last executing test programs: 1m4.897624528s ago: executing program 0 (id=412): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) fallocate(r2, 0x0, 0x0, 0x1001f0) 1m4.555530584s ago: executing program 0 (id=415): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)='$\x00', 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m3.580332258s ago: executing program 0 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x3, 0xfff0}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x9}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0x7, 0x76800, 0xd}]}}]}}]}, 0x74}}, 0x20040054) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@delchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x0, 0xf}}}, 0x24}}, 0x20040010) 1m3.492808929s ago: executing program 0 (id=440): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1m3.40311382s ago: executing program 0 (id=443): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x10004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m2.657608431s ago: executing program 0 (id=463): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000500)={[{@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0xff, 0x247, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x80}, 0x18) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000005d00)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1m2.618596682s ago: executing program 32 (id=463): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000500)={[{@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0xff, 0x247, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x80}, 0x18) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000005d00)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.586595067s ago: executing program 5 (id=1571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0xc51}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 1.524075558s ago: executing program 5 (id=1573): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1.455038029s ago: executing program 5 (id=1576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 1.36927747s ago: executing program 3 (id=1581): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r3, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 1.239634142s ago: executing program 3 (id=1583): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(r0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x1850c2, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x178}, 0x18) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 1.174628633s ago: executing program 5 (id=1596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x8000, 0x32c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 1.107796334s ago: executing program 3 (id=1588): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1.036281905s ago: executing program 5 (id=1590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x109880}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 752.41942ms ago: executing program 5 (id=1598): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0x0, @multicast2}}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) 752.15998ms ago: executing program 4 (id=1599): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 580.385172ms ago: executing program 1 (id=1600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 534.741892ms ago: executing program 4 (id=1611): mknodat(0xffffffffffffffff, 0x0, 0x2, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 499.991743ms ago: executing program 1 (id=1602): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) 499.511413ms ago: executing program 4 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 475.072773ms ago: executing program 1 (id=1605): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom$inet(r0, &(0x7f0000000000)=""/52, 0x34, 0x100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) 455.172634ms ago: executing program 4 (id=1606): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 370.958895ms ago: executing program 1 (id=1607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_open_pts(0xffffffffffffffff, 0x50000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x81, 0x0, 0x2, 0x0, 0x7e150a0b, 0xffff, 0x5, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e982638, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7b, 0x0, 0x0, 0x3, 0x0, 0xd2d1, 0x0, 0x1, 0x4000b2e, 0x52f7, 0x3, 0x0, 0xfffffffe, 0x0, 0xff, 0x1000, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x26, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x3, 0x8, 0x0, 0x14, 0x1e, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x100, 0x7f0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0xff, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x153, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0x101, 0x0, 0x0, 0xffffffff}, 0x9, 0xf, 0x2000000}}]}}]}, 0x45c}}, 0x0) 369.964965ms ago: executing program 4 (id=1608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x20000000) 363.503685ms ago: executing program 2 (id=1609): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) fallocate(0xffffffffffffffff, 0x10, 0x2, 0x807c27) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r0, 0xffffffffffffffff, 0x0) 332.576515ms ago: executing program 1 (id=1610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000371000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000094f000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000273000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 307.405686ms ago: executing program 2 (id=1612): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 304.089776ms ago: executing program 1 (id=1613): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec", 0xe7}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad3125", 0x26}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1", 0xb3}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000c40)="9d", 0x1, 0x4000084, 0x0, 0x0) 288.951406ms ago: executing program 4 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xc26}, 0x1c) 233.557387ms ago: executing program 3 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 120.132689ms ago: executing program 3 (id=1616): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000d40)={[{@fat=@quiet}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x9}}, {@fat=@sys_immutable}, {@dots}, {@fat=@tz_utc}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@dots}]}, 0xfd, 0x1c1, &(0x7f0000000a80)="$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") syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x524, &(0x7f0000000e00)="$eJzs3U9vI2cZAPBnJvEmu5uSFDiUSi0VLcpWsHbS0Dbi0C4S4lYJVO7bKHGiKE4cxU7ZRD2k4gMgIQS9cuKCxAdAQv0IqFIlekeAQAi2cOAADBp7TF0zzh9tbC/J7yeNPfPOzPs87649fudPZgK4tp6LiHsRMRURL0bEfFGeFkOcdId8uY8fvrOeD/mcN/+SRFKURcRCr7687HZnlZunxm0dHe+sNRr1g2K61t7dr7WOju9u765t1bfqeysry6+svrr68urSpbQzb9dr3/zDj3/ws2+99quvfu+39/90Z7p/ftGO80gvEvejzmslZvvK8sAHF6nkMTZVtKcy6UQAADiXvDP72Yj4Uqf/Px9T8d9u8WCXbnb82QEAAACXIXt9Lv6ZRGQAAADAlfV6RMxFklaLawHmIk2r1e41vJ+PW2mj2Wp/ZbN5uLeRz4tYiEq6ud2oLxXX1C5EJcmnl4uLgHvTLw1Mr0TEkxHxo/mbnenqerOxMemDHwAAAHBN3B7Y///7fHf/HwAAALhiFiadAAAAADByw/b/kzHnAQAAAIzOsP3/mTHnAQAAAIzEt994Ix+y2eg+/3rj7aPDnebbdzfqrZ3q7uF6db15sF/daja3Ovfs2z2rvkazuf+12Dt8UGvX7yW11tHx/d3m4V77/rbnBwIAAMCkPPnF9z9KIuLk6zc7Q+7GxlsRU0NWcK8AuDLSiyz8+9HlAYzfsJ954OqbnnQCwOScTDoBYNI+dauPkk5B/8U7af/Cvx5hUgAAwKVa/ELJ+f9iF6Ay6eSAkbrQ+X/gSnH+H66vC57//2BUeQDjV/mkB+BSILimznrUx9Cbd5Sd/79RtmCWnVkXAAAwUnOd1yStFucC5yJNq9WIJzp/6l9JNrcb9aWI+ExE/Ga+MpNPL3fX8XhAAAAAAAAAAAAAAAAAAAAAAAAAADinLEsiAwAAAK60iPSPSfH8r8X5F+YGjw/cSP4xH91HevWeD9g+WM7L/9orj/Z7b/7kwVq7ffDSuI9eAAAAAGV6++md9+VJZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVfPxw3fWi+HGOOP++RsRsfCp+OvdOdMx23mfjUpE3PpbEtN96yURMXUJ8U/ejYinyuIneVqxUGQxGD+NiJvjif9MlmWl8W9fQny4zt7Ptz/3yr5/aTzXeS///k8Xw6Pqbf9mSuL3tn9TQ7Z/T5wzxtMf/qI2NP67EU9Pl29/evGTIfGfL6uw5B/lre8eH/9PYbfyyH4asRjl8ftj1dq7+7XW0fHd7d21rfpWfW9lZfmV1VdXX15dqm1uN+rFa2kbf/jML/89UPSvrKvT/hgSf+GM9r+Qj1T6CrPBMEWwDx88/Fx3tDJQRSf+nefLP39PnRI//0x8ufgdyOcv9sZPuuP9nv35B8+WJlbE3xjS/rP+/+8Mq3TAi9/5/u/OuSgAMAato+OdtUajfjDykfeyLHuUem6NL9VrOdLr3Z2yzMwjhZh9XFr6/zgyExHjC3oZR7YAAIDHzSed/klnAgAAAAAAAAAAAAAAAAAAANdX6yjSUd9ObDDmyWSaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwqv8EAAD//57g0/s=") bpf$MAP_CREATE(0x0, 0x0, 0x48) lstat(&(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) dup3(r0, r1, 0x0) 119.264069ms ago: executing program 3 (id=1617): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x3, 0xef, 0x92, 0x20, 0x557, 0x2021, 0x741a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x89, 0x4, 0x2, 0x8d, 0x80, 0xf7, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0x5}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 116.659538ms ago: executing program 2 (id=1618): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x522, &(0x7f0000000a80)="$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") socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@noblock_validity}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$bind(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x23100b9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x24b, &(0x7f00000010c0)="$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") chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/40, 0x28) getdents(r0, 0xfffffffffffffffd, 0x58) 57.034709ms ago: executing program 2 (id=1619): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) 21.83859ms ago: executing program 2 (id=1620): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 0s ago: executing program 2 (id=1621): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.2.727'. [ 73.268195][ T5533] loop5: detected capacity change from 0 to 2048 [ 73.287263][ T5533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 73.436973][ T5540] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.454510][ T5540] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 694 with error 28 [ 73.467056][ T5540] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.467056][ T5540] [ 73.476870][ T5540] EXT4-fs (loop5): Total free blocks count 0 [ 73.482936][ T5540] EXT4-fs (loop5): Free/Dirty block details [ 73.489036][ T5540] EXT4-fs (loop5): free_blocks=2415919104 [ 73.494807][ T5540] EXT4-fs (loop5): dirty_blocks=704 [ 73.500032][ T5540] EXT4-fs (loop5): Block reservation details [ 73.506075][ T5540] EXT4-fs (loop5): i_reserved_data_blocks=44 [ 73.584152][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 73.605010][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.632232][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 73.666117][ T5549] bridge0: entered promiscuous mode [ 73.682384][ T5549] bridge0: port 3(macvlan2) entered blocking state [ 73.689058][ T5549] bridge0: port 3(macvlan2) entered disabled state [ 73.707574][ T5549] macvlan2: entered allmulticast mode [ 73.713054][ T5549] bridge0: entered allmulticast mode [ 73.719253][ T5549] macvlan2: left allmulticast mode [ 73.724495][ T5549] bridge0: left allmulticast mode [ 73.730812][ T5549] bridge0: left promiscuous mode [ 73.915950][ T5557] xt_hashlimit: size too large, truncated to 1048576 [ 74.027744][ T5561] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.037773][ T5561] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.229774][ T5561] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.239637][ T5561] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.316309][ T5561] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.325889][ T5577] loop5: detected capacity change from 0 to 2048 [ 74.326162][ T5561] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.385203][ T5577] Alternate GPT is invalid, using primary GPT. [ 74.391699][ T5577] loop5: p1 p2 p3 [ 74.435861][ T5561] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.445828][ T5561] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.539072][ T5561] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.547467][ T5561] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.564208][ T5561] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.572568][ T5561] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.586069][ T5561] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.594376][ T5561] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.608059][ T5561] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.616551][ T5561] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.994862][ T5590] loop3: detected capacity change from 0 to 2048 [ 75.010550][ T5592] loop4: detected capacity change from 0 to 1024 [ 75.019903][ T5590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 75.042810][ T5592] EXT4-fs: Ignoring removed nobh option [ 75.048520][ T5592] EXT4-fs: Ignoring removed bh option [ 75.067777][ T5592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.119091][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.148041][ T5599] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.172736][ T5599] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 828 with error 28 [ 75.185317][ T5599] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.185317][ T5599] [ 75.188067][ T5602] loop4: detected capacity change from 0 to 512 [ 75.195025][ T5599] EXT4-fs (loop3): Total free blocks count 0 [ 75.195045][ T5599] EXT4-fs (loop3): Free/Dirty block details [ 75.195059][ T5599] EXT4-fs (loop3): free_blocks=2415919104 [ 75.195072][ T5599] EXT4-fs (loop3): dirty_blocks=832 [ 75.195084][ T5599] EXT4-fs (loop3): Block reservation details [ 75.195094][ T5599] EXT4-fs (loop3): i_reserved_data_blocks=52 [ 75.309777][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 75.345231][ T5602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.375817][ T5602] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.534112][ T5602] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 75.584834][ T5618] bond0: entered promiscuous mode [ 75.585878][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.590006][ T5618] bond_slave_0: entered promiscuous mode [ 75.604884][ T5618] bond_slave_1: entered promiscuous mode [ 75.697004][ T5630] loop5: detected capacity change from 0 to 128 [ 75.752874][ T5630] syz.5.761: attempt to access beyond end of device [ 75.752874][ T5630] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 75.768302][ T5630] syz.5.761: attempt to access beyond end of device [ 75.768302][ T5630] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 75.814782][ T5637] loop3: detected capacity change from 0 to 2048 [ 75.827053][ T5637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 75.850599][ T37] kworker/u8:2: attempt to access beyond end of device [ 75.850599][ T37] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 75.952212][ T5643] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.967528][ T5643] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1612 with error 28 [ 75.980097][ T5643] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.980097][ T5643] [ 75.989993][ T5643] EXT4-fs (loop3): Total free blocks count 0 [ 75.996275][ T5643] EXT4-fs (loop3): Free/Dirty block details [ 76.002188][ T5643] EXT4-fs (loop3): free_blocks=2415919104 [ 76.007995][ T5643] EXT4-fs (loop3): dirty_blocks=1616 [ 76.013285][ T5643] EXT4-fs (loop3): Block reservation details [ 76.019316][ T5643] EXT4-fs (loop3): i_reserved_data_blocks=101 [ 76.079762][ T3530] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 76.689981][ T5663] loop5: detected capacity change from 0 to 512 [ 76.716374][ T5663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.729419][ T5663] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.757386][ T5663] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.802436][ T4776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.844768][ T5673] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 76.851351][ T5673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.858997][ T5673] vhci_hcd vhci_hcd.0: Device attached [ 76.878786][ T5673] loop2: detected capacity change from 0 to 512 [ 76.891492][ T5673] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.777: corrupted in-inode xattr: invalid ea_ino [ 76.903094][ T5681] loop1: detected capacity change from 0 to 2048 [ 76.913094][ T5673] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.777: couldn't read orphan inode 15 (err -117) [ 76.926880][ T5673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.949720][ T5681] Alternate GPT is invalid, using primary GPT. [ 76.956251][ T5681] loop1: p1 p2 p3 [ 77.032572][ T5685] xt_hashlimit: size too large, truncated to 1048576 [ 77.044470][ T10] vhci_hcd: vhci_device speed not set [ 77.061952][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.780'. [ 77.105009][ T10] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 77.221461][ T5674] vhci_hcd: connection reset by peer [ 77.233146][ T31] vhci_hcd: stop threads [ 77.237559][ T31] vhci_hcd: release socket [ 77.242000][ T31] vhci_hcd: disconnect device [ 77.349767][ T5685] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.359761][ T5685] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.397209][ T5685] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.407156][ T5685] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.466184][ T5685] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.476097][ T5685] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.503240][ T5699] syz_tun: entered promiscuous mode [ 77.509953][ T5699] vlan0: entered promiscuous mode [ 77.588713][ T5685] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.598638][ T5685] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.688241][ T5685] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.696644][ T5685] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.707448][ T5707] loop3: detected capacity change from 0 to 512 [ 77.716385][ T5707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.729351][ T5685] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.730268][ T5705] sd 0:0:1:0: device reset [ 77.737735][ T5685] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.743629][ T5685] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.758858][ T5685] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.773225][ T5707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.788795][ T5685] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.791279][ T5707] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.797336][ T5685] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.818836][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.848664][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.990307][ T5717] xt_hashlimit: size too large, truncated to 1048576 [ 78.018591][ T5719] loop3: detected capacity change from 0 to 1024 [ 78.036536][ T5719] EXT4-fs: Ignoring removed nobh option [ 78.042220][ T5719] EXT4-fs: Ignoring removed bh option [ 78.054563][ T1038] usb 7-1: enqueue for inactive port 0 [ 78.079907][ T1038] usb 7-1: enqueue for inactive port 0 [ 78.164792][ T1038] vhci_hcd: vhci_device speed not set [ 78.181730][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.793'. [ 78.259144][ T5719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.343616][ T5736] syz_tun: entered promiscuous mode [ 78.353311][ T5737] loop1: detected capacity change from 0 to 764 [ 78.364515][ T5736] vlan2: entered promiscuous mode [ 78.382305][ T5737] iso9660: Unknown parameter 'igmo5U҅F6' [ 78.406125][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.484652][ T5741] loop3: detected capacity change from 0 to 128 [ 78.571330][ T5745] loop4: detected capacity change from 0 to 512 [ 78.579009][ T5746] syz.3.801: attempt to access beyond end of device [ 78.579009][ T5746] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 78.606033][ T5746] syz.3.801: attempt to access beyond end of device [ 78.606033][ T5746] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 78.623740][ T5751] loop2: detected capacity change from 0 to 512 [ 78.651991][ T5751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.664713][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.806'. [ 78.677831][ T5745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.698746][ T5754] 8021q: adding VLAN 0 to HW filter on device team1 [ 78.706882][ T5745] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.719718][ T5751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.735416][ T5751] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.782861][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.911782][ T12] kworker/u8:0: attempt to access beyond end of device [ 78.911782][ T12] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 78.932787][ T5765] loop1: detected capacity change from 0 to 1024 [ 78.949848][ T5765] EXT4-fs: Ignoring removed bh option [ 78.955471][ T5765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.976943][ T5765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.997740][ T5770] netlink: 76 bytes leftover after parsing attributes in process `syz.5.809'. [ 79.009612][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.033239][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 79.075829][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.135845][ T5780] syz_tun: entered promiscuous mode [ 79.141265][ T5780] vlan2: entered promiscuous mode [ 79.210001][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 79.210956][ T5786] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ffff:ffff [ 79.227037][ T5786] tipc: Enabled bearer , priority 10 [ 79.234558][ T5785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.814'. [ 79.253307][ T5785] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.261761][ T5785] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.270009][ T5785] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.278445][ T5785] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.315986][ T5791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5791 comm=syz.2.820 [ 79.329434][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 79.331985][ T5793] loop4: detected capacity change from 0 to 128 [ 79.363232][ T5791] vlan2: entered allmulticast mode [ 79.368680][ T5791] bond0: entered allmulticast mode [ 79.408241][ T5793] syz.4.821: attempt to access beyond end of device [ 79.408241][ T5793] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 79.422081][ T5793] syz.4.821: attempt to access beyond end of device [ 79.422081][ T5793] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 79.459669][ T5800] loop2: detected capacity change from 0 to 512 [ 79.477614][ T5800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.490746][ T5800] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.516121][ T3532] kworker/u8:25: attempt to access beyond end of device [ 79.516121][ T3532] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 79.672055][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.909828][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 79.960725][ T5822] loop3: detected capacity change from 0 to 1024 [ 79.972363][ T5822] EXT4-fs: Ignoring removed bh option [ 79.977958][ T5822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.995371][ T5822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.040885][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.056987][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 80.057005][ T29] audit: type=1326 audit(1748847212.493:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.1.831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effc8d7e969 code=0x0 [ 80.102124][ T5829] syz_tun: entered promiscuous mode [ 80.109275][ T5829] vlan0: entered promiscuous mode [ 80.186432][ T5834] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.205616][ T5836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.832'. [ 80.223384][ T5837] loop5: detected capacity change from 0 to 1024 [ 80.228303][ T5836] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.238096][ T5836] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.240350][ T5837] EXT4-fs: Ignoring removed nobh option [ 80.246403][ T5836] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.251981][ T5837] EXT4-fs: Ignoring removed nobh option [ 80.266037][ T5836] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.271870][ T5837] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 80.287803][ T5834] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.314926][ T5837] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: comm syz.5.829: inode #4294967295: comm syz.5.829: iget: illegal inode # [ 80.330150][ T5837] EXT4-fs (loop5): no journal found [ 80.335449][ T5837] EXT4-fs (loop5): can't get journal size [ 80.341873][ T5834] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.351858][ T9] tipc: Node number set to 4143826336 [ 80.377704][ T5837] EXT4-fs (loop5): failed to initialize system zone (-22) [ 80.404491][ T5837] EXT4-fs (loop5): mount failed [ 80.445995][ T5834] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.458954][ T5845] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 80.465665][ T5845] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.473453][ T5845] vhci_hcd vhci_hcd.0: Device attached [ 80.485188][ T5845] loop4: detected capacity change from 0 to 512 [ 80.493250][ T5845] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.834: corrupted in-inode xattr: invalid ea_ino [ 80.514768][ T5845] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.834: couldn't read orphan inode 15 (err -117) [ 80.529163][ T5845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.592201][ T5834] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.617093][ T5834] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.651946][ T5834] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.660330][ T9] vhci_hcd: vhci_device speed not set [ 80.687020][ T5834] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.727889][ T9] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 80.764488][ T5846] vhci_hcd: connection reset by peer [ 80.770314][ T12] vhci_hcd: stop threads [ 80.774665][ T12] vhci_hcd: release socket [ 80.779112][ T12] vhci_hcd: disconnect device [ 80.840495][ T5858] bridge: RTM_NEWNEIGH with invalid ether address [ 81.301825][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.329519][ T5861] loop1: detected capacity change from 0 to 2048 [ 81.343248][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 81.347282][ T5861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.426089][ T5876] loop5: detected capacity change from 0 to 512 [ 81.428174][ T5873] loop4: detected capacity change from 0 to 1024 [ 81.439963][ T5873] EXT4-fs: Ignoring removed bh