 0 to 1024 [ 496.989631][T19785] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 497.001671][T19788] FAULT_INJECTION: forcing a failure. [ 497.001671][T19788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.014790][T19788] CPU: 0 UID: 0 PID: 19788 Comm: syz.0.4896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 497.014822][T19788] Tainted: [W]=WARN [ 497.014882][T19788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.014960][T19788] Call Trace: [ 497.014968][T19788] [ 497.014977][T19788] __dump_stack+0x1d/0x30 [ 497.015005][T19788] dump_stack_lvl+0x95/0xd0 [ 497.015092][T19788] dump_stack+0x15/0x1b [ 497.015114][T19788] should_fail_ex+0x265/0x280 [ 497.015133][T19788] should_fail+0xb/0x20 [ 497.015148][T19788] should_fail_usercopy+0x1a/0x20 [ 497.015168][T19788] _copy_from_user+0x1c/0xb0 [ 497.015239][T19788] ___sys_sendmsg+0xc1/0x1d0 [ 497.015283][T19788] __x64_sys_sendmsg+0xd4/0x160 [ 497.015318][T19788] x64_sys_call+0x17ba/0x3000 [ 497.015351][T19788] do_syscall_64+0xca/0x2b0 [ 497.015425][T19788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.015457][T19788] RIP: 0033:0x7ffb57cdf749 [ 497.015470][T19788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.015484][T19788] RSP: 002b:00007ffb56747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.015554][T19788] RAX: ffffffffffffffda RBX: 00007ffb57f35fa0 RCX: 00007ffb57cdf749 [ 497.015617][T19788] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 497.015631][T19788] RBP: 00007ffb56747090 R08: 0000000000000000 R09: 0000000000000000 [ 497.015644][T19788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.015653][T19788] R13: 00007ffb57f36038 R14: 00007ffb57f35fa0 R15: 00007ffcae6b1038 [ 497.015669][T19788] [ 497.384597][T19804] syzkaller0: entered promiscuous mode [ 497.390176][T19804] syzkaller0: entered allmulticast mode [ 497.402284][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.414863][T19804] tipc: Started in network mode [ 497.419826][T19804] tipc: Node identity b64ae43c351a, cluster identity 4711 [ 497.427128][T19804] tipc: Enabled bearer , priority 0 [ 497.460244][T19804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4901'. [ 497.469332][T19804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4901'. [ 497.478915][T19806] FAULT_INJECTION: forcing a failure. [ 497.478915][T19806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.492049][T19806] CPU: 1 UID: 0 PID: 19806 Comm: syz.3.4902 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 497.492134][T19806] Tainted: [W]=WARN [ 497.492142][T19806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.492155][T19806] Call Trace: [ 497.492162][T19806] [ 497.492204][T19806] __dump_stack+0x1d/0x30 [ 497.492232][T19806] dump_stack_lvl+0x95/0xd0 [ 497.492256][T19806] dump_stack+0x15/0x1b [ 497.492307][T19806] should_fail_ex+0x265/0x280 [ 497.492400][T19806] should_fail+0xb/0x20 [ 497.492415][T19806] should_fail_usercopy+0x1a/0x20 [ 497.492496][T19806] _copy_from_user+0x1c/0xb0 [ 497.492562][T19806] ___sys_sendmsg+0xc1/0x1d0 [ 497.492596][T19806] __x64_sys_sendmsg+0xd4/0x160 [ 497.492630][T19806] x64_sys_call+0x17ba/0x3000 [ 497.492666][T19806] do_syscall_64+0xca/0x2b0 [ 497.492703][T19806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.492797][T19806] RIP: 0033:0x7f7183b8f749 [ 497.492814][T19806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.492835][T19806] RSP: 002b:00007f71825ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.492851][T19806] RAX: ffffffffffffffda RBX: 00007f7183de5fa0 RCX: 00007f7183b8f749 [ 497.492861][T19806] RDX: 0000000000044000 RSI: 0000200000000500 RDI: 0000000000000003 [ 497.492942][T19806] RBP: 00007f71825ef090 R08: 0000000000000000 R09: 0000000000000000 [ 497.492954][T19806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.492967][T19806] R13: 00007f7183de6038 R14: 00007f7183de5fa0 R15: 00007ffca65c83f8 [ 497.492987][T19806] [ 497.499005][T19803] tipc: Resetting bearer [ 497.673636][T19803] tipc: Disabling bearer [ 497.679916][T19808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4903'. [ 497.796365][T19812] lo speed is unknown, defaulting to 1000 [ 497.804263][ T29] audit: type=1400 audit(497.784:16611): avc: denied { map } for pid=19813 comm="syz.3.4905" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 497.851517][T19814] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 497.859372][T19814] vhci_hcd vhci_hcd.2: invalid port number 96 [ 497.865493][T19814] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 497.878383][T19815] loop2: detected capacity change from 0 to 1024 [ 497.901017][T19815] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 497.983339][T19821] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.158587][T19825] macvtap0: refused to change device tx_queue_len [ 498.302819][T19833] loop2: detected capacity change from 0 to 1024 [ 498.309494][T19833] EXT4-fs: Ignoring removed orlov option [ 498.350069][T19833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.549636][T19851] FAULT_INJECTION: forcing a failure. [ 498.549636][T19851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.562937][T19851] CPU: 0 UID: 0 PID: 19851 Comm: syz.3.4918 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 498.562971][T19851] Tainted: [W]=WARN [ 498.562978][T19851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.563067][T19851] Call Trace: [ 498.563074][T19851] [ 498.563083][T19851] __dump_stack+0x1d/0x30 [ 498.563110][T19851] dump_stack_lvl+0x95/0xd0 [ 498.563135][T19851] dump_stack+0x15/0x1b [ 498.563157][T19851] should_fail_ex+0x265/0x280 [ 498.563216][T19851] should_fail+0xb/0x20 [ 498.563326][T19851] should_fail_usercopy+0x1a/0x20 [ 498.563355][T19851] _copy_from_user+0x1c/0xb0 [ 498.563380][T19851] ___sys_sendmsg+0xc1/0x1d0 [ 498.563430][T19851] __x64_sys_sendmsg+0xd4/0x160 [ 498.563537][T19851] x64_sys_call+0x17ba/0x3000 [ 498.563631][T19851] do_syscall_64+0xca/0x2b0 [ 498.563662][T19851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.563762][T19851] RIP: 0033:0x7f7183b8f749 [ 498.563779][T19851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.563796][T19851] RSP: 002b:00007f71825ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.563813][T19851] RAX: ffffffffffffffda RBX: 00007f7183de5fa0 RCX: 00007f7183b8f749 [ 498.563922][T19851] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 498.563973][T19851] RBP: 00007f71825ef090 R08: 0000000000000000 R09: 0000000000000000 [ 498.563989][T19851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.564005][T19851] R13: 00007f7183de6038 R14: 00007f7183de5fa0 R15: 00007ffca65c83f8 [ 498.564027][T19851] [ 499.114552][T19858] lo speed is