last executing test programs: 4.000048916s ago: executing program 1 (id=1188): ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000003c0)={@any, 0x6, 0x4, 0xdf02, 0x10, 0x1, "baef13ac19277912656aa2eb5ce0b818964601746940af59ba0a8f3c3c345fcfeabcf6f626fb87e5e3c108043864badff88e44a2259b463ecfa06132446e8e0385882e8adadc2e6f88b9cdae1d164aa2d9cef42ce44945739cc031a300"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) 3.95959243s ago: executing program 1 (id=1189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.886764007s ago: executing program 1 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) 3.832004512s ago: executing program 1 (id=1195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ustat(0x5, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$inet(0x2, 0x6, 0x401) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0xf0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x401, 0x29}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1d, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) 1.274840684s ago: executing program 0 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = inotify_init1(0x80000) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/87, 0x57}, {0x0}], 0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) 1.21683636s ago: executing program 3 (id=1243): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 1.187012783s ago: executing program 3 (id=1245): socket$nl_netfilter(0x10, 0x3, 0xc) 1.134684238s ago: executing program 3 (id=1246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b4000000100009040000000000000000000022", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x14000}, 0x0) 1.11417417s ago: executing program 2 (id=1247): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 1.085282173s ago: executing program 2 (id=1248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.082361223s ago: executing program 3 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.025537849s ago: executing program 2 (id=1251): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "b3e5ff358784ef"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.01389111s ago: executing program 3 (id=1252): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2900) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000270001"], 0x50}}, 0x0) setreuid(r1, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xfffd}, {0xfff3}}, [{0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f1ffffff210000001400018008000100", @ANYRES32=r8, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001a00040025bd7000ffdbdf250a808020fe020009000c000008001900", @ANYRES32=r1, @ANYBLOB="a35017000100000008000300", @ANYRES32=r8, @ANYBLOB="05001400fc00000008001900", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0xc040000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x9) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c000780080012400a000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}}, 0x0) 989.379743ms ago: executing program 2 (id=1255): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 924.983019ms ago: executing program 2 (id=1256): socket$nl_netfilter(0x10, 0x3, 0xc) 900.456771ms ago: executing program 2 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000440)={0xa9, 0x4, 0x7}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="913014a934c751f73359e8b8547553c991d23a7e6f5363a51baac348314dbc42d30ae426359e6d70397a95d9aae9cb60e5b6d42b103ce7f5d26d06d9eb29cf28bccf562a483bb7b9f68d272d46303b45869e33fbac7c9dd9cf20347179ef5cc391c064bbc7e911ac2dbe82abb999dbadefb87c702bd2eb850d720281d2b55f4b49101afd71aa0e859be78411d86b0c03d59ff9c8124f", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000007c0)=ANY=[], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000027376c865b89cabffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f1", 0x1) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) 877.017314ms ago: executing program 3 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = inotify_init1(0x80000) r4 = socket$kcm(0x29, 0x2, 0x0) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/87, 0x57}, {0x0}], 0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000400)={0x3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000100fc00000000000000000000000000000114000200ff02000000000000000000000000000108000800080400001400060005000000070000000080000036000000080009"], 0x64}}, 0x24008818) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) 757.254485ms ago: executing program 1 (id=1260): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 737.046598ms ago: executing program 1 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r4}, 0x38) 419.677099ms ago: executing program 0 (id=1266): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000780)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x196c82f6}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 334.332677ms ago: executing program 0 (id=1268): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2900) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000270001"], 0x50}}, 0x0) setreuid(r1, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xfffd}, {0xfff3}}, [{0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f1ffffff210000001400018008000100", @ANYRES32=r8, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001a00040025bd7000ffdbdf250a808020fe020009000c000008001900", @ANYRES32=r1, @ANYBLOB="a35017000100000008000300", @ANYRES32=r8, @ANYBLOB="05001400fc00000008001900", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0xc040000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x9) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c000780080012400a000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}}, 0x0) 294.969261ms ago: executing program 4 (id=1270): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) 233.149597ms ago: executing program 4 (id=1271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x10001}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 211.128829ms ago: executing program 4 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 156.670055ms ago: executing program 0 (id=1273): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 130.969897ms ago: executing program 0 (id=1274): get_mempolicy(0x0, &(0x7f0000000200), 