option [ 81.445497][ T5873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.455381][ T5876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.469147][ T5876] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.490318][ T5873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.525525][ T5859] IPVS: starting estimator thread 0... [ 81.546048][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.572458][ T29] audit: type=1326 audit(1748847214.003:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 81.598643][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 81.631539][ T29] audit: type=1326 audit(1748847214.033:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b5dce969 code=0x7ffc0000 [ 81.646745][ T5892] loop2: detected capacity change from 0 to 128 [ 81.655131][ T29] audit: type=1326 audit(1748847214.033:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b5dce969 code=0x7ffc0000 [ 81.684629][ T29] audit: type=1326 audit(1748847214.033:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7b5dce969 code=0x7ffc0000 [ 81.708084][ T29] audit: type=1326 audit(1748847214.033:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b5dce969 code=0x7ffc0000 [ 81.731471][ T29] audit: type=1326 audit(1748847214.033:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b5dce969 code=0x7ffc0000 [ 81.735044][ T5883] IPVS: using max 1968 ests per chain, 98400 per kthread [ 81.754883][ T29] audit: type=1326 audit(1748847214.033:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7b5dce969 code=0x7ffc0000 [ 81.785310][ T29] audit: type=1326 audit(1748847214.033:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b5dce969 code=0x7ffc0000 [ 81.808820][ T29] audit: type=1326 audit(1748847214.033:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b5dce969 code=0x7ffc0000 [ 81.842995][ T5892] syz.2.850: attempt to access beyond end of device [ 81.842995][ T5892] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 81.899472][ T5892] syz.2.850: attempt to access beyond end of device [ 81.899472][ T5892] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 82.002759][ T4776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.044630][ T31] kworker/u8:1: attempt to access beyond end of device [ 82.044630][ T31] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 82.075618][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 82.091436][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 82.104074][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 82.104074][ T12] [ 82.113927][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 82.119962][ T12] EXT4-fs (loop1): Free/Dirty block details [ 82.125933][ T12] EXT4-fs (loop1): free_blocks=2415919504 [ 82.131695][ T12] EXT4-fs (loop1): dirty_blocks=16400 [ 82.137124][ T12] EXT4-fs (loop1): Block reservation details [ 82.138693][ T10] usb 5-1: enqueue for inactive port 0 [ 82.143175][ T12] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 82.157982][ T10] usb 5-1: enqueue for inactive port 0 [ 82.185083][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 82.225611][ T10] vhci_hcd: vhci_device speed not set [ 82.431201][ T5929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5929 comm=syz.1.858 [ 82.462697][ T5929] vlan0: entered allmulticast mode [ 82.467966][ T5929] bond0: entered allmulticast mode [ 83.067569][ T5933] loop3: detected capacity change from 0 to 512 [ 83.076695][ T5937] loop1: detected capacity change from 0 to 128 [ 83.085781][ T5939] xt_hashlimit: size too large, truncated to 1048576 [ 83.177290][ T5937] syz.1.871: attempt to access beyond end of device [ 83.177290][ T5937] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 83.192360][ T5944] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.217397][ T5933] EXT4-fs (loop3): 1 orphan inode deleted [ 83.223711][ T5933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.236478][ T3561] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:54: Failed to release dquot type 1 [ 83.246689][ T5933] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.300523][ T3318] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /164/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.324039][ T5944] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.325141][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.352886][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.364825][ T3318] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /164/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.386161][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.405746][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.406979][ T5944] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.417701][ T3318] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /164/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.448383][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.467329][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.478971][ T3318] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /164/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.500093][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.518869][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.519718][ T5944] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.531827][ T3318] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /164/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.561588][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.573504][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.585616][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.598696][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.610810][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.616380][ T5944] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624042][ T3318] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 83.634340][ T5944] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.655336][ T5944] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.668521][ T5944] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.750178][ T5954] loop5: detected capacity change from 0 to 1024 [ 83.760568][ T5954] EXT4-fs: Ignoring removed bh option [ 83.766141][ T5954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.778535][ T5954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.856058][ T4776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.912947][ T5964] loop4: detected capacity change from 0 to 512 [ 83.936536][ T5964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.946948][ T5964] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 83.966604][ T5964] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.868: invalid block [ 83.998079][ T5964] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.868: invalid indirect mapped block 4294967295 (level 1) [ 84.041268][ T5964] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.868: invalid indirect mapped block 4294967295 (level 1) [ 84.056656][ T3510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.094884][ T5964] EXT4-fs (loop4): 2 truncates cleaned up [ 84.101210][ T5964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.113943][ T5967] loop5: detected capacity change from 0 to 2048 [ 84.127235][ T5967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.166471][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.196337][ T5971] loop1: detected capacity change from 0 to 2048 [ 84.239365][ T5971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.426556][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.715367][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 84.746703][ T5998] loop2: detected capacity change from 0 to 164 [ 84.793912][ T6003] loop2: detected capacity change from 0 to 512 [ 84.800966][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.808204][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.817538][ T5982] bridge_slave_0: entered allmulticast mode [ 84.824280][ T5982] bridge_slave_0: entered promiscuous mode [ 84.831426][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.838527][ T6003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.838601][ T6003] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.851239][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.868890][ T5982] bridge_slave_1: entered allmulticast mode [ 84.875627][ T5982] bridge_slave_1: entered promiscuous mode [ 84.876424][ T31] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 84.897246][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 84.909875][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.909875][ T31] [ 84.919578][ T31] EXT4-fs (loop5): Total free blocks count 0 [ 84.925632][ T31] EXT4-fs (loop5): Free/Dirty block details [ 84.931548][ T31] EXT4-fs (loop5): free_blocks=2415919504 [ 84.937333][ T31] EXT4-fs (loop5): dirty_blocks=16400 [ 84.942724][ T31] EXT4-fs (loop5): Block reservation details [ 84.948747][ T31] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 84.957839][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.968757][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.976617][ T3561] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 84.984579][ T6003] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.006361][ T5982] team0: Port device team_slave_0 added [ 85.022071][ T5982] team0: Port device team_slave_1 added [ 85.052716][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.059823][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.085883][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.110442][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.117526][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.143617][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.153208][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 85.153229][ T29] audit: type=1326 audit(1748847217.583:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.183778][ T29] audit: type=1326 audit(1748847217.583:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.207113][ T29] audit: type=1326 audit(1748847217.583:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.230560][ T29] audit: type=1326 audit(1748847217.583:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.253946][ T29] audit: type=1326 audit(1748847217.583:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.277279][ T29] audit: type=1326 audit(1748847217.583:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.300930][ T29] audit: type=1326 audit(1748847217.583:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.324373][ T29] audit: type=1326 audit(1748847217.583:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.347829][ T29] audit: type=1326 audit(1748847217.583:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.371209][ T29] audit: type=1326 audit(1748847217.583:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 85.402814][ T5982] hsr_slave_0: entered promiscuous mode [ 85.409201][ T5982] hsr_slave_1: entered promiscuous mode [ 85.468074][ T5982] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.477980][ T5982] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.516203][ T5982] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.526027][ T5982] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.595809][ T5982] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.605663][ T5982] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.667130][ T5982] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.677056][ T5982] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.731823][ T5982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.741423][ T5982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.750601][ T5982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.759695][ T5982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.796504][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.809366][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.816209][ T9] usb 9-1: enqueue for inactive port 0 [ 85.821927][ T9] usb 9-1: enqueue for inactive port 0 [ 85.825990][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.834637][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.843830][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.850982][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.904932][ T9] vhci_hcd: vhci_device speed not set [ 85.917675][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.984290][ T5982] veth0_vlan: entered promiscuous mode [ 85.992497][ T5982] veth1_vlan: entered promiscuous mode [ 86.008258][ T5982] veth0_macvtap: entered promiscuous mode [ 86.016328][ T5982] veth1_macvtap: entered promiscuous mode [ 86.027656][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.039403][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.049341][ T5982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.058103][ T5982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.067034][ T5982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.075780][ T5982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.131519][ T6029] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 86.139701][ T6026] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 86.147488][ T6026] netlink: 'syz.4.896': attribute type 2 has an invalid length. [ 86.147509][ T6029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.181124][ T6026] __nla_validate_parse: 1 callbacks suppressed [ 86.181197][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 86.211455][ T6029] bond3: (slave veth5): Enslaving as an active interface with a down link [ 86.220992][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.896'. [ 86.230068][ T6026] netem: change failed [ 86.279087][ T6036] loop3: detected capacity change from 0 to 512 [ 86.297251][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.898'. [ 86.317478][ T6029] vlan0: entered allmulticast mode [ 86.322665][ T6029] bond3: entered allmulticast mode [ 86.330433][ T6036] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.341749][ T6029] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 86.427605][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 86.454258][ T6043] tipc: Cannot configure node identity twice [ 86.881149][ T6070] loop2: detected capacity change from 0 to 1024 [ 86.918385][ T6070] EXT4-fs: Ignoring removed nobh option [ 86.924216][ T6070] EXT4-fs: Ignoring removed nobh option [ 86.941223][ T6077] loop4: detected capacity change from 0 to 256 [ 86.963133][ T6070] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 87.004201][ T6070] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.890: inode #4294967295: comm syz.2.890: iget: illegal inode # [ 87.075731][ T6070] EXT4-fs (loop2): no journal found [ 87.081075][ T6070] EXT4-fs (loop2): can't get journal size [ 87.110224][ T6070] EXT4-fs (loop2): failed to initialize system zone (-22) [ 87.131573][ T6070] EXT4-fs (loop2): mount failed [ 87.218524][ T6090] loop4: detected capacity change from 0 to 512 [ 87.278919][ T6090] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.332233][ T6090] EXT4-fs (loop4): 1 truncate cleaned up [ 87.851410][ T5859] Process accounting resumed [ 87.950997][ T6119] loop4: detected capacity change from 0 to 512 [ 87.977506][ T6119] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.992130][ T6121] netlink: 92 bytes leftover after parsing attributes in process `syz.5.920'. [ 88.001140][ T6121] netem: unknown loss type 0 [ 88.005882][ T6121] netem: change failed [ 88.036595][ T6119] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.095129][ T6128] SELinux: ebitmap: truncated map [ 88.101098][ T6128] SELinux: failed to load policy [ 88.111634][ T6132] loop1: detected capacity change from 0 to 512 [ 88.137875][ T6132] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.234171][ T6130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.518487][ T6153] serio: Serial port ptm0 [ 88.842134][ T6193] loop4: detected capacity change from 0 to 2048 [ 88.849395][ T6193] EXT4-fs: Ignoring removed i_version option [ 88.867779][ T6193] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.884191][ T6193] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.952: bg 0: block 345: padding at end of block bitmap is not set [ 88.899385][ T6193] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 88.911991][ T6193] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.911991][ T6193] [ 88.954158][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 89.444092][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.960'. [ 90.298316][ T6130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.392425][ T6240] loop4: detected capacity change from 0 to 1024 [ 90.401945][ T6130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.413391][ T5859] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.422795][ T6240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.436152][ T5859] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.450841][ T6240] EXT4-fs: Mount option(s) incompatible with ext2 [ 90.481958][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 90.481977][ T29] audit: type=1400 audit(1748847222.913:1734): avc: denied { write } for pid=6239 comm="syz.4.969" name="hidraw0" dev="devtmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.516067][ T6130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.612408][ T6130] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.630633][ T6130] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.643743][ T6130] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.662343][ T6244] loop4: detected capacity change from 0 to 1024 [ 90.672304][ T6130] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.703762][ T29] audit: type=1400 audit(1748847223.133:1735): avc: denied { append } for pid=6245 comm="syz.2.972" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.797475][ T29] audit: type=1400 audit(1748847223.223:1736): avc: denied { name_bind } for pid=6249 comm="syz.3.974" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 90.938863][ T6257] loop3: detected capacity change from 0 to 512 [ 90.965946][ T6257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.005900][ T6257] EXT4-fs (loop3): 1 truncate cleaned up [ 91.010286][ T29] audit: type=1400 audit(1748847223.443:1737): avc: denied { ioctl } for pid=6258 comm="syz.1.976" path="socket:[14286]" dev="sockfs" ino=14286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.934187][ T5982] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 91.945235][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: syz-executor Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 91.945297][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.945318][ T5982] Call Trace: [ 91.945325][ T5982] [ 91.945334][ T5982] __dump_stack+0x1d/0x30 [ 91.945355][ T5982] dump_stack_lvl+0xe8/0x140 [ 91.945375][ T5982] dump_stack+0x15/0x1b [ 91.945392][ T5982] dump_header+0x81/0x220 [ 91.945493][ T5982] oom_kill_process+0x334/0x3f0 [ 91.945536][ T5982] out_of_memory+0x979/0xb80 [ 91.945584][ T5982] try_charge_memcg+0x5e6/0x9e0 [ 91.945692][ T5982] charge_memcg+0x51/0xc0 [ 91.945717][ T5982] __mem_cgroup_charge+0x28/0xb0 [ 91.945744][ T5982] filemap_add_folio+0x4e/0x1b0 [ 91.945811][ T5982] __filemap_get_folio+0x31e/0x650 [ 91.945834][ T5982] filemap_fault+0x41d/0xb40 [ 91.945865][ T5982] __do_fault+0xb9/0x200 [ 91.945897][ T5982] handle_mm_fault+0xf78/0x2be0 [ 91.946006][ T5982] ? mas_walk+0xf2/0x120 [ 91.946139][ T5982] do_user_addr_fault+0x636/0x1090 [ 91.946176][ T5982] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.946207][ T5982] exc_page_fault+0x62/0xa0 [ 91.946239][ T5982] asm_exc_page_fault+0x26/0x30 [ 91.946303][ T5982] RIP: 0033:0x7ff668b65994 [ 91.946327][ T5982] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 08 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 fd e7 00 48 01 d1 [ 91.946350][ T5982] RSP: 002b:00007ffec0e9e0d0 EFLAGS: 00010206 [ 91.946370][ T5982] RAX: 0000001b31620000 RBX: 0000000000000014 RCX: 0000000000016378 [ 91.946386][ T5982] RDX: 000000000d8bb8fa RSI: 00007ffec0e9e160 RDI: 0000000000000001 [ 91.946454][ T5982] RBP: 00007ffec0e9e10c R08: 0000000033ac4fd2 R09: 7fffffffffffffff [ 91.946470][ T5982] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 91.946534][ T5982] R13: 00000000000927c0 R14: 00000000000165fc R15: 00007ffec0e9e160 [ 91.946557][ T5982] [ 91.946596][ T5982] memory: usage 307200kB, limit 307200kB, failcnt 1905 [ 92.145703][ T5982] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 92.153694][ T5982] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 92.161061][ T5982] Memory cgroup stats for /syz3: [ 92.196638][ T5982] cache 8192 [ 92.204908][ T5982] rss 4096 [ 92.207964][ T5982] shmem 0 [ 92.211010][ T5982] mapped_file 0 [ 92.214581][ T5982] dirty 0 [ 92.217542][ T5982] writeback 0 [ 92.220851][ T5982] workingset_refault_anon 345 [ 92.225691][ T5982] workingset_refault_file 463 [ 92.230396][ T5982] swap 471040 [ 92.233682][ T5982] swapcached 4096 [ 92.237350][ T5982] nr_memmap_boot_pages 62913 [ 92.241966][ T5982] pgpgin 62910 [ 92.245396][ T5982] pglazyfree 62199 [ 92.249186][ T5982] pgfault 185 [ 92.252526][ T5982] a_other 4096 [ 92.256012][ T5982] inactive_anon 0 [ 92.259662][ T5982] active_anon 8192 [ 92.263430][ T5982] inactive_file 0 [ 92.267139][ T29] audit: type=1400 audit(1748847224.623:1738): avc: denied { connect } for pid=6276 comm="syz.2.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.286785][ T5982] active_file 0 [ 92.290267][ T5982] hierarchical_memory_limit 314572800 [ 92.295801][ T5982] hierarchical_memsw_limit 9223372036854771712 [ 92.301989][ T5982] total_cache 8192 [ 92.305759][ T5982] total_rss 4096 [ 92.309431][ T5982] total_shmem 0 [ 92.312970][ T5982] total_mapped_file 0 [ 92.316997][ T5982] total_dirty 0 [ 92.320565][ T5982] total_writeback 0 [ 92.324528][ T5982] total_workingset_refault_anon 345 [ 92.329745][ T5982] total_workingset_refault_file 463 [ 92.335059][ T5982] total_swap 471040 [ 92.338882][ T5982] total_swapcached 4096 [ 92.343052][ T5982] total_nr_memmap_boot_pages 62913 [ 92.348302][ T5982] total_pgpgin 62910 [ 92.352267][ T5982] total_pglazyfree 62199 [ 92.356770][ T5982] total_pgfault 185 [ 92.360721][ T5982] total_a_other 4096 [ 92.364650][ T5982] total_inactive_anon 0 [ 92.368888][ T5982] total_active_anon 8192 [ 92.373208][ T5982] total_inactive_file 0 [ 92.377451][ T5982] total_active_file 0 [ 92.381455][ T5982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.975,pid=6256,uid=0 [ 92.396114][ T5982] Memory cgroup out of memory: Killed process 6256 (syz.3.975) total-vm:93880kB, anon-rss:936kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 92.441806][ T29] audit: type=1400 audit(1748847224.873:1739): avc: denied { execute } for pid=6278 comm="syz.2.983" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.485264][ T6282] loop4: detected capacity change from 0 to 128 [ 92.486330][ T29] audit: type=1400 audit(1748847224.873:1740): avc: denied { execute_no_trans } for pid=6278 comm="syz.2.983" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.541545][ T6282] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.595305][ T3561] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.716852][ T6295] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 92.768004][ T6297] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 92.875700][ T29] audit: type=1326 audit(1748847225.313:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 92.947604][ T29] audit: type=1326 audit(1748847225.323:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 92.971250][ T29] audit: type=1326 audit(1748847225.323:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64573e969 code=0x7ffc0000 [ 93.000569][ T6305] loop2: detected capacity change from 0 to 512 [ 93.007906][ T6305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.019714][ T6305] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 393220)! [ 93.030337][ T6305] EXT4-fs (loop2): group descriptors corrupted! [ 93.083418][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 93.101510][ T6311] netlink: 44 bytes leftover after parsing attributes in process `syz.5.998'. [ 93.392230][ T6341] loop5: detected capacity change from 0 to 512 [ 93.405089][ T6341] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.424811][ T6341] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 393220)! [ 93.435418][ T6341] EXT4-fs (loop5): group descriptors corrupted! [ 93.536523][ T6348] loop5: detected capacity change from 0 to 256 [ 93.960033][ T6352] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 93.985511][ T6352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.011470][ T6352] bond2: (slave veth5): Enslaving as an active interface with a down link [ 94.031473][ T6352] vlan2: entered allmulticast mode [ 94.036704][ T6352] bond2: entered allmulticast mode [ 94.043283][ T6352] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 94.303030][ T6364] loop2: detected capacity change from 0 to 512 [ 94.334217][ T6364] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.340794][ T6364] EXT4-fs: Ignoring removed bh option [ 94.365960][ T6364] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.391930][ T6364] EXT4-fs (loop2): 1 truncate cleaned up [ 94.405465][ T6348] bio_check_eod: 2 callbacks suppressed [ 94.405481][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.405481][ T6348] loop5: rw=2049, sector=288, nr_sectors = 32 limit=256 [ 94.430882][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.446252][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.456526][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.456526][ T6348] loop5: rw=2049, sector=352, nr_sectors = 32 limit=256 [ 94.470737][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.470737][ T6348] loop5: rw=2049, sector=416, nr_sectors = 32 limit=256 [ 94.515212][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.515212][ T6348] loop5: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 94.529030][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.529030][ T6348] loop5: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 94.547256][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.547256][ T6348] loop5: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 94.560961][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.560961][ T6348] loop5: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 94.576217][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.576217][ T6348] loop5: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 94.590016][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.590016][ T6348] loop5: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 