unknown, defaulting to 1000 [ 499.530754][ T29] audit: type=1400 audit(499.504:16612): avc: denied { name_bind } for pid=19861 comm="syz.4.4920" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 499.604027][T19865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4920'. [ 499.695567][T19868] loop3: detected capacity change from 0 to 2048 [ 499.710497][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.782890][T19868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.908435][T19868] netlink: 'syz.3.4922': attribute type 4 has an invalid length. [ 499.916495][T19874] usb usb7: usbfs: process 19874 (syz.0.4925) did not claim interface 0 before use [ 499.927282][ T29] audit: type=1326 audit(499.904:16613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.0.4925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb57cdf749 code=0x0 [ 499.956867][T19868] netlink: 'syz.3.4922': attribute type 4 has an invalid length. [ 499.979342][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.147313][ T29] audit: type=1400 audit(500.124:16614): avc: denied { read } for pid=19895 comm="syz.2.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 500.162721][T19896] loop2: detected capacity change from 0 to 128 [ 500.176246][ T29] audit: type=1326 audit(500.124:16616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 500.199261][ T29] audit: type=1326 audit(500.124:16617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 500.222302][ T29] audit: type=1326 audit(500.124:16618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 500.245292][ T29] audit: type=1326 audit(500.124:16615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 500.357211][T19902] syz.2.4933: attempt to access beyond end of device [ 500.357211][T19902] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 500.396298][T19902] syz.2.4933: attempt to access beyond end of device [ 500.396298][T19902] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 500.424720][T19902] syz.2.4933: attempt to access beyond end of device [ 500.424720][T19902] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 500.442971][T19904] macvtap0: refused to change device tx_queue_len [ 500.467698][T19902] syz.2.4933: attempt to access beyond end of device [ 500.467698][T19902] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 500.494522][T19902] syz.2.4933: attempt to access beyond end of device [ 500.494522][T19902] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 500.513537][T19902] syz.2.4933: attempt to access beyond end of device [ 500.513537][T19902] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 500.527299][T19902] syz.2.4933: attempt to access beyond end of device [ 500.527299][T19902] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 500.571793][T19894] loop3: detected capacity change from 0 to 512 [ 500.579602][T19902] syz.2.4933: attempt to access beyond end of device [ 500.579602][T19902] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 500.594426][T19902] syz.2.4933: attempt to access beyond end of device [ 500.594426][T19902] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 500.612342][T19902] syz.2.4933: attempt to access beyond end of device [ 500.612342][T19902] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 500.619026][T19894] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4932: error while reading EA inode 32 err=-116 [ 500.638283][T19894] EXT4-fs (loop3): Remounting filesystem read-only [ 500.644963][T19894] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 500.655177][T19894] EXT4-fs (loop3): 1 orphan inode deleted [ 500.661325][T19894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.709800][T19912] program syz.4.4938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.720535][T19894] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.729818][T19912] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 500.757716][T19914] lo speed is unknown, defaulting to 1000 [ 500.758224][T19894] netlink: 'syz.3.4932': attribute type 12 has an invalid length. [ 500.835155][T19917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4940'. [ 500.908225][T19917] loop2: detected capacity change from 0 to 2048 [ 500.943337][T19917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.966154][T19917] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.4940: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 501.032156][T19925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4942'. [ 501.144110][T19930] FAULT_INJECTION: forcing a failure. [ 501.144110][T19930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.157293][T19930] CPU: 0 UID: 0 PID: 19930 Comm: syz.3.4944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 501.157330][T19930] Tainted: [W]=WARN [ 501.157366][T19930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.157377][T19930] Call Trace: [ 501.157383][T19930] [ 501.157390][T19930] __dump_stack+0x1d/0x30 [ 501.157413][T19930] dump_stack_lvl+0x95/0xd0 [ 501.157437][T19930] dump_stack+0x15/0x1b [ 501.157536][T19930] should_fail_ex+0x265/0x280 [ 501.157633][T19930] should_fail+0xb/0x20 [ 501.157654][T19930] should_fail_usercopy+0x1a/0x20 [ 501.157717][T19930] _copy_from_user+0x1c/0xb0 [ 501.157746][T19930] ___sys_sendmsg+0xc1/0x1d0 [ 501.157797][T19930] __x64_sys_sendmsg+0xd4/0x160 [ 501.157890][T19930] x64_sys_call+0x17ba/0x3000 [ 501.157962][T19930] do_syscall_64+0xca/0x2b0 [ 501.158007][T19930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.158030][T19930] RIP: 0033:0x7f7183b8f749 [ 501.158047][T19930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.158065][T19930] RSP: 002b:00007f71825ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.158098][T19930] RAX: ffffffffffffffda RBX: 00007f7183de5fa0 RCX: 00007f7183b8f749 [ 501.158112][T19930] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 501.158125][T19930] RBP: 00007f71825ef090 R08: 0000000000000000 R09: 0000000000000000 [ 501.158138][T19930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.158151][T19930] R13: 00007f7183de6038 R14: 00007f7183de5fa0 R15: 00007ffca65c83f8 [ 501.158172][T19930] [ 501.158843][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.230961][T19925] loop4: detected capacity change from 0 to 2048 [ 501.462359][T19925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.495278][T19925] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.4942: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 501.525025][T19942] program syz.1.4947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.559008][T19944] loop3: detected capacity change from 0 to 1024 [ 501.567842][T19942] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 