94.605235][ T6348] syz.5.1013: attempt to access beyond end of device [ 94.605235][ T6348] loop5: rw=2049, sector=960, nr_sectors = 32 limit=256 [ 94.679256][ T6382] block device autoloading is deprecated and will be removed. [ 94.848972][ T6396] loop4: detected capacity change from 0 to 1024 [ 94.860770][ T6398] loop5: detected capacity change from 0 to 512 [ 94.869529][ T6396] EXT4-fs: Ignoring removed bh option [ 94.893687][ T6398] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.962402][ T6412] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 94.968985][ T6412] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 94.976854][ T6412] vhci_hcd vhci_hcd.0: Device attached [ 94.985766][ T6413] vhci_hcd: connection closed [ 94.986385][ T3532] vhci_hcd: stop threads [ 94.995478][ T3532] vhci_hcd: release socket [ 94.999915][ T3532] vhci_hcd: disconnect device [ 95.065203][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 95.072695][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.080148][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.087641][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.095548][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.103466][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.110960][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 95.118519][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.125994][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.133462][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.140945][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 95.148892][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.156477][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.163889][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 95.171366][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.178824][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.186270][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 95.193692][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.201199][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.208737][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.216262][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.223754][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.231187][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.238659][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.246121][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.253595][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.261346][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.269006][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.276532][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.284178][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.291705][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.299163][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.306672][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.314154][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.321714][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.329233][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.336705][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.344117][ T5859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.354374][ T5859] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 95.560865][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 95.574307][ T6444] loop5: detected capacity change from 0 to 512 [ 95.584990][ T6444] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1059: bad orphan inode 15 [ 95.638970][ T6444] ext4_test_bit(bit=14, block=18) = 1 [ 95.644486][ T6444] is_bad_inode(inode)=0 [ 95.648667][ T6444] NEXT_ORPHAN(inode)=1023 [ 95.653029][ T6444] max_ino=32 [ 95.656298][ T6444] i_nlink=0 [ 95.680300][ T6444] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.1059: corrupted xattr block 19: invalid header [ 95.728066][ T6444] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 95.757979][ T6444] ext4 filesystem being mounted at /114/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 95.798392][ T6454] loop4: detected capacity change from 0 to 512 [ 95.810393][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1059'. [ 95.822817][ T6452] loop3: detected capacity change from 0 to 512 [ 95.833441][ T6452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.856889][ T6454] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.911764][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 95.911783][ T29] audit: type=1400 audit(1748847228.343:1793): avc: denied { write } for pid=6457 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 95.954483][ T29] audit: type=1326 audit(1748847228.373:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 95.978037][ T29] audit: type=1326 audit(1748847228.373:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 96.001552][ T29] audit: type=1326 audit(1748847228.373:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 96.025062][ T29] audit: type=1326 audit(1748847228.373:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 96.048678][ T29] audit: type=1326 audit(1748847228.373:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 96.072385][ T29] audit: type=1326 audit(1748847228.373:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 96.096059][ T29] audit: type=1326 audit(1748847228.373:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 96.120089][ T29] audit: type=1326 audit(1748847228.373:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 96.137110][ T6452] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.144308][ T29] audit: type=1326 audit(1748847228.373:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62186ee969 code=0x7ffc0000 [ 96.241000][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 96.721358][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 96.730981][ T6507] IPVS: Error joining to the multicast group [ 96.801950][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 96.811302][ T6514] IPVS: Error joining to the multicast group [ 96.838771][ T6516] netlink: 'syz.3.1080': attribute type 13 has an invalid length. [ 96.883131][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.884951][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.898975][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.900439][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.950666][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.960940][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.993788][ T6516] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.002546][ T6516] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.011121][ T6516] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.019730][ T6516] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.195129][ T6524] Falling back ldisc for ptm0. [ 97.512862][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 97.684628][ T5859] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 97.698620][ T6554] loop4: detected capacity change from 0 to 1024 [ 97.706802][ T5859] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.735653][ T6554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.776882][ T6554] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.894651][ T6574] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1103'. [ 97.996637][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 98.078754][ T6579] loop3: detected capacity change from 0 to 8192 [ 98.098569][ T6590] loop4: detected capacity change from 0 to 128 [ 98.246842][ T6603] loop3: detected capacity change from 0 to 512 [ 98.265356][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1113'. [ 98.304629][ T6603] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 98.316782][ T6603] EXT4-fs (loop3): invalid journal inode [ 98.322482][ T6603] EXT4-fs (loop3): can't get journal size [ 98.341776][ T6603] EXT4-fs (loop3): 1 truncate cleaned up [ 98.358237][ T6614] serio: Serial port ptm0 [ 98.497330][ T5982] EXT4-fs unmount: 31 callbacks suppressed [ 98.497417][ T5982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.582547][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 98.615967][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 98.661743][ T6628] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 99.050212][ T6656] netlink: 'syz.5.1136': attribute type 1 has an invalid length. [ 99.081819][ T6656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.132294][ T6656] bond1: (slave veth5): Enslaving as an active interface with a down link [ 99.184337][ T6656] vlan0: entered allmulticast mode [ 99.189634][ T6656] bond1: entered allmulticast mode [ 99.211365][ T6656] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 99.657606][ T6678] loop3: detected capacity change from 0 to 512 [ 99.673624][ T6678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.694493][ T6678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.715997][ T6678] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.776261][ T6678] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 9 with error 122 [ 99.788615][ T6678] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.788615][ T6678] [ 99.930556][ T6688] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 99.946703][ T6688] SELinux: failed to load policy [ 99.947071][ T5982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.989000][ T6690] loop5: detected capacity change from 0 to 2048 [ 99.998306][ T6690] EXT4-fs: Ignoring removed bh option [ 100.017331][ T6690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.034277][ T6690] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.049373][ T6690] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.061656][ T6690] EXT4-fs (loop5): This should not happen!! Data will be lost [ 100.061656][ T6690] [ 100.071395][ T6690] EXT4-fs (loop5): Total free blocks count 0 [ 100.077516][ T6690] EXT4-fs (loop5): Free/Dirty block details [ 100.083437][ T6690] EXT4-fs (loop5): free_blocks=2415919104 [ 100.089451][ T6690] EXT4-fs (loop5): dirty_blocks=16 [ 100.090378][ T6701] netlink: 'syz.5.1152': attribute type 10 has an invalid length. [ 100.094698][ T6690] EXT4-fs (loop5): Block reservation details [ 100.102549][ T6701] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1152'. [ 100.108479][ T6690] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 100.240481][ T4776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.274251][ T6715] bridge: RTM_NEWNEIGH with invalid ether address [ 100.373239][ T6727] loop5: detected capacity change from 0 to 512 [ 100.391550][ T6727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.415905][ T6727] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.541924][ T6739] loop9: detected capacity change from 0 to 7 [ 100.548346][ T6739] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.556264][ T6739] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.564118][ T6739] loop9: unable to read partition table [ 100.570046][ T6739] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 100.570046][ T6739] U) failed (rc=-5) [ 100.697367][ T4776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.707127][ T6753] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 100.875987][ T6768] loop5: detected capacity change from 0 to 128 [ 100.894828][ T6768] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.910334][ T6768] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.972009][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 100.972026][ T29] audit: type=1400 audit(1748847233.403:1862): avc: denied { write } for pid=6770 comm="syz.3.1184" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.056925][ T6775] netlink: 'syz.4.1186': attribute type 4 has an invalid length. [ 101.104473][ T6775] netlink: 'syz.4.1186': attribute type 4 has an invalid length. [ 101.162802][ T29] audit: type=1400 audit(1748847233.593:1863): avc: denied { ioctl } for pid=6767 comm="syz.5.1183" path="/137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuset.effective_mems" dev="loop5" ino=13 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.245988][ T4776] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.257759][ T6785] wireguard0: entered promiscuous mode [ 101.263326][ T6785] wireguard0: entered allmulticast mode [ 101.270036][ T6787] netlink: 'syz.4.1191': attribute type 10 has an invalid length. [ 101.278057][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1191'. [ 101.309231][ T6787] dummy0: entered promiscuous mode [ 101.338384][ T6794] loop2: detected capacity change from 0 to 736 [ 101.355040][ T6794] iso9660: Unknown parameter 'Q{UaND?sM00000000000000000000' [ 101.382639][ T29] audit: type=1326 audit(1748847233.813:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cbc6e969 code=0x7ffc0000 [ 101.406256][ T29] audit: type=1326 audit(1748847233.813:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cbc6e969 code=0x7ffc0000 [ 101.429830][ T29] audit: type=1326 audit(1748847233.813:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39cbc6e969 code=0x7ffc0000 [ 101.453476][ T29] audit: type=1326 audit(1748847233.813:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cbc6e969 code=0x7ffc0000 [ 101.477066][ T29] audit: type=1326 audit(1748847233.813:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cbc6e969 