501.584115][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.599843][T19944] EXT4-fs: Ignoring removed orlov option [ 501.618343][T19944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.998519][T19934] loop2: detected capacity change from 0 to 512 [ 502.009848][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.027527][T19934] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4945: error while reading EA inode 32 err=-116 [ 502.050563][T19934] EXT4-fs (loop2): Remounting filesystem read-only [ 502.060934][T19934] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 502.090775][T19934] EXT4-fs (loop2): 1 orphan inode deleted [ 502.097231][T19934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.119951][T19934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.236857][T19968] netlink: 'syz.2.4956': attribute type 5 has an invalid length. [ 502.244824][T19968] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4956'. [ 502.254848][T19968] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4956'. [ 502.266273][T19968] netlink: 'syz.2.4956': attribute type 13 has an invalid length. [ 502.337308][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 502.337324][ T29] audit: type=1326 audit(502.314:16759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.344962][T19977] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4960'. [ 502.376372][T19980] loop3: detected capacity change from 0 to 128 [ 502.383620][ T29] audit: type=1326 audit(502.344:16760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.407636][ T29] audit: type=1326 audit(502.344:16761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.431603][ T29] audit: type=1326 audit(502.344:16762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.432543][T19981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4961'. [ 502.454583][ T29] audit: type=1326 audit(502.344:16763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.454614][ T29] audit: type=1326 audit(502.354:16764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.454645][ T29] audit: type=1326 audit(502.354:16765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.534178][ T29] audit: type=1326 audit(502.354:16766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.558102][ T29] audit: type=1326 audit(502.354:16767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7183b8f749 code=0x7ffc0000 [ 502.581976][ T29] audit: type=1326 audit(502.354:16768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19979 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7183b8f783 code=0x7ffc0000 [ 502.818896][T19989] lo speed is unknown, defaulting to 1000 [ 502.876738][T19990] loop3: detected capacity change from 0 to 1024 [ 502.890937][T19990] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 502.967569][T19983] loop2: detected capacity change from 0 to 512 [ 502.986669][T19983] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4963: error while reading EA inode 32 err=-116 [ 503.005459][T19994] netlink: 'syz.4.4967': attribute type 5 has an invalid length. [ 503.013197][T19983] EXT4-fs (loop2): Remounting filesystem read-only [ 503.013499][T19994] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4967'. [ 503.025301][T19983] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 503.054895][T19983] EXT4-fs (loop2): 1 orphan inode deleted [ 503.062129][T19983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.074687][T19998] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4967'. [ 503.075254][T19983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.102411][T19994] netlink: 'syz.4.4967': attribute type 13 has an invalid length. [ 503.106608][T20000] netlink: 416 bytes leftover after parsing attributes in process `syz.3.4968'. [ 503.234766][T20008] macvtap0: refused to change device tx_queue_len [ 503.304467][T20010] loop1: detected capacity change from 0 to 2048 [ 503.312560][T20014] macvtap0: refused to change device tx_queue_len [ 503.323327][T20012] loop2: detected capacity change from 0 to 1024 [ 503.350613][T20012] EXT4-fs: Ignoring removed orlov option [ 503.357782][T20010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.403327][T20012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.418355][T20010] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.4973: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 503.533684][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.712083][T20029] netlink: 'syz.1.4979': attribute type 5 has an invalid length. [ 503.742509][T20029] netlink: 'syz.1.4979': attribute type 13 has an invalid length. [ 503.856398][T20032] lo speed is unknown, defaulting to 1000 [ 503.885972][T20033] loop1: detected capacity change from 0 to 1024 [ 503.911272][T20033] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 504.010166][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.154760][T20043] program syz.2.4984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.181743][T20043] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 504.355567][T20052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 504.406261][T20054] lo speed is unknown, defaulting to 1000 [ 504.444054][T20061] loop2: detected capacity change from 0 to 1024 [ 504.467510][T20061] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 504.538749][T20063] loop3: detected capacity change from 0 to 1024 [ 504.576590][T20063] EXT4-fs: Ignoring removed orlov option [ 504.593491][T20063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.123138][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.297429][T20083] program syz.3.4998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.306917][T20083] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 505.467674][T20087] macvtap0: refused to change device tx_queue_len [ 505.659639][T20090] usb usb7: usbfs: process 20090 (syz.3.5000) did not claim interface 0 before use [ 506.169796][T20104] program syz.2.5005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.187696][T20104] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 506.208064][T20106] __nla_validate_parse: 4 callbacks suppressed [ 506.208096][T20106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5006'. [ 506.211504][T20108] loop1: detected capacity change from 0 to 1024 [ 506.232151][T20108] EXT4-fs: Ignoring removed orlov option [ 506.243210][T20108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.375594][T20114] program syz.4.5009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.391514][T20116] macvtap0: refused to change device tx_queue_len [ 506.398251][T20114] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 506.543566][T20124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20124 comm=syz.3.5011 [ 506.610472][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.574949][T20146] macvtap0: refused to change device tx_queue_len [ 507.682396][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 507.682412][ T29] audit: type=1400 audit(507.664:17124): avc: denied { bind } for pid=20147 comm="syz.1.5022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 507.721704][T20150] loop4: detected capacity change from 0 to 128 [ 507.751205][ T29] audit: type=1326 audit(507.694:17125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 507.775019][ T29] audit: type=1326 audit(507.694:17126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 507.798310][ T29] audit: type=1326 audit(507.694:17127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 507.822226][ T29] audit: type=1326 audit(507.694:17128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 507.845545][ T29] audit: type=1326 audit(507.694:17129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 507.869545][ T29] audit: type=1326 audit(507.694:17130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 507.892549][ T29] audit: type=1326 audit(507.694:17131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 507.916598][ T29] audit: type=1326 audit(507.694:17132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 507.939591][ T29] audit: type=1326 audit(507.694:17133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.4.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 508.099010][T20158] loop2: detected capacity change from 0 to 1024 [ 508.109442][ T31] bio_check_eod: 170 callbacks suppressed [ 508.109507][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.109507][ T31] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 508.132758][T20158] EXT4-fs: Ignoring removed orlov option [ 508.139026][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.139026][ T31] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 508.153711][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.153711][ T31] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 508.172352][T20158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.185530][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.185530][ T31] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 508.199106][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.199106][ T31] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 508.212634][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.212634][ T31] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 508.226046][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.226046][ T31] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 508.242501][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.242501][ T31] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 508.255919][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.255919][ T31] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 508.269568][ T31] kworker/u8:1: attempt to access beyond end of device [ 508.269568][ T31] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 508.299170][T20168] macvtap0: refused to change device tx_queue_len [ 508.339975][T20172] loop3: detected capacity change from 0 to 1024 [ 508.346665][T20172] EXT4-fs: Ignoring removed orlov option [ 508.441300][T20172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.003644][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.300099][T13478] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.541304][T20206] usb usb7: usbfs: process 20206 (syz.4.5042) did not claim interface 0 before use [ 509.727331][T20218] loop1: detected capacity change from 0 to 1024 [ 509.745856][T20218] EXT4-fs: Ignoring removed orlov option [ 509.754572][T20218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.980758][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.004491][T20228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5049'. [ 510.026792][T20228] loop1: detected capacity change from 0 to 2048 [ 510.042942][T20228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.130914][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.522690][T20244] program syz.4.5054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.555928][T20244] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 510.573663][T20248] ipt_REJECT: ECHOREPLY no longer supported. [ 510.588994][T20248] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5057'. [ 510.615054][T20248] syz_tun: entered allmulticast mode [ 510.627300][T20247] syz_tun: left allmulticast mode [ 511.120528][T20274] loop1: detected capacity change from 0 to 1024 [ 511.148381][T20274] EXT4-fs: Ignoring removed orlov option [ 511.166849][T20274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.256565][T20279] loop4: detected capacity change from 0 to 128 [ 511.504206][T20286] loop2: detected capacity change from 0 to 1024 [ 511.571074][T20286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.647373][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.717553][T20303] loop1: detected capacity change from 0 to 1764 [ 511.734085][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.911339][T20316] lo speed is unknown, defaulting to 1000 [ 512.468366][T20354] usb usb7: usbfs: process 20354 (syz.0.5092) did not claim interface 0 before use [ 512.535272][T20362] loop4: detected capacity change from 0 to 2048 [ 512.611135][T20362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.669430][T20369] lo speed is unknown, defaulting to 1000 [ 512.709191][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.729184][T20370] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 512.766023][ T29] kauditd_printk_skb: 1179 callbacks suppressed [ 512.766038][ T29] audit: type=1400 audit(512.744:18313): avc: denied { validate_trans } for pid=20368 comm="syz.1.5098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 512.879881][T20377] lo speed is unknown, defaulting to 1000 [ 513.077538][ T29] audit: type=1326 audit(513.054:18314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.127589][ T29] audit: type=1326 audit(513.064:18315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.151529][ T29] audit: type=1326 audit(513.064:18316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.174525][ T29] audit: type=1326 audit(513.084:18317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.198317][ T29] audit: type=1326 audit(513.084:18318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.222204][ T29] audit: type=1326 audit(513.084:18319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.245307][ T29] audit: type=1326 audit(513.084:18320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.269209][ T29] audit: type=1326 audit(513.084:18321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.293246][ T29] audit: type=1326 audit(513.084:18322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.1.