code=0x7ffc0000 [ 101.500604][ T29] audit: type=1326 audit(1748847233.813:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39cbc6e969 code=0x7ffc0000 [ 101.524440][ T29] audit: type=1326 audit(1748847233.813:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cbc6e969 code=0x7ffc0000 [ 101.547922][ T29] audit: type=1326 audit(1748847233.813:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f39cbc6e969 code=0x7ffc0000 [ 101.612815][ T6804] netlink: '+}[@': attribute type 12 has an invalid length. [ 102.210488][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.222519][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.257412][ T6858] loop4: detected capacity change from 0 to 512 [ 102.266619][ T6858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.304209][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.318212][ T6858] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.454700][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.599700][ T6854] Set syz1 is full, maxelem 65536 reached [ 102.619836][ T6865] loop4: detected capacity change from 0 to 164 [ 102.637105][ T6865] bio_check_eod: 148 callbacks suppressed [ 102.637144][ T6865] syz.4.1222: attempt to access beyond end of device [ 102.637144][ T6865] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.663067][ T6865] syz.4.1222: attempt to access beyond end of device [ 102.663067][ T6865] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.803795][ T6883] loop5: detected capacity change from 0 to 2048 [ 102.869720][ T6883] loop5: p1 < > p4 [ 102.877243][ T6883] loop5: p4 size 8388608 extends beyond EOD, truncated [ 102.947970][ T6892] loop3: detected capacity change from 0 to 128 [ 102.969909][ T6892] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.007364][ T6892] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.167135][ T5982] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.245071][ T6909] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1241'. [ 103.254176][ T6909] netem: unknown loss type 0 [ 103.258007][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.258849][ T6909] netem: change failed [ 103.268167][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.450115][ T6921] SELinux: ebitmap: truncated map [ 103.457104][ T6921] SELinux: failed to load policy [ 103.738695][ T6952] random: crng reseeded on system resumption [ 103.793289][ T6958] pim6reg1: entered promiscuous mode [ 103.798838][ T6958] pim6reg1: entered allmulticast mode [ 103.935922][ T6965] loop3: detected capacity change from 0 to 2048 [ 103.987200][ T6965] Alternate GPT is invalid, using primary GPT. [ 103.993948][ T6965] loop3: p2 p3 p7 [ 104.127678][ T6977] netlink: 'syz.3.1272': attribute type 4 has an invalid length. [ 104.139551][ T6977] netlink: 'syz.3.1272': attribute type 4 has an invalid length. [ 104.273352][ T6986] wg2: entered promiscuous mode [ 104.278400][ T6986] wg2: entered allmulticast mode [ 104.331391][ T6994] 9pnet_fd: Insufficient options for proto=fd [ 104.358509][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.366796][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.375103][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.380119][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 104.386699][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.392547][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.400342][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.415683][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.423884][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.432054][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.440196][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.448391][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.456556][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.464671][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.472900][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.481000][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.489375][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.490002][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.497527][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.497562][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.520989][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.529183][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.537391][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.545524][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.553675][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.561969][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.570075][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.578318][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.586454][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.594596][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.602721][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.610885][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 104.620856][ T23] hid-generic FFFF:FFFFFFFC:20000001.0005: hidraw0: HID va0.69 Device [syz0] on syz1 [ 104.661332][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1285'. [ 104.702039][ T7013] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1288'. [ 104.717980][ T7013] C: renamed from team_slave_0 (while UP) [ 104.755723][ T7011] loop2: detected capacity change from 0 to 512 [ 104.766961][ T7011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.824927][ T7011] EXT4-fs (loop2): 1 truncate cleaned up [ 104.831344][ T7022] lo speed is unknown, defaulting to 1000 [ 104.831376][ T7022] lo speed is unknown, defaulting to 1000 [ 104.831707][ T7022] lo speed is unknown, defaulting to 1000 [ 104.863371][ T7011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.873854][ T7022] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.883988][ T7022] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.896221][ T7022] lo speed is unknown, defaulting to 1000 [ 104.902395][ T7022] lo speed is unknown, defaulting to 1000 [ 104.908934][ T7022] lo speed is unknown, defaulting to 1000 [ 104.915088][ T7022] lo speed is unknown, defaulting to 1000 [ 104.921412][ T7022] lo speed is unknown, defaulting to 1000 [ 104.927779][ T7022] lo speed is unknown, defaulting to 1000 [ 104.936407][ T7027] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 104.943061][ T7027] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.950819][ T7027] vhci_hcd vhci_hcd.0: Device attached [ 104.959243][ T7011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.959788][ T7028] vhci_hcd: connection closed [ 104.969507][ T3530] vhci_hcd: stop threads [ 104.978579][ T3530] vhci_hcd: release socket [ 104.983052][ T3530] vhci_hcd: disconnect device [ 105.633896][ T7053] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.649328][ T7053] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.738168][ T7066] loop3: detected capacity change from 0 to 512 [ 105.745514][ T7066] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.756914][ T7066] EXT4-fs (loop3): 1 truncate cleaned up [ 105.763550][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.792144][ T7053] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.803093][ T7053] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.816569][ T5982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.926272][ T7053] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.938824][ T7053] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.011775][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 106.011794][ T29] audit: type=1400 audit(1748847238.443:2109): avc: denied { mounton } for pid=7079 comm="syz.3.1314" path="/97/file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 106.167203][ T7053] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.178351][ T7053] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.211982][ T29] audit: type=1326 audit(1748847238.643:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.235568][ T29] audit: type=1326 audit(1748847238.643:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.262173][ T29] audit: type=1326 audit(1748847238.693:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.285710][ T29] audit: type=1326 audit(1748847238.693:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.309357][ T29] audit: type=1326 audit(1748847238.693:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.332924][ T29] audit: type=1326 audit(1748847238.693:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.340009][ T7094] netlink: 412 bytes leftover after parsing attributes in process `syz.1.1320'. [ 106.356381][ T29] audit: type=1326 audit(1748847238.693:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.388963][ T29] audit: type=1326 audit(1748847238.693:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.412389][ T29] audit: type=1326 audit(1748847238.693:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 106.417856][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 106.479029][ T7098] loop3: detected capacity change from 0 to 512 [ 106.506044][ T7098] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.526992][ T7098] EXT4-fs (loop3): 1 truncate cleaned up [ 106.533045][ T7098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.548206][ T7053] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.556563][ T7053] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.578855][ T7098] lo speed is unknown, defaulting to 1000 [ 106.609047][ T7053] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.617448][ T7053] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.630042][ T7053] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.638439][ T7053] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.655737][ T7053] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.664105][ T7053] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.698988][ T7113] loop5: detected capacity change from 0 to 128 [ 106.765464][ T5982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.869008][ T7134] ref_ctr_offset mismatch. inode: 0x38d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 106.892085][ T7129] sd 0:0:1:0: device reset [ 107.070652][ T7154] lo speed is unknown, defaulting to 1000 [ 107.185292][ T7157] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 107.206346][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 107.215328][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 107.263155][ T7171] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 107.263155][ T7171] program syz.2.1344 not setting count and/or reply_len properly [ 107.367781][ T7174] syzkaller0: entered promiscuous mode [ 107.373510][ T7174] syzkaller0: entered allmulticast mode [ 107.397030][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 107.530461][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.538786][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.546786][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.554908][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.563148][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.571130][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.579330][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.587324][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.595332][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.603263][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.611254][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.619279][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.627445][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.635408][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.643384][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.651362][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.659384][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.667497][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.675511][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.683500][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.684809][ T7208] SELinux: failed to load policy [ 107.691626][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.704469][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.713789][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.721953][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.729953][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.738008][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.745963][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.753945][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.761974][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.770035][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.777999][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.786024][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.794031][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.802582][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.810611][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.818632][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.826618][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.834759][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.842810][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.850731][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.858777][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.866764][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 