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 513.393698][T20374] set_capacity_and_notify: 1 callbacks suppressed [ 513.393713][T20374] loop2: detected capacity change from 0 to 512 [ 513.459551][T20374] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5100: error while reading EA inode 32 err=-116 [ 513.475974][T20393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 513.496314][T20374] EXT4-fs (loop2): Remounting filesystem read-only [ 513.516839][T20374] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 513.607780][T20374] EXT4-fs (loop2): 1 orphan inode deleted [ 513.624646][T20374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.671565][T20398] loop4: detected capacity change from 0 to 128 [ 513.741000][T20374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.021754][T20374] netlink: 'syz.2.5100': attribute type 12 has an invalid length. [ 514.054917][T20406] bio_check_eod: 9610 callbacks suppressed [ 514.054935][T20406] syz.4.5107: attempt to access beyond end of device [ 514.054935][T20406] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 514.120472][T20406] syz.4.5107: attempt to access beyond end of device [ 514.120472][T20406] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 514.166605][T20406] syz.4.5107: attempt to access beyond end of device [ 514.166605][T20406] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 514.199530][T20406] syz.4.5107: attempt to access beyond end of device [ 514.199530][T20406] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 514.266078][T20406] syz.4.5107: attempt to access beyond end of device [ 514.266078][T20406] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 514.279718][T20406] syz.4.5107: attempt to access beyond end of device [ 514.279718][T20406] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 514.296412][T20406] syz.4.5107: attempt to access beyond end of device [ 514.296412][T20406] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 514.311913][T20406] syz.4.5107: attempt to access beyond end of device [ 514.311913][T20406] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 514.327414][T20406] syz.4.5107: attempt to access beyond end of device [ 514.327414][T20406] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 514.341245][T20406] syz.4.5107: attempt to access beyond end of device [ 514.341245][T20406] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 514.356009][T20420] program syz.0.5113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.374972][T20420] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 514.491209][T20432] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.598192][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 514.698332][T20450] loop1: detected capacity change from 0 to 128 [ 514.997963][T20443] loop4: detected capacity change from 0 to 512 [ 515.015437][T20443] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5122: error while reading EA inode 32 err=-116 [ 515.049498][T20443] EXT4-fs (loop4): Remounting filesystem read-only [ 515.071757][T20443] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 515.094672][T20443] EXT4-fs (loop4): 1 orphan inode deleted [ 515.107650][T20443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.132884][T20443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.153831][T20443] netlink: 'syz.4.5122': attribute type 12 has an invalid length. [ 515.214805][T20459] program syz.0.5126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.230800][T20459] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 515.432542][T20473] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 515.594651][T20483] lo speed is unknown, defaulting to 1000 [ 516.207548][T20507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20507 comm=syz.0.5142 [ 516.245766][T20509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 516.386612][T20517] loop1: detected capacity change from 0 to 1024 [ 516.393461][T20517] EXT4-fs: Ignoring removed orlov option [ 516.403173][T20517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.630831][T12535] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 516.770995][T20531] lo speed is unknown, defaulting to 1000 [ 516.771989][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.993814][T20536] loop3: detected capacity change from 0 to 128 [ 517.214609][T20552] loop1: detected capacity change from 0 to 1024 [ 517.238504][T20552] EXT4-fs: Ignoring removed orlov option [ 517.252417][T20554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 517.266893][T20552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.694284][T20570] netlink: 'syz.2.5158': attribute type 5 has an invalid length. [ 517.702078][T20570] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5158'. [ 517.747404][T20570] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5158'. [ 517.771005][ T29] kauditd_printk_skb: 1547 callbacks suppressed [ 517.771021][ T29] audit: type=1326 audit(517.754:19870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 517.811615][T20570] netlink: 'syz.2.5158': attribute type 13 has an invalid length. [ 517.861929][ T29] audit: type=1326 audit(517.754:19871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 517.884931][ T29] audit: type=1326 audit(517.754:19872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 517.907966][ T29] audit: type=1326 audit(517.754:19873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 517.930950][ T29] audit: type=1326 audit(517.754:19874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 517.954001][ T29] audit: type=1326 audit(517.754:19875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 517.977035][ T29] audit: type=1326 audit(517.754:19876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 518.000035][ T29] audit: type=1326 audit(517.764:19877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 518.023034][ T29] audit: type=1326 audit(517.764:19878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 518.046013][ T29] audit: type=1326 audit(517.764:19879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20535 comm="syz.3.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7183bc2005 code=0x7ffc0000 [ 518.069853][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.304941][T20594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 518.441604][T20575] loop4: detected capacity change from 0 to 512 [ 518.480352][T20575] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5160: error while reading EA inode 32 err=-116 [ 518.524781][T20575] EXT4-fs (loop4): Remounting filesystem read-only [ 518.548597][T20575] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 518.584480][T20575] EXT4-fs (loop4): 1 orphan inode deleted [ 518.605477][T20575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.650124][T20575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.762447][T20575] netlink: 'syz.4.5160': attribute type 12 has an invalid length. [ 519.086014][T20609] netlink: 'syz.2.5171': attribute type 5 has an invalid length. [ 519.093908][T20609] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5171'. [ 519.126639][T20609] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5171'. [ 519.161943][T20609] netlink: 'syz.2.5171': attribute type 13 has an invalid length. [ 519.375735][T20628] netlink: 'syz.0.5179': attribute type 39 has an invalid length. [ 519.386884][T20630] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 519.677043][T20618] loop2: detected capacity change from 0 to 512 [ 519.748144][T20618] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5175: error while reading EA inode 32 err=-116 [ 519.789374][T20618] EXT4-fs (loop2): Remounting filesystem read-only [ 519.810706][T20618] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 519.831756][T20618] EXT4-fs (loop2): 1 orphan inode deleted [ 519.848120][T20618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.945033][T20632] netlink: 'syz.0.5182': attribute type 12 has an invalid length. [ 519.984370][T20618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.079581][T20652] netlink: 'syz.1.5186': attribute type 5 has an invalid length. [ 520.087462][T20652] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5186'. [ 520.152723][T20654] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5186'. [ 520.203049][T20652] netlink: 'syz.1.5186': attribute type 13 has an invalid length. [ 520.295321][T20656] lo speed is unknown, defaulting to 1000 [ 521.253319][T20676] team0: Device gtp0 is of different type [ 521.268690][T20678] macvtap0: refused to change device tx_queue_len [ 521.310478][T20682] loop4: detected capacity change from 0 to 128 [ 521.455694][T20682] bio_check_eod: 25053 callbacks suppressed [ 521.455709][T20682] syz.4.5197: attempt to access beyond end of device [ 521.455709][T20682] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 521.478879][T20682] syz.4.5197: attempt to access beyond end of device [ 521.478879][T20682] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 521.493971][T20682] syz.4.5197: attempt to access beyond end of device [ 521.493971][T20682] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 521.507593][T20682] syz.4.5197: attempt to access beyond end of device [ 521.507593][T20682] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 521.523478][T20682] syz.4.5197: attempt to access beyond end of device [ 521.523478][T20682] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 521.524651][T20687] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 521.551323][T20682] syz.4.5197: attempt to access beyond end of device [ 521.551323][T20682] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 521.564862][T20682] syz.4.5197: attempt to access beyond end of device [ 521.564862][T20682] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 521.579672][T20692] netlink: 'syz.3.5198': attribute type 5 has an invalid length. [ 521.587457][T20692] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5198'. [ 521.590810][T20682] syz.4.5197: attempt to access beyond end of device [ 521.590810][T20682] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 521.627849][T20682] syz.4.5197: attempt to access beyond end of device [ 521.627849][T20682] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 521.642040][T20682] syz.4.5197: attempt to access beyond end of device [ 521.642040][T20682] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 521.658364][T20692] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5198'. [ 521.681053][T20692] netlink: 'syz.3.5198': attribute type 13 has an invalid length. [ 521.807225][T20711] macvtap0: refused to change device tx_queue_len [ 522.171425][T20720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 522.518154][T20736] netlink: 'syz.0.5217': attribute type 5 has an invalid length. [ 522.525976][T20736] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5217'. [ 522.536551][T20736] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5217'. [ 522.546625][T20736] netlink: 'syz.0.5217': attribute type 13 has an invalid length. [ 522.683954][T20743] macvtap0: refused to change device tx_queue_len [ 522.693143][T20745] macvtap0: refused to change device tx_queue_len [ 522.792418][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 522.792434][ T29] audit: type=1326 audit(522.774:20101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 522.822090][T20753] loop4: detected capacity change from 0 to 128 [ 522.829906][T20756] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 522.847175][ T29] audit: type=1326 audit(522.774:20102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 522.865232][T20755] lo speed is unknown, defaulting to 1000 [ 522.870194][ T29] audit: type=1326 audit(522.774:20103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 522.898927][ T29] audit: type=1326 audit(522.774:20104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 522.921930][ T29] audit: type=1326 audit(522.774:20105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 522.944905][ T29] audit: type=1326 audit(522.774:20106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 522.967978][ T29] audit: type=1326 audit(522.774:20107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 522.982327][T20757] loop1: detected capacity change from 0 to 1024 [ 522.991053][ T29] audit: type=1326 audit(522.774:20108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7eff34b5f749 code=0x7ffc0000 [ 522.991082][ T29] audit: type=1326 audit(522.774:20109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff34b5f783 code=0x7ffc0000 [ 522.991106][ T29] audit: type=1326 audit(522.774:20110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7eff34b5e1ff code=0x7ffc0000 [ 523.142290][T20757] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 524.018922][T20776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5231'. [ 524.135330][T20777] loop2: detected capacity change from 0 to 2048 [ 524.198706][T20779] macvtap0: refused to change device tx_queue_len [ 524.212809][T20781] macvtap0: refused to change device tx_queue_len [ 524.231491][T20777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.259651][T20776] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.5231: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 524.322727][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.413235][T20800] lo speed is unknown, defaulting to 1000 [ 524.920047][T20817] macvtap0: refused to change device tx_queue_len [ 525.263361][T20831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5249'. [ 525.545113][T20832] veth1_to_bond: entered allmulticast mode [ 525.565510][T20832] veth1_to_bond: left allmulticast mode [ 525.815092][T20852] loop4: detected capacity change from 0 to 128 [ 525.852000][T20834] loop3: detected capacity change from 0 to 512 [ 525.882669][T20834] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5250: error while reading EA inode 32 err=-116 [ 525.991071][T20834] EXT4-fs (loop3): Remounting filesystem read-only [ 526.000814][T20834] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 526.014129][T20834] EXT4-fs (loop3): 1 orphan inode deleted [ 526.020393][T20834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.032962][T20834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.046114][T20840] loop2: detected capacity change from 0 to 512 [ 526.062698][T20840] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5253: error while reading EA inode 32 err=-116 [ 526.090856][T20840] EXT4-fs (loop2): Remounting filesystem read-only [ 526.101511][T20840] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 526.136103][T20840] EXT4-fs (loop2): 1 orphan inode deleted [ 526.168313][T20840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.222997][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.460777][T20852] bio_check_eod: 9571 callbacks suppressed [ 526.460821][T20852] syz.4.5257: attempt to access beyond end of device [ 526.460821][T20852] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 526.523822][T20852] syz.4.5257: attempt to access beyond end of device [ 526.523822][T20852] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 526.554612][T20852] syz.4.5257: attempt to access beyond end of device [ 526.554612][T20852] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 526.591932][T20852] syz.4.5257: attempt to access beyond end of device [ 526.591932][T20852] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 526.615322][T20852] syz.4.5257: attempt to access beyond end of device [ 526.615322][T20852] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 526.634142][T20852] syz.4.5257: attempt to access beyond end of device [ 526.634142][T20852] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 526.651458][T20865] macvtap0: refused to change device tx_queue_len [ 526.662294][T20852] syz.4.5257: attempt to access beyond end of device [ 526.662294][T20852] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 526.714906][T20869] lo speed is unknown, defaulting to 1000 [ 526.981507][T20892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5271'. [ 527.012403][T20894] macvtap0: refused to change device tx_queue_len [ 527.032526][T20892] loop1: detected capacity change from 0 to 2048 [ 527.055434][T20892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.099948][T20892] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.5271: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 527.150333][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.349774][T20914] lo speed is unknown, defaulting to 1000 [ 527.831621][ T29] kauditd_printk_skb: 1024 callbacks suppressed [ 527.831638][ T29] audit: type=1326 audit(527.814:21135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20919 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb57cdf749 code=0x7ffc0000 [ 527.898848][ T29] audit: type=1326 audit(527.844:21136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20919 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffb57cdf749 code=0x7ffc0000 [ 527.951915][ T29] audit: type=1326 audit(527.934:21137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.2.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 527.997233][ T29] audit: type=1326 audit(527.954:21138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.2.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 528.020385][ T29] audit: type=1326 audit(527.954:21139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.2.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 528.043517][ T29] audit: type=1326 audit(527.954:21140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.2.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 528.235470][T20948] lo speed is unknown, defaulting to 1000 [ 528.420165][T20958] netlink: 'syz.1.5293': attribute type 39 has an invalid length. [ 528.596314][T20963] lo speed is unknown, defaulting to 1000 [ 528.772016][ T29] audit: type=1326 audit(528.754:21141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.5296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 528.802278][ T29] audit: type=1326 audit(528.774:21142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.5296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 528.825419][ T29] audit: type=1326 audit(528.774:21143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.5296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 528.848451][ T29] audit: type=1326 audit(528.774:21144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20969 comm="syz.2.5296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435328f749 code=0x7ffc0000 [ 529.531338][T20989] macvtap0: refused to change device tx_queue_len [ 529.602455][T20994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5307'. [ 529.673491][T20994] loop2: detected capacity change from 0 to 2048 [ 529.705429][T20994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.733785][T20994] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.5307: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 529.895751][T12630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.928072][T21021] macvtap0: refused to change device tx_queue_len [ 529.963379][T21025] loop1: detected capacity change from 0 to 1024 [ 529.987028][T21025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.130164][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.363385][T21051] macvtap0: refused to change device tx_queue_len [ 530.503798][T21062] loop1: detected capacity change from 0 to 1024 [ 530.533847][T21062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.699617][T13189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.983777][T21081] macvtap0: refused to change device