107.874714][ T10] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 108.024752][ T10] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.220004][ T7231] loop3: detected capacity change from 0 to 764 [ 108.379517][ T7251] loop2: detected capacity change from 0 to 256 [ 108.395185][ T7251] FAT-fs (loop2): bogus number of FAT sectors [ 108.401311][ T7251] FAT-fs (loop2): Can't find a valid FAT filesystem [ 108.432455][ T7255] loop4: detected capacity change from 0 to 512 [ 108.441536][ T7255] EXT4-fs: Ignoring removed orlov option [ 108.450430][ T7255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.460728][ T7255] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.468725][ T7255] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1374: bg 0: block 248: padding at end of block bitmap is not set [ 108.483282][ T7255] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1374: Failed to acquire dquot type 1 [ 108.495251][ T7255] EXT4-fs (loop4): 1 truncate cleaned up [ 108.504888][ T7255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.534307][ T7260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1376'. [ 108.570870][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.740678][ T7274] loop2: detected capacity change from 0 to 1024 [ 108.767031][ T7274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.995072][ T7297] serio: Serial port ptm1 [ 109.008134][ T7300] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1394'. [ 109.132555][ T7308] lo speed is unknown, defaulting to 1000 [ 109.376448][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881284be200: rx timeout, send abort [ 109.460649][ T7326] loop3: detected capacity change from 0 to 1024 [ 109.467784][ T7326] EXT4-fs: Ignoring removed bh option [ 109.477024][ T7326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 109.507349][ T5982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 109.547843][ T7333] loop3: detected capacity change from 0 to 256 [ 109.555067][ T7333] FAT-fs (loop3): bogus number of FAT sectors [ 109.561185][ T7333] FAT-fs (loop3): Can't find a valid FAT filesystem [ 109.569066][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.876467][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a13000: rx timeout, send abort [ 109.884984][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881284be200: abort rx timeout. Force session deactivation [ 110.377351][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a13800: rx timeout, send abort [ 110.385693][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119a13800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.400009][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a13000: abort rx timeout. Force session deactivation [ 110.733443][ T7383] pim6reg1: entered promiscuous mode [ 110.739046][ T7383] pim6reg1: entered allmulticast mode [ 110.744022][ T7385] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1427'. [ 110.768131][ T7385] 0XD: renamed from gretap0 (while UP) [ 110.788612][ T7385] 0XD: entered allmulticast mode [ 110.796318][ T7385] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 110.832027][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 110.839592][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.847101][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.854648][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.862134][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.864127][ T7394] loop5: detected capacity change from 0 to 256 [ 110.869640][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.877954][ T7394] FAT-fs (loop5): bogus number of FAT sectors [ 110.883211][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 110.889395][ T7394] FAT-fs (loop5): Can't find a valid FAT filesystem [ 110.896735][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.910874][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.918327][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.925849][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 110.933302][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.940838][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.948280][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 110.955834][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.963262][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.966034][ T7398] loop4: detected capacity change from 0 to 512 [ 110.970786][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 110.984636][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.992101][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.999612][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.007135][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.014614][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.017075][ T7403] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 111.017075][ T7403] The task syz.3.1429 (7403) triggered the difference, watch for misbehavior. [ 111.022031][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.047033][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.054487][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.062030][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.069480][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.071484][ T7398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.076912][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.076943][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.090660][ T7398] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.096884][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.096971][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.129611][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.137014][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.144459][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.151879][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.159425][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.166828][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.174356][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.182420][ T36] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 111.205743][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.854330][ T7420] loop5: detected capacity change from 0 to 1024 [ 111.877278][ T7420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.055724][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 112.067480][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 112.078835][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 112.088464][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 112.205595][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'. [ 112.244061][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 112.244077][ T29] audit: type=1400 audit(1748847244.673:2255): avc: denied { mounton } for pid=7450 comm="syz.1.1453" path="/proc/666/ns" dev="proc" ino=18370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.283386][ T29] audit: type=1326 audit(1748847244.713:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc8d7e969 code=0x7ffc0000 [ 112.307124][ T29] audit: type=1326 audit(1748847244.713:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc8d7e969 code=0x7ffc0000 [ 112.331089][ T29] audit: type=1326 audit(1748847244.713:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effc8d7e969 code=0x7ffc0000 [ 112.354723][ T29] audit: type=1326 audit(1748847244.713:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc8d7e969 code=0x7ffc0000 [ 112.378455][ T29] audit: type=1326 audit(1748847244.713:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc8d7e969 code=0x7ffc0000 [ 112.402233][ T29] audit: type=1326 audit(1748847244.713:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7effc8d7e969 code=0x7ffc0000 [ 112.426888][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.440335][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.454478][ T29] audit: type=1326 audit(1748847244.873:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc8d7e969 code=0x7ffc0000 [ 112.478185][ T29] audit: type=1326 audit(1748847244.873:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc8d7e969 code=0x7ffc0000 [ 112.501821][ T29] audit: type=1326 audit(1748847244.873:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7effc8db1225 code=0x7ffc0000 [ 112.822369][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'. [ 112.929529][ T4776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.943378][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 112.953287][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 112.963803][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 113.098289][ T7484] IPVS: Error joining to the multicast group [ 113.126835][ T7488] loop3: detected capacity change from 0 to 1156 [ 113.138763][ T7489] netlink: 'syz.5.1465': attribute type 13 has an invalid length. [ 113.186513][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.193880][ T7493] loop3: detected capacity change from 0 to 2048 [ 113.194023][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.239522][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.245676][ T7493] Alternate GPT is invalid, using primary GPT. [ 113.250575][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.253313][ T7493] loop3: p1 p2 p3 [ 113.281931][ T7489] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.290678][ T7489] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.299791][ T7489] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.308218][ T7489] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.321416][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.329444][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.337277][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.345079][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.352912][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.360759][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.368573][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.376385][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.384166][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.392073][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.399882][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.407776][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.415556][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.423351][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.431287][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.439079][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.446926][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.454809][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.462631][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.470431][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.478282][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.486085][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.493899][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.501767][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.509558][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.517360][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.525203][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.532966][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.541192][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.548982][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.556774][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.564566][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.572447][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.580333][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.588185][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.596151][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.604345][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.612273][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.620076][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.627942][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.635862][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.643613][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.651405][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 113.662002][ T3392] hid-generic 0000:007F:FFFFFFFE.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.725743][ T7509] Falling back ldisc for ptm0. [ 114.364568][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.372428][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.380295][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.388136][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.396007][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.403779][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.411592][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.419422][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.427237][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.435059][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.442820][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.447615][ T7540] Falling back ldisc for ptm0. [ 114.450691][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.463145][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.471073][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.479124][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.486964][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.494872][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.502722][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.510646][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.518576][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.526444][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.534205][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.542041][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.549827][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.557649][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.565507][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.573287][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.581099][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.588944][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.596730][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.604552][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.612321][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.620134][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.627958][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.635811][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.643558][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.651381][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.659399][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.667396][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.675228][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.683009][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.690812][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.698614][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 114.707113][ T5859] hid-generic 0000:007F:FFFFFFFE.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.751753][ T7542] lo speed is unknown, defaulting to 1000 [ 115.032892][ T7573] loop5: detected capacity change from 0 to 2048 [ 115.047170][ T7578] loop3: detected capacity change from 0 to 256 [ 115.096812][ T7573] Alternate GPT is invalid, using primary GPT. [ 115.103148][ T7573] loop5: p1 p2 p3 [ 116.025263][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.025263][ T7578] loop3: rw=2049, sector=288, nr_sectors = 32 limit=256 [ 116.040061][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.040061][ T7578] loop3: rw=2049, sector=352, nr_sectors = 32 limit=256 [ 116.054164][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.054164][ T7578] loop3: rw=2049, sector=416, nr_sectors = 32 limit=256 [ 116.069265][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.069265][ T7578] loop3: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 116.083295][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.083295][ T7578] loop3: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 116.104648][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.104648][ T7578] loop3: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 116.123497][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.123497][ T7578] loop3: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 116.138958][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.138958][ T7578] loop3: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 116.162638][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.162638][ T7578] loop3: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 116.195068][ T7578] syz.3.1501: attempt to access beyond end of device [ 116.195068][ T7578] loop3: rw=2049, sector=960, nr_sectors = 32 limit=256 [ 116.288069][ T7599] loop4: detected capacity change from 0 to 1156 [ 116.320049][ T7597] loop5: detected capacity change from 0 to 8192 [ 116.366456][ T7608] loop4: detected capacity change from 0 to 1024 [ 116.399078][ T7608] EXT4-fs: Ignoring removed i_version option [ 116.407992][ T7608] EXT4-fs: Ignoring removed nobh option [ 116.445224][ T7608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.480816][ T7608] EXT4-fs warning (device loop4): ext4_rename_delete:3726: inode #12: comm syz.4.1515: Deleting old file: nlink 2, error=-2 [ 116.516838][ T7622] loop2: detected capacity change from 0 to 512 [ 116.544472][ T7622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.562763][ T7622] EXT4-fs (loop2): 1 truncate cleaned up [ 116.570018][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.581051][ T7622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.782693][ T7638] loop5: detected capacity change from 0 to 128 [ 116.877442][ T7643] loop5: detected capacity change from 0 to 1156 [ 117.065697][ T7650] bridge: RTM_NEWNEIGH with invalid ether address [ 117.301089][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x1 [ 117.308976][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.309002][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.309026][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.309047][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.309078][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.310391][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354023][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354054][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x2 [ 117.354080][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354108][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354133][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354158][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354207][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354235][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354372][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354582][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354630][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354657][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354693][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354748][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354775][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354802][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354830][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354857][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354890][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354916][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354943][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354970][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.354997][ T10] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 117.366244][ T10] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.02 Device [syz0] on syz1 [ 117.467288][ T7674] loop5: detected capacity change from 0 to 2048 [ 117.508697][ T7674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.510668][ T7674] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1541: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 117.510811][ T7674] EXT4-fs (loop5): Remounting filesystem read-only [ 117.542903][ T4776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.046814][ T7699] lo speed is unknown, defaulting to 1000 [ 118.073854][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.301247][ T7713] __nla_validate_parse: 3 callbacks suppressed [ 118.301338][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 118.328557][ T7711] loop4: detected capacity change from 0 to 128 [ 118.380201][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 118.389397][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1557'. [ 118.470521][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1558'. [ 118.484912][ T7718] openvswitch: netlink: Message has 6 unknown bytes. [ 118.536339][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 118.536356][ T29] audit: type=1400 audit(1748847250.973:2362): avc: denied { create } for pid=7719 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.729852][ T7711] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.750138][ T7728] lo speed is unknown, defaulting to 1000 [ 118.770307][ T7711] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.811594][ T29] audit: type=1326 audit(1748847251.233:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 118.835127][ T29] audit: type=1326 audit(1748847251.233:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 118.858578][ T29] audit: type=1326 audit(1748847251.233:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 118.882231][ T29] audit: type=1326 audit(1748847251.243:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 118.905675][ T29] audit: type=1326 audit(1748847251.243:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 118.929187][ T29] audit: type=1326 audit(1748847251.243:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 118.952823][ T29] audit: type=1326 audit(1748847251.243:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 118.976325][ T29] audit: type=1326 audit(1748847251.243:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 118.999904][ T29] audit: type=1326 audit(1748847251.243:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff668c8e969 code=0x7ffc0000 [ 119.061229][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 119.098186][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.129805][ T7744] loop4: detected capacity change from 0 to 164 [ 119.161719][ T7744] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 119.216780][ T7744] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 119.314438][ T7758] tipc: Enabled bearer , priority 10 [ 119.409118][ T7758] tipc: Resetting bearer [ 119.417882][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1580'. [ 119.442296][ T7757] tipc: Resetting bearer [ 119.459818][ T7757] tipc: Disabling bearer [ 119.793902][ T7806] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 119.834176][ T7806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.851082][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 119.866001][ T7806] bond3 (unregistering): Released all slaves [ 120.283200][ T7837] loop4: detected capacity change from 0 to 2048 [ 120.325094][ T7837] loop4: p1 < > p4 [ 120.329726][ T7837] loop4: p4 size 8388608 extends beyond EOD, truncated [ 120.369846][ T7840] sch_tbf: burst 3092 is lower than device lo mtu (11337746) ! [ 120.383064][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 120.395872][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 120.504155][ T7855] pim6reg1: entered promiscuous mode [ 120.510009][ T7855] pim6reg1: entered allmulticast mode [ 120.613533][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.622581][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.635292][ T7862] loop2: detected capacity change from 0 to 2048 [ 120.648040][ T7860] lo speed is unknown, defaulting to 1000 [ 120.793966][ T7871] ================================================================== [ 120.802110][ T7871] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 120.811109][ T7871] [ 120.813448][ T7871] read to 0xffff8881186d3aa0 of 4 bytes by task 7870 on cpu 0: [ 120.821019][ T7871] selinux_inode_permission+0x2a7/0x620 [ 120.826595][ T7871] security_inode_permission+0x6d/0xb0 [ 120.832069][ T7871] inode_permission+0x106/0x310 [ 120.836941][ T7871] link_path_walk+0x162/0x900 [ 120.841635][ T7871] path_openat+0x1de/0x2170 [ 120.846148][ T7871] do_filp_open+0x109/0x230 [ 120.850664][ T7871] io_openat2+0x272/0x390 [ 120.855010][ T7871] io_openat+0x1b/0x30 [ 120.859101][ T7871] __io_issue_sqe+0xfb/0x2e0 [ 120.863716][ T7871] io_issue_sqe+0x53/0x970 [ 120.868160][ T7871] io_submit_sqes+0x667/0xfd0 [ 120.872866][ T7871] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 120.878425][ T7871] __x64_sys_io_uring_enter+0x78/0x90 [ 120.883843][ T7871] x64_sys_call+0x28c8/0x2fb0 [ 120.888542][ T7871] do_syscall_64+0xd2/0x200 [ 120.893069][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.898978][ T7871] [ 120.901306][ T7871] write to 0xffff8881186d3aa0 of 4 bytes by task 7871 on cpu 1: [ 120.908950][ T7871] selinux_inode_permission+0x31b/0x620 [ 120.914515][ T7871] security_inode_permission+0x6d/0xb0 [ 120.919990][ T7871] inode_permission+0x106/0x310 [ 120.924860][ T7871] link_path_walk+0x162/0x900 [ 120.929556][ T7871] path_openat+0x1de/0x2170 [ 120.934070][ T7871] do_filp_open+0x109/0x230 [ 120.938588][ T7871] io_openat2+0x272/0x390 [ 120.942936][ T7871] io_openat+0x1b/0x30 [ 120.947035][ T7871] __io_issue_sqe+0xfb/0x2e0 [ 120.951691][ T7871] io_issue_sqe+0x53/0x970 [ 120.956145][ T7871] io_wq_submit_work+0x3f7/0x5f0 [ 120.961132][ T7871] io_worker_handle_work+0x44e/0x9b0 [ 120.966448][ T7871] io_wq_worker+0x22e/0x870 [ 120.970969][ T7871] ret_from_fork+0xda/0x150 [ 120.975485][ T7871] ret_from_fork_asm+0x1a/0x30 [ 120.980268][ T7871] [ 120.982596][ T7871] value changed: 0x00000003 -> 0x00000000 [ 120.988319][ T7871] [ 120.990649][ T7871] Reported by Kernel Concurrency Sanitizer on: [ 120.996803][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: iou-wrk-7870 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 121.009409][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.019478][ T7871] ==================================================================