tx_queue_len [ 531.057496][T21086] macvtap0: refused to change device tx_queue_len [ 531.117520][T21091] lo speed is unknown, defaulting to 1000 [ 531.251200][T21097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21097 comm=syz.4.5346 [ 531.488856][T21114] macvtap0: refused to change device tx_queue_len [ 531.745680][T21122] lo speed is unknown, defaulting to 1000 [ 532.001747][T12535] Bluetooth: hci0: command 0x1003 tx timeout [ 532.007797][ T3598] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 532.168071][T21142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21142 comm=syz.2.5361 [ 532.198847][T21145] macvtap0: refused to change device tx_queue_len [ 532.353430][T21151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21151 comm=syz.3.5366 [ 532.382773][T21153] macvtap0: refused to change device tx_queue_len [ 532.647604][ T851] Bluetooth: hci0: Frame reassembly failed (-84) [ 532.663484][T21159] lo speed is unknown, defaulting to 1000 [ 533.016482][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 533.016498][ T29] audit: type=1326 audit(532.994:22287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.049999][T21166] xt_hashlimit: max too large, truncated to 1048576 [ 533.061488][T21166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 533.077120][ T29] audit: type=1326 audit(533.024:22288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.101187][ T29] audit: type=1326 audit(533.024:22289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.124216][ T29] audit: type=1326 audit(533.024:22290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.148240][ T29] audit: type=1326 audit(533.024:22291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.172179][ T29] audit: type=1326 audit(533.024:22292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.195514][ T29] audit: type=1326 audit(533.024:22293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.219527][ T29] audit: type=1326 audit(533.024:22294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.243662][ T29] audit: type=1326 audit(533.024:22295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.266700][ T29] audit: type=1326 audit(533.024:22296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21165 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc4e1f749 code=0x7ffc0000 [ 533.333833][T21174] macvtap0: refused to change device tx_queue_len [ 533.344985][T21175] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 533.473103][T21179] lo speed is unknown, defaulting to 1000 [ 533.647266][T21187] loop2: detected capacity change from 0 to 128 [ 533.768939][T21187] syz.2.5382: attempt to access beyond end of device [ 533.768939][T21187] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 533.782702][T21187] syz.2.5382: attempt to access beyond end of device [ 533.782702][T21187] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 533.796406][T21187] syz.2.5382: attempt to access beyond end of device [ 533.796406][T21187] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 533.818585][T21194] program syz.1.5383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.840718][T21194] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 533.849294][T21187] syz.2.5382: attempt to access beyond end of device [ 533.849294][T21187] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 533.880737][T21187] syz.2.5382: attempt to access beyond end of device [ 533.880737][T21187] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 533.899620][T21187] syz.2.5382: attempt to access beyond end of device [ 533.899620][T21187] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 533.914115][T21187] syz.2.5382: attempt to access beyond end of device [ 533.914115][T21187] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 533.943759][T21197] loop4: detected capacity change from 0 to 1024 [ 533.958536][T21187] syz.2.5382: attempt to access beyond end of device [ 533.958536][T21187] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 533.981142][T21197] EXT4-fs: Ignoring removed orlov option [ 533.992450][T21197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.007812][T21187] syz.2.5382: attempt to access beyond end of device [ 534.007812][T21187] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 534.066211][T21187] syz.2.5382: attempt to access beyond end of device [ 534.066211][T21187] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 534.187276][T21197] ================================================================== [ 534.195437][T21197] BUG: KCSAN: data-race in filemap_read / filemap_read [ 534.202340][T21197] [ 534.204686][T21197] read to 0xffff88810455ad68 of 8 bytes by task 21203 on cpu 1: [ 534.212335][T21197] filemap_read+0x6f/0xa00 [ 534.216793][T21197] generic_file_read_iter+0x79/0x330 [ 534.222114][T21197] ext4_file_read_iter+0x1cc/0x290 [ 534.227277][T21197] copy_splice_read+0x442/0x660 [ 534.232174][T21197] splice_direct_to_actor+0x290/0x680 [ 534.237576][T21197] do_splice_direct+0xda/0x150 [ 534.242368][T21197] do_sendfile+0x380/0x650 [ 534.246845][T21197] __x64_sys_sendfile64+0x105/0x150 [ 534.252098][T21197] x64_sys_call+0x2db1/0x3000 [ 534.256822][T21197] do_syscall_64+0xca/0x2b0 [ 534.261368][T21197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.267297][T21197] [ 534.269647][T21197] write to 0xffff88810455ad68 of 8 bytes by task 21197 on cpu 0: [ 534.277401][T21197] filemap_read+0x974/0xa00 [ 534.281955][T21197] generic_file_read_iter+0x79/0x330 [ 534.287290][T21197] ext4_file_read_iter+0x1cc/0x290 [ 534.292471][T21197] copy_splice_read+0x442/0x660 [ 534.297369][T21197] splice_direct_to_actor+0x290/0x680 [ 534.302769][T21197] do_splice_direct+0xda/0x150 [ 534.307565][T21197] do_sendfile+0x380/0x650 [ 534.312018][T21197] __x64_sys_sendfile64+0x105/0x150 [ 534.317245][T21197] x64_sys_call+0x2db1/0x3000 [ 534.321965][T21197] do_syscall_64+0xca/0x2b0 [ 534.326534][T21197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.332499][T21197] [ 534.334858][T21197] value changed: 0x0000000000000233 -> 0x0000000000000234 [ 534.341991][T21197] [ 534.344335][T21197] Reported by Kernel Concurrency Sanitizer on: [ 534.350525][T21197] CPU: 0 UID: 0 PID: 21197 Comm: syz.4.5385 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 534.361928][T21197] Tainted: [W]=WARN [ 534.365745][T21197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.375834][T21197] ================================================================== [ 534.429150][T13824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.720715][T12535] Bluetooth: hci0: command 0x1003 tx timeout [ 534.726788][ T3598] Bluetooth: hci0: Opcode 0x1003 failed: -110