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 86.823961ms ago: executing program 4 (id=1275): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) 86.173532ms ago: executing program 0 (id=1276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = inotify_init1(0x80000) socket$kcm(0x29, 0x2, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/87, 0x57}, {0x0}], 0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) 13.124979ms ago: executing program 4 (id=1277): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 0s ago: executing program 4 (id=1278): mount$9p_rdma(0x0, 0x0, &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) kernel console output (not intermixed with test programs): T3690] udevd[3690]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 73.997951][ T1037] hid-generic 0005:C6A00000:0009.0028: item 0 0 1 13 parsing failed [ 74.008046][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.040931][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 74.040949][ T29] audit: type=1326 audit(1760801741.649:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.042660][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 74.047340][ T29] audit: type=1326 audit(1760801741.649:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.047375][ T29] audit: type=1326 audit(1760801741.649:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.093286][ T4999] bond1: entered promiscuous mode [ 74.103896][ T29] audit: type=1326 audit(1760801741.649:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.127211][ T4999] bond1: entered allmulticast mode [ 74.132214][ T29] audit: type=1326 audit(1760801741.649:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.184164][ T29] audit: type=1326 audit(1760801741.649:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.189973][ T4999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.207781][ T29] audit: type=1326 audit(1760801741.649:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.237778][ T29] audit: type=1326 audit(1760801741.649:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.261236][ T29] audit: type=1326 audit(1760801741.649:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.284746][ T29] audit: type=1326 audit(1760801741.649:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 74.301755][ T3690] udevd[3690]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 74.308318][ T1037] hid-generic 0005:C6A00000:0009.0028: probe with driver hid-generic failed with error -22 [ 74.319459][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 74.338379][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 74.349313][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.421877][ T4999] bond1 (unregistering): Released all slaves [ 74.651896][ T1037] hid (null): unknown global tag 0xd [ 74.657314][ T1037] hid (null): invalid report_count 54924 [ 74.663043][ T1037] hid (null): unknown global tag 0x45 [ 74.673520][ T5023] sd 0:0:1:0: device reset [ 74.699134][ T1037] hid-generic 0005:C6A00000:0009.0029: unknown global tag 0xd [ 74.706769][ T1037] hid-generic 0005:C6A00000:0009.0029: item 0 0 1 13 parsing failed [ 74.715154][ T5023] bond1: entered promiscuous mode [ 74.720431][ T5023] bond1: entered allmulticast mode [ 74.725276][ T1037] hid-generic 0005:C6A00000:0009.0029: probe with driver hid-generic failed with error -22 [ 74.762816][ T5023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.818458][ T5023] bond1 (unregistering): Released all slaves [ 74.853584][ T5002] loop3: detected capacity change from 0 to 32768 [ 74.927898][ T3303] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 74.933557][ T3303] loop3: p1 start 460800 is beyond EOD, truncated [ 74.940080][ T3303] loop3: p2 size 83886080 extends beyond EOD, truncated [ 74.961856][ T3303] loop3: p5 start 460800 is beyond EOD, truncated [ 74.968454][ T3303] loop3: p6 size 83886080 extends beyond EOD, truncated [ 74.977361][ T5035] sd 0:0:1:0: device reset [ 74.982040][ T3368] hid (null): unknown global tag 0xd [ 74.987469][ T3368] hid (null): invalid report_count 54924 [ 74.993236][ T3368] hid (null): unknown global tag 0x45 [ 75.001196][ T3368] hid-generic 0005:C6A00000:0009.002A: unknown global tag 0xd [ 75.008800][ T3368] hid-generic 0005:C6A00000:0009.002A: item 0 0 1 13 parsing failed [ 75.022765][ T5035] bond1: entered promiscuous mode [ 75.027906][ T5035] bond1: entered allmulticast mode [ 75.038719][ T5002] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 75.043546][ T5035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.044617][ T5002] loop3: p1 start 460800 is beyond EOD, truncated [ 75.057124][ T5002] loop3: p2 size 83886080 extends beyond EOD, truncated [ 75.068278][ T5002] loop3: p5 start 460800 is beyond EOD, truncated [ 75.074773][ T5002] loop3: p6 size 83886080 extends beyond EOD, truncated [ 75.075112][ T3368] hid-generic 0005:C6A00000:0009.002A: probe with driver hid-generic failed with error -22 [ 75.095335][ T3002] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 75.101070][ T3002] loop3: p1 start 460800 is beyond EOD, truncated [ 75.103503][ T5035] bond1 (unregistering): Released all slaves [ 75.107648][ T3002] loop3: p2 size 83886080 extends beyond EOD, truncated [ 75.115234][ T3002] loop3: p5 start 460800 is beyond EOD, truncated [ 75.127181][ T3002] loop3: p6 size 83886080 extends beyond EOD, truncated [ 75.161869][ T5041] netlink: 60 bytes leftover after parsing attributes in process `syz.4.565'. [ 75.182793][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 75.182882][ T3690] udevd[3690]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 75.221135][ T5040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.565'. [ 75.414643][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 75.424106][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 75.448683][ T5060] syz!: rxe_newlink: already configured on team_slave_0 [ 75.454957][ T5054] loop0: detected capacity change from 0 to 2048 [ 75.489149][ T5054] EXT4-fs (loop0): failed to initialize system zone (-117) [ 75.555425][ T5054] EXT4-fs (loop0): mount failed [ 75.569102][ T3368] hid (null): unknown global tag 0xd [ 75.574467][ T3368] hid (null): invalid report_count 54924 [ 75.580329][ T3368] hid (null): unknown global tag 0x45 [ 75.586161][ T5070] sd 0:0:1:0: device reset [ 75.592244][ T3368] hid-generic 0005:C6A00000:0009.002B: unknown global tag 0xd [ 75.599826][ T3368] hid-generic 0005:C6A00000:0009.002B: item 0 0 1 13 parsing failed [ 75.645042][ T5070] bond1: entered promiscuous mode [ 75.650186][ T5070] bond1: entered allmulticast mode [ 75.677146][ T3368] hid-generic 0005:C6A00000:0009.002B: probe with driver hid-generic failed with error -22 [ 75.700178][ T5070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.731136][ T5070] bond1 (unregistering): Released all slaves [ 76.234637][ T5083] loop0: detected capacity change from 0 to 32768 [ 76.288256][ T3303] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 76.296702][ T3303] loop0: p1 start 460800 is beyond EOD, truncated [ 76.303209][ T3303] loop0: p2 size 83886080 extends beyond EOD, truncated [ 76.337701][ T3303] loop0: p5 start 460800 is beyond EOD, truncated [ 76.344209][ T3303] loop0: p6 size 83886080 extends beyond EOD, truncated [ 76.393792][ T5083] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 76.399240][ T5083] loop0: p1 start 460800 is beyond EOD, truncated [ 76.405812][ T5083] loop0: p2 size 83886080 extends beyond EOD, truncated [ 76.448147][ T5083] loop0: p5 start 460800 is beyond EOD, truncated [ 76.454630][ T5083] loop0: p6 size 83886080 extends beyond EOD, truncated [ 76.808378][ T5092] loop1: detected capacity change from 0 to 32768 [ 76.857552][ T3303] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 76.863014][ T3303] loop1: p1 start 460800 is beyond EOD, truncated [ 76.869543][ T3303] loop1: p2 size 83886080 extends beyond EOD, truncated [ 76.912888][ T3303] loop1: p5 start 460800 is beyond EOD, truncated [ 76.919456][ T3303] loop1: p6 size 83886080 extends beyond EOD, truncated [ 76.960928][ T5092] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 76.966445][ T5092] loop1: p1 start 460800 is beyond EOD, truncated [ 76.972948][ T5092] loop1: p2 size 83886080 extends beyond EOD, truncated [ 77.011397][ T5092] loop1: p5 start 460800 is beyond EOD, truncated [ 77.017942][ T5092] loop1: p6 size 83886080 extends beyond EOD, truncated [ 77.220813][ T5100] loop1: detected capacity change from 0 to 128 [ 77.269329][ T5100] syz.1.585: attempt to access beyond end of device [ 77.269329][ T5100] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 77.294370][ T5100] syz.1.585: attempt to access beyond end of device [ 77.294370][ T5100] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 77.307964][ T5100] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 77.353332][ T5100] syz.1.585: attempt to access beyond end of device [ 77.353332][ T5100] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 77.366944][ T5100] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 77.452201][ T3368] hid (null): unknown global tag 0xd [ 77.457717][ T3368] hid (null): invalid report_count 54924 [ 77.463484][ T3368] hid (null): unknown global tag 0x45 [ 77.473981][ T5112] sd 0:0:1:0: device reset [ 77.490291][ T5112] bond1: entered promiscuous mode [ 77.495563][ T5112] bond1: entered allmulticast mode [ 77.512938][ T5112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.513144][ T3368] hid-generic 0005:C6A00000:0009.002C: unknown global tag 0xd [ 77.527242][ T3368] hid-generic 0005:C6A00000:0009.002C: item 0 0 1 13 parsing failed [ 77.539589][ T5112] bond1 (unregistering): Released all slaves [ 77.571060][ T3368] hid-generic 0005:C6A00000:0009.002C: probe with driver hid-generic failed with error -22 [ 77.873054][ T5122] loop2: detected capacity change from 0 to 32768 [ 77.917407][ T3303] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 77.923095][ T3303] loop2: p1 start 460800 is beyond EOD, truncated [ 77.923554][ T5125] loop0: detected capacity change from 0 to 32768 [ 77.929617][ T3303] loop2: p2 size 83886080 extends beyond EOD, truncated [ 77.945766][ T5130] loop3: detected capacity change from 0 to 128 [ 77.955364][ T5130] syz.3.596: attempt to access beyond end of device [ 77.955364][ T5130] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 77.970809][ T5130] syz.3.596: attempt to access beyond end of device [ 77.970809][ T5130] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 77.977701][ T3303] loop2: p5 start 460800 is beyond EOD, truncated [ 77.984441][ T5130] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 77.991001][ T3303] loop2: p6 size 83886080 extends beyond EOD, truncated [ 78.003705][ T5122] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 78.010084][ T5130] syz.3.596: attempt to access beyond end of device [ 78.010084][ T5130] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 78.025202][ T5130] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 78.037009][ T5125] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 78.042489][ T5125] loop0: p1 start 460800 is beyond EOD, truncated [ 78.042927][ T5122] loop2: p1 start 460800 is beyond EOD, truncated [ 78.048995][ T5125] loop0: p2 size 83886080 extends beyond EOD, truncated [ 78.055840][ T5122] loop2: p2 size 83886080 extends beyond EOD, truncated [ 78.072278][ T5130] syz.3.596: attempt to access beyond end of device [ 78.072278][ T5130] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 78.072770][ T5122] loop2: p5 start 460800 is beyond EOD, truncated [ 78.087082][ T5130] syz.3.596: attempt to access beyond end of device [ 78.087082][ T5130] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 78.092441][ T5122] loop2: p6 size 83886080 extends beyond EOD, truncated [ 78.105807][ T5130] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 78.122985][ T5125] loop0: p5 start 460800 is beyond EOD, truncated [ 78.129577][ T5125] loop0: p6 size 83886080 extends beyond EOD, truncated [ 78.174081][ T5130] syz.3.596: attempt to access beyond end of device [ 78.174081][ T5130] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 78.187873][ T5130] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 78.211801][ T5130] syz.3.596: attempt to access beyond end of device [ 78.211801][ T5130] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 78.241545][ T36] hid (null): unknown global tag 0xd [ 78.247378][ T36] hid (null): invalid report_count 54924 [ 78.253103][ T36] hid (null): unknown global tag 0x45 [ 78.256173][ T5130] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 78.259254][ T5139] sd 0:0:1:0: device reset [ 78.269767][ T5130] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 78.278823][ T36] hid-generic 0005:C6A00000:0009.002D: unknown global tag 0xd [ 78.283157][ T5130] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 78.287521][ T36] hid-generic 0005:C6A00000:0009.002D: item 0 0 1 13 parsing failed [ 78.296238][ T5130] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 78.312717][ T36] hid-generic 0005:C6A00000:0009.002D: probe with driver hid-generic failed with error -22 [ 78.329034][ T5139] bond1: entered promiscuous mode [ 78.334156][ T5139] bond1: entered allmulticast mode [ 78.339927][ T5139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.406877][ T5139] bond1 (unregistering): Released all slaves [ 78.508783][ T5147] __nla_validate_parse: 4 callbacks suppressed [ 78.508843][ T5147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.600'. [ 78.524059][ T5147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.600'. [ 78.619500][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 78.783654][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 79.187571][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 79.187589][ T29] audit: type=1326 audit(1760801746.809:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 79.218816][ T29] audit: type=1326 audit(1760801746.809:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 79.307803][ T29] audit: type=1326 audit(1760801746.929:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 79.332782][ T29] audit: type=1326 audit(1760801746.929:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 79.356290][ T29] audit: type=1326 audit(1760801746.929:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 79.379848][ T29] audit: type=1326 audit(1760801746.929:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 79.387672][ T5179] loop0: detected capacity change from 0 to 32768 [ 79.403385][ T29] audit: type=1326 audit(1760801746.939:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5177 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 79.441228][ T29] audit: type=1326 audit(1760801747.049:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 79.464840][ T29] audit: type=1326 audit(1760801747.049:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 79.488544][ T29] audit: type=1326 audit(1760801747.049:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb352cefc9 code=0x7ffc0000 [ 79.529238][ T3303] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 79.535065][ T3303] loop0: p1 start 460800 is beyond EOD, truncated [ 79.541607][ T3303] loop0: p2 size 83886080 extends beyond EOD, truncated [ 79.560399][ T3303] loop0: p5 start 460800 is beyond EOD, truncated [ 79.566887][ T3303] loop0: p6 size 83886080 extends beyond EOD, truncated [ 79.581553][ T5179] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 79.590663][ T5179] loop0: p1 start 460800 is beyond EOD, truncated [ 79.597735][ T5179] loop0: p2 size 83886080 extends beyond EOD, truncated [ 79.607776][ T5179] loop0: p5 start 460800 is beyond EOD, truncated [ 79.614339][ T5179] loop0: p6 size 83886080 extends beyond EOD, truncated [ 79.637615][ T5185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'. [ 79.646632][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 79.716840][ T5189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 79.794438][ T5183] loop4: detected capacity change from 0 to 32768 [ 79.828316][ T5136] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 79.836658][ T5200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.616'. [ 79.848992][ T5136] loop4: p1 start 460800 is beyond EOD, truncated [ 79.855511][ T5136] loop4: p2 size 83886080 extends beyond EOD, truncated [ 79.874275][ T5136] loop4: p5 start 460800 is beyond EOD, truncated [ 79.881021][ T5136] loop4: p6 size 83886080 extends beyond EOD, truncated [ 79.899474][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 79.922960][ T5183] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 79.937327][ T5183] loop4: p1 start 460800 is beyond EOD, truncated [ 79.943869][ T5183] loop4: p2 size 83886080 extends beyond EOD, truncated [ 79.968739][ T5183] loop4: p5 start 460800 is beyond EOD, truncated [ 79.975521][ T5183] loop4: p6 size 83886080 extends beyond EOD, truncated [ 79.992234][ T5210] 9pnet: Could not find request transport: fd [ 80.037218][ T5213] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.049362][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 80.055870][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 80.061028][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 80.084593][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 80.135076][ T5219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.625'. [ 80.294653][ T5230] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.764638][ T5237] loop3: detected capacity change from 0 to 32768 [ 80.828228][ T5237] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 80.833934][ T5237] loop3: p1 start 460800 is beyond EOD, truncated [ 80.840419][ T5237] loop3: p2 size 83886080 extends beyond EOD, truncated [ 80.852824][ T5237] loop3: p5 start 460800 is beyond EOD, truncated [ 80.859768][ T5237] loop3: p6 size 83886080 extends beyond EOD, truncated [ 81.050729][ T5251] loop1: detected capacity change from 0 to 128 [ 81.174973][ T5248] loop2: detected capacity change from 0 to 32768 [ 81.231076][ T3303] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 81.241899][ T3303] loop2: p1 start 460800 is beyond EOD, truncated [ 81.248768][ T3303] loop2: p2 size 83886080 extends beyond EOD, truncated [ 81.398207][ T3303] loop2: p5 start 460800 is beyond EOD, truncated [ 81.404724][ T3303] loop2: p6 size 83886080 extends beyond EOD, truncated [ 81.438288][ T5248] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 81.451200][ T5248] loop2: p1 start 460800 is beyond EOD, truncated [ 81.457772][ T5248] loop2: p2 size 83886080 extends beyond EOD, truncated [ 81.510980][ T5248] loop2: p5 start 460800 is beyond EOD, truncated [ 81.518377][ T5248] loop2: p6 size 83886080 extends beyond EOD, truncated [ 81.964629][ T5270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.973519][ T5270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.149935][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 82.164552][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 82.209481][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 82.273289][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 82.435281][ T5285] loop3: detected capacity change from 0 to 2048 [ 82.460719][ T5285] EXT4-fs (loop3): failed to initialize system zone (-117) [ 82.468219][ T5285] EXT4-fs (loop3): mount failed [ 82.665806][ T5295] loop2: detected capacity change from 0 to 512 [ 82.683662][ T5295] EXT4-fs: dax option not supported [ 82.704088][ T5295] tmpfs: Unknown parameter 'trans' [ 82.744009][ T5297] loop3: detected capacity change from 0 to 2048 [ 82.781670][ T5299] sd 0:0:1:0: device reset [ 82.786431][ T3394] hid (null): unknown global tag 0xd [ 82.791847][ T3394] hid (null): invalid report_count 54924 [ 82.797727][ T3394] hid (null): unknown global tag 0x45 [ 82.805313][ T5297] EXT4-fs (loop3): failed to initialize system zone (-117) [ 82.818701][ T5297] EXT4-fs (loop3): mount failed [ 82.832694][ T3394] hid-generic 0005:C6A00000:0009.002E: unknown global tag 0xd [ 82.840434][ T3394] hid-generic 0005:C6A00000:0009.002E: item 0 0 1 13 parsing failed [ 82.851283][ T5299] bond1: entered promiscuous mode [ 82.856452][ T5299] bond1: entered allmulticast mode [ 82.862114][ T3394] hid-generic 0005:C6A00000:0009.002E: probe with driver hid-generic failed with error -22 [ 82.872524][ T5299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.892455][ T5299] bond1 (unregistering): Released all slaves [ 82.991671][ T5310] loop2: detected capacity change from 0 to 2048 [ 83.013600][ T5310] EXT4-fs (loop2): failed to initialize system zone (-117) [ 83.037894][ T5310] EXT4-fs (loop2): mount failed [ 83.367973][ T5324] loop2: detected capacity change from 0 to 32768 [ 83.418207][ T3303] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 83.423967][ T3303] loop2: p1 start 460800 is beyond EOD, truncated [ 83.430463][ T3303] loop2: p2 size 83886080 extends beyond EOD, truncated [ 83.441617][ T3303] loop2: p5 start 460800 is beyond EOD, truncated [ 83.448327][ T3303] loop2: p6 size 83886080 extends beyond EOD, truncated [ 83.460407][ T5324] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 83.465892][ T5324] loop2: p1 start 460800 is beyond EOD, truncated [ 83.472484][ T5324] loop2: p2 size 83886080 extends beyond EOD, truncated [ 83.481089][ T5324] loop2: p5 start 460800 is beyond EOD, truncated [ 83.487605][ T5324] loop2: p6 size 83886080 extends beyond EOD, truncated [ 83.593847][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 83.597773][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 83.620127][ T5333] loop2: detected capacity change from 0 to 128 [ 83.642096][ T5333] bio_check_eod: 77 callbacks suppressed [ 83.642115][ T5333] syz.2.662: attempt to access beyond end of device [ 83.642115][ T5333] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 83.671552][ T5333] syz.2.662: attempt to access beyond end of device [ 83.671552][ T5333] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 83.685101][ T5333] buffer_io_error: 48 callbacks suppressed [ 83.685120][ T5333] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 83.709841][ T5333] syz.2.662: attempt to access beyond end of device [ 83.709841][ T5333] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 83.723338][ T5333] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 83.828542][ T5336] __nla_validate_parse: 12 callbacks suppressed [ 83.828557][ T5336] netlink: 60 bytes leftover after parsing attributes in process `syz.0.663'. [ 83.862562][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'. [ 83.893773][ T1037] hid (null): unknown global tag 0xd [ 83.897513][ T5341] sd 0:0:1:0: device reset [ 83.899183][ T1037] hid (null): invalid report_count 54924 [ 83.909568][ T1037] hid (null): unknown global tag 0x45 [ 83.916422][ T5341] bond1: entered promiscuous mode [ 83.917022][ T1037] hid-generic 0005:C6A00000:0009.002F: unknown global tag 0xd [ 83.921648][ T5341] bond1: entered allmulticast mode [ 83.929084][ T1037] hid-generic 0005:C6A00000:0009.002F: item 0 0 1 13 parsing failed [ 83.930906][ T1037] hid-generic 0005:C6A00000:0009.002F: probe with driver hid-generic failed with error -22 [ 83.934796][ T5341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.962848][ T5341] bond1 (unregistering): Released all slaves [ 84.013931][ T5347] loop3: detected capacity change from 0 to 2048 [ 84.039315][ T5347] EXT4-fs (loop3): failed to initialize system zone (-117) [ 84.046855][ T5347] EXT4-fs (loop3): mount failed [ 84.082273][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 84.123899][ T5352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.667'. [ 84.177696][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'. [ 84.241398][ T5360] loop1: detected capacity change from 0 to 2048 [ 84.324615][ T5360] EXT4-fs (loop1): failed to initialize system zone (-117) [ 84.347035][ T5360] EXT4-fs (loop1): mount failed [ 84.357527][ T5372] loop3: detected capacity change from 0 to 2048 [ 84.375603][ T5372] EXT4-fs (loop3): failed to initialize system zone (-117) [ 84.384770][ T5372] EXT4-fs (loop3): mount failed [ 84.413286][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 84.414219][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 84.536807][ T3401] hid (null): unknown global tag 0xd [ 84.542445][ T3401] hid (null): invalid report_count 54924 [ 84.548195][ T3401] hid (null): unknown global tag 0x45 [ 84.558194][ T3401] hid-generic 0005:C6A00000:0009.0030: unknown global tag 0xd [ 84.565780][ T3401] hid-generic 0005:C6A00000:0009.0030: item 0 0 1 13 parsing failed [ 84.574922][ T5382] sd 0:0:1:0: device reset [ 84.590520][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 84.590539][ T29] audit: type=1326 audit(1760801752.209:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.606243][ T5382] bond1: entered promiscuous mode [ 84.620571][ T29] audit: type=1326 audit(1760801752.209:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.625447][ T5382] bond1: entered allmulticast mode [ 84.648780][ T29] audit: type=1326 audit(1760801752.209:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.663577][ T3401] hid-generic 0005:C6A00000:0009.0030: probe with driver hid-generic failed with error -22 [ 84.677144][ T29] audit: type=1326 audit(1760801752.209:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.677182][ T29] audit: type=1326 audit(1760801752.209:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.734125][ T29] audit: type=1326 audit(1760801752.209:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.757362][ T29] audit: type=1326 audit(1760801752.209:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.780830][ T29] audit: type=1326 audit(1760801752.209:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.789284][ T5382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.804267][ T29] audit: type=1326 audit(1760801752.209:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.834947][ T29] audit: type=1326 audit(1760801752.209:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900fa0efc9 code=0x7ffc0000 [ 84.938167][ T5382] bond1 (unregistering): Released all slaves [ 84.991096][ T5386] loop2: detected capacity change from 0 to 32768 [ 85.008822][ T5393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.680'. [ 85.047983][ T3303] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 85.053385][ T3303] loop2: p1 start 460800 is beyond EOD, truncated [ 85.060019][ T3303] loop2: p2 size 83886080 extends beyond EOD, truncated [ 85.089367][ T3303] loop2: p5 start 460800 is beyond EOD, truncated [ 85.095867][ T3303] loop2: p6 size 83886080 extends beyond EOD, truncated [ 85.109805][ T5386] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 85.115640][ T5386] loop2: p1 start 460800 is beyond EOD, truncated [ 85.122296][ T5386] loop2: p2 size 83886080 extends beyond EOD, truncated [ 85.137087][ T5386] loop2: p5 start 460800 is beyond EOD, truncated [ 85.143583][ T5386] loop2: p6 size 83886080 extends beyond EOD, truncated [ 85.160013][ T5399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.682'. [ 85.195269][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 85.566742][ T5418] loop1: detected capacity change from 0 to 512 [ 85.592342][ T5418] EXT4-fs: dax option not supported [ 85.651528][ T5418] tmpfs: Unknown parameter 'trans' [ 85.839170][ T5411] loop3: detected capacity change from 0 to 32768 [ 85.877072][ T3401] hid (null): unknown global tag 0xd [ 85.882477][ T3401] hid (null): invalid report_count 54924 [ 85.888213][ T3401] hid (null): unknown global tag 0x45 [ 85.894819][ T3401] hid-generic 0005:C6A00000:0009.0031: unknown global tag 0xd [ 85.898650][ T3695] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 85.902420][ T3401] hid-generic 0005:C6A00000:0009.0031: item 0 0 1 13 parsing failed [ 85.917621][ T5430] sd 0:0:1:0: device reset [ 85.920389][ T3695] loop3: p1 start 460800 is beyond EOD, truncated [ 85.922649][ T3401] hid-generic 0005:C6A00000:0009.0031: probe with driver hid-generic failed with error -22 [ 85.928712][ T3695] loop3: p2 size 83886080 extends beyond EOD, truncated [ 85.949783][ T3695] loop3: p5 start 460800 is beyond EOD, truncated [ 85.956363][ T3695] loop3: p6 size 83886080 extends beyond EOD, truncated [ 85.956406][ T5430] bond1: entered promiscuous mode [ 85.968568][ T5430] bond1: entered allmulticast mode [ 85.978125][ T5430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.999139][ T5411] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 86.004522][ T5411] loop3: p1 start 460800 is beyond EOD, truncated [ 86.011155][ T5411] loop3: p2 size 83886080 extends beyond EOD, truncated [ 86.021361][ T5411] loop3: p5 start 460800 is beyond EOD, truncated [ 86.027957][ T5411] loop3: p6 size 83886080 extends beyond EOD, truncated [ 86.038913][ T5430] bond1 (unregistering): Released all slaves [ 86.185004][ T5442] loop4: detected capacity change from 0 to 512 [ 86.200582][ T5442] EXT4-fs: dax option not supported [ 86.218321][ T5441] sd 0:0:1:0: device reset [ 86.223158][ T36] hid (null): unknown global tag 0xd [ 86.224548][ T5442] tmpfs: Unknown parameter 'trans' [ 86.228714][ T36] hid (null): invalid report_count 54924 [ 86.239695][ T36] hid (null): unknown global tag 0x45 [ 86.249188][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 86.260434][ T5441] bond1: entered promiscuous mode [ 86.264107][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 86.265519][ T5441] bond1: entered allmulticast mode [ 86.265705][ T5441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.278533][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 86.281662][ T36] hid-generic 0005:C6A00000:0009.0032: unknown global tag 0xd [ 86.289523][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 86.297126][ T36] hid-generic 0005:C6A00000:0009.0032: item 0 0 1 13 parsing failed [ 86.339149][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 86.350564][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 86.362230][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 86.373735][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 86.387351][ T5445] loop3: detected capacity change from 0 to 2048 [ 86.406485][ T5441] bond1 (unregistering): Released all slaves [ 86.444277][ T5445] EXT4-fs (loop3): failed to initialize system zone (-117) [ 86.452101][ T36] hid-generic 0005:C6A00000:0009.0032: probe with driver hid-generic failed with error -22 [ 86.468964][ T5445] EXT4-fs (loop3): mount failed [ 86.563458][ T5455] loop4: detected capacity change from 0 to 512 [ 86.573963][ T5455] EXT4-fs: dax option not supported [ 86.596402][ T5458] FAULT_INJECTION: forcing a failure. [ 86.596402][ T5458] name failslab, interval 1, probability 0, space 0, times 0 [ 86.600645][ T5455] tmpfs: Unknown parameter 'trans' [ 86.609128][ T5458] CPU: 0 UID: 0 PID: 5458 Comm: syz.0.702 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.609167][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.609187][ T5458] Call Trace: [ 86.609197][ T5458] [ 86.609208][ T5458] __dump_stack+0x1d/0x30 [ 86.609239][ T5458] dump_stack_lvl+0xe8/0x140 [ 86.609300][ T5458] dump_stack+0x15/0x1b [ 86.609324][ T5458] should_fail_ex+0x265/0x280 [ 86.609388][ T5458] should_failslab+0x8c/0xb0 [ 86.609488][ T5458] kmem_cache_alloc_noprof+0x50/0x480 [ 86.609526][ T5458] ? security_file_alloc+0x32/0x100 [ 86.609576][ T5458] security_file_alloc+0x32/0x100 [ 86.609611][ T5458] init_file+0x5c/0x1d0 [ 86.609655][ T5458] alloc_empty_file+0x8b/0x200 [ 86.609779][ T5458] alloc_file_pseudo+0xc6/0x160 [ 86.609829][ T5458] __shmem_file_setup+0x1de/0x210 [ 86.609946][ T5458] shmem_file_setup+0x3b/0x50 [ 86.609998][ T5458] __se_sys_memfd_create+0x2c3/0x590 [ 86.610032][ T5458] __x64_sys_memfd_create+0x31/0x40 [ 86.610063][ T5458] x64_sys_call+0x2ac2/0x3000 [ 86.610145][ T5458] do_syscall_64+0xd2/0x200 [ 86.610179][ T5458] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.610219][ T5458] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.610247][ T5458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.610322][ T5458] RIP: 0033:0x7f62478fefc9 [ 86.610343][ T5458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.610370][ T5458] RSP: 002b:00007f6246366d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 86.610397][ T5458] RAX: ffffffffffffffda RBX: 00000000000005d4 RCX: 00007f62478fefc9 [ 86.610415][ T5458] RDX: 00007f6246366dec RSI: 0000000000000000 RDI: 00007f6247982960 [ 86.610431][ T5458] RBP: 0000200000000000 R08: 00007f6246366b07 R09: 0000000000000000 [ 86.610495][ T5458] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 86.610512][ T5458] R13: 00007f6246366dec R14: 00007f6246366df0 R15: 00007fffc8542088 [ 86.610539][ T5458] [ 86.678440][ T5466] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 86.856555][ T5466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.866321][ T5472] FAULT_INJECTION: forcing a failure. [ 86.866321][ T5472] name failslab, interval 1, probability 0, space 0, times 0 [ 86.867470][ T5466] bond0: (slave bond1): Enslaving as an active interface with an up link [ 86.879075][ T5472] CPU: 1 UID: 0 PID: 5472 Comm: syz.2.706 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.879186][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.879204][ T5472] Call Trace: [ 86.879213][ T5472] [ 86.879224][ T5472] __dump_stack+0x1d/0x30 [ 86.879263][ T5472] dump_stack_lvl+0xe8/0x140 [ 86.879290][ T5472] dump_stack+0x15/0x1b [ 86.879313][ T5472] should_fail_ex+0x265/0x280 [ 86.879439][ T5472] should_failslab+0x8c/0xb0 [ 86.879486][ T5472] kmem_cache_alloc_noprof+0x50/0x480 [ 86.879524][ T5472] ? skb_clone+0x151/0x1f0 [ 86.879588][ T5472] skb_clone+0x151/0x1f0 [ 86.879629][ T5472] __netlink_deliver_tap+0x2c9/0x500 [ 86.879713][ T5472] netlink_unicast+0x66b/0x690 [ 86.879754][ T5472] netlink_sendmsg+0x58b/0x6b0 [ 86.879799][ T5472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.879859][ T5472] __sock_sendmsg+0x145/0x180 [ 86.879889][ T5472] ____sys_sendmsg+0x31e/0x4e0 [ 86.879934][ T5472] ___sys_sendmsg+0x17b/0x1d0 [ 86.880043][ T5472] __x64_sys_sendmsg+0xd4/0x160 [ 86.880154][ T5472] x64_sys_call+0x191e/0x3000 [ 86.880184][ T5472] do_syscall_64+0xd2/0x200 [ 86.880219][ T5472] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.880265][ T5472] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.880342][ T5472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.880369][ T5472] RIP: 0033:0x7f900fa0efc9 [ 86.880387][ T5472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.880413][ T5472] RSP: 002b:00007f900e477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.880481][ T5472] RAX: ffffffffffffffda RBX: 00007f900fc65fa0 RCX: 00007f900fa0efc9 [ 86.880499][ T5472] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 86.880516][ T5472] RBP: 00007f900e477090 R08: 0000000000000000 R09: 0000000000000000 [ 86.880575][ T5472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.880593][ T5472] R13: 00007f900fc66038 R14: 00007f900fc65fa0 R15: 00007ffdd4a6fdb8 [ 86.880620][ T5472] [ 87.093000][ T5467] bond1: option mode: unable to set because the bond device is up [ 87.117143][ T5472] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 87.167885][ T10] hid (null): unknown global tag 0xd [ 87.173290][ T10] hid (null): invalid report_count 54924 [ 87.179111][ T10] hid (null): unknown global tag 0x45 [ 87.195607][ T10] hid-generic 0005:C6A00000:0009.0033: unknown global tag 0xd [ 87.203165][ T10] hid-generic 0005:C6A00000:0009.0033: item 0 0 1 13 parsing failed [ 87.240169][ T5482] sd 0:0:1:0: device reset [ 87.246648][ T5484] loop4: detected capacity change from 0 to 2048 [ 87.254290][ T10] hid-generic 0005:C6A00000:0009.0033: probe with driver hid-generic failed with error -22 [ 87.264820][ T5482] bond1: entered promiscuous mode [ 87.270018][ T5482] bond1: entered allmulticast mode [ 87.283837][ T5482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.309561][ T5484] EXT4-fs (loop4): failed to initialize system zone (-117) [ 87.316971][ T5484] EXT4-fs (loop4): mount failed [ 87.344521][ T5482] bond1 (unregistering): Released all slaves [ 87.478094][ T5499] 9pnet_fd: Insufficient options for proto=fd [ 87.709382][ T5511] loop3: detected capacity change from 0 to 1024 [ 87.729437][ T5511] EXT4-fs: Ignoring removed oldalloc option [ 87.735516][ T5511] EXT4-fs: Ignoring removed bh option [ 87.782614][ T5511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.909049][ T5518] loop1: detected capacity change from 0 to 1024 [ 87.917468][ T5518] EXT4-fs: Ignoring removed bh option [ 87.930898][ T5518] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 87.958603][ T5518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.976320][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.013729][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.052880][ T5527] loop3: detected capacity change from 0 to 512 [ 88.066083][ T5527] EXT4-fs: dax option not supported [ 88.078964][ T5527] tmpfs: Unknown parameter 'trans' [ 88.099038][ T36] hid (null): unknown global tag 0xd [ 88.104503][ T36] hid (null): invalid report_count 54924 [ 88.110332][ T36] hid (null): unknown global tag 0x45 [ 88.117055][ T5534] sd 0:0:1:0: device reset [ 88.120993][ T36] hid-generic 0005:C6A00000:0009.0034: unknown global tag 0xd [ 88.129210][ T36] hid-generic 0005:C6A00000:0009.0034: item 0 0 1 13 parsing failed [ 88.165408][ T5537] 9pnet_fd: Insufficient options for proto=fd [ 88.165984][ T36] hid-generic 0005:C6A00000:0009.0034: probe with driver hid-generic failed with error -22 [ 88.201752][ T5534] bond1: entered promiscuous mode [ 88.207068][ T5534] bond1: entered allmulticast mode [ 88.220158][ T5534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.238351][ T5534] bond1 (unregistering): Released all slaves [ 88.283615][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 88.304278][ T5551] syz!: rxe_newlink: already configured on team_slave_0 [ 88.317879][ T36] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.344023][ T5549] loop2: detected capacity change from 0 to 1024 [ 88.356450][ T5549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.363787][ T5549] ext4: Unknown parameter 'smackfshat' [ 88.377860][ T5549] loop2: detected capacity change from 0 to 512 [ 88.385436][ T5549] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 88.470928][ T5549] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.508471][ T5549] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.730: Block bitmap for bg 0 marked uninitialized [ 88.779534][ T5563] mmap: syz.1.733 (5563) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.830993][ T5549] EXT4-fs (loop2): Remounting filesystem read-only [ 88.861303][ T5549] EXT4-fs (loop2): 1 orphan inode deleted [ 88.929664][ T5549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 88.992085][ T5567] __nla_validate_parse: 9 callbacks suppressed [ 88.992101][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 89.323944][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.365495][ T5572] loop4: detected capacity change from 0 to 512 [ 89.394192][ T5574] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 89.417616][ T5572] EXT4-fs: dax option not supported [ 89.475103][ T5572] tmpfs: Unknown parameter 'trans' [ 89.502407][ T5586] 9pnet_fd: Insufficient options for proto=fd [ 89.558854][ T5591] loop2: detected capacity change from 0 to 512 [ 89.571229][ T5591] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.588544][ T5591] EXT4-fs (loop2): mount failed [ 89.628477][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 89.628525][ T29] audit: type=1326 audit(1760801757.249:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.668921][ T3690] printk: udevd: 42 output lines suppressed due to ratelimiting [ 89.683779][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 89.695687][ T5597] loop2: detected capacity change from 0 to 2048 [ 89.708763][ T29] audit: type=1326 audit(1760801757.249:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.732199][ T29] audit: type=1326 audit(1760801757.249:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.755646][ T29] audit: type=1326 audit(1760801757.249:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.779151][ T29] audit: type=1326 audit(1760801757.249:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.799248][ T5597] EXT4-fs (loop2): failed to initialize system zone (-117) [ 89.825581][ T5597] EXT4-fs (loop2): mount failed [ 89.882739][ T29] audit: type=1326 audit(1760801757.379:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.906259][ T29] audit: type=1326 audit(1760801757.379:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.929799][ T29] audit: type=1326 audit(1760801757.409:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.953093][ T29] audit: type=1326 audit(1760801757.409:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 89.976541][ T29] audit: type=1326 audit(1760801757.409:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 90.063663][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 90.111621][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 90.168065][ T5617] FAULT_INJECTION: forcing a failure. [ 90.168065][ T5617] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.181208][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz.4.750 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.181244][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.181293][ T5617] Call Trace: [ 90.181302][ T5617] [ 90.181312][ T5617] __dump_stack+0x1d/0x30 [ 90.181335][ T5617] dump_stack_lvl+0xe8/0x140 [ 90.181398][ T5617] dump_stack+0x15/0x1b [ 90.181468][ T5617] should_fail_ex+0x265/0x280 [ 90.181504][ T5617] should_fail+0xb/0x20 [ 90.181542][ T5617] should_fail_usercopy+0x1a/0x20 [ 90.181602][ T5617] _copy_from_user+0x1c/0xb0 [ 90.181665][ T5617] restore_altstack+0x4b/0x2d0 [ 90.181706][ T5617] ? __set_task_blocked+0x23a/0x2a0 [ 90.181747][ T5617] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 90.181829][ T5617] ? _raw_spin_unlock_irq+0x26/0x50 [ 90.181870][ T5617] ? signal_setup_done+0x266/0x290 [ 90.181898][ T5617] ? xfd_validate_state+0x45/0xf0 [ 90.181949][ T5617] ? fpu__clear_user_states+0x63/0x1e0 [ 90.182033][ T5617] ? fpregs_mark_activate+0x66/0x140 [ 90.182068][ T5617] ? fpu__clear_user_states+0x63/0x1e0 [ 90.182126][ T5617] ? arch_do_signal_or_restart+0x2b5/0x440 [ 90.182153][ T5617] ? __rcu_read_unlock+0x4f/0x70 [ 90.182204][ T5617] x64_sys_call+0x2d4b/0x3000 [ 90.182231][ T5617] do_syscall_64+0xd2/0x200 [ 90.182258][ T5617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.182317][ T5617] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.182346][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.182375][ T5617] RIP: 0033:0x7fdb3526b099 [ 90.182395][ T5617] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 90.182413][ T5617] RSP: 002b:00007fdb33d36a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 90.182483][ T5617] RAX: ffffffffffffffda RBX: 00007fdb35525fa0 RCX: 00007fdb3526b099 [ 90.182495][ T5617] RDX: 00007fdb33d36a80 RSI: 00007fdb33d36bb0 RDI: 0000000000000021 [ 90.182507][ T5617] RBP: 00007fdb33d37090 R08: 0000000000000001 R09: 0000000000000000 [ 90.182519][ T5617] R10: 0000200000001100 R11: 0000000000000202 R12: 0000000000000001 [ 90.182533][ T5617] R13: 00007fdb35526038 R14: 00007fdb35525fa0 R15: 00007ffd1e02a918 [ 90.182557][ T5617] [ 90.429002][ T5625] loop4: detected capacity change from 0 to 512 [ 90.435821][ T5625] EXT4-fs: dax option not supported [ 90.451465][ T5625] tmpfs: Unknown parameter 'trans' [ 90.509284][ T5630] 9pnet_fd: Insufficient options for proto=fd [ 90.510433][ T5627] 9pnet: Could not find request transport: fdÿÿÿÿ [ 90.527255][ T5630] loop4: detected capacity change from 0 to 128 [ 90.670559][ T36] hid (null): unknown global tag 0xd [ 90.675950][ T36] hid (null): invalid report_count 54924 [ 90.681777][ T36] hid (null): unknown global tag 0x45 [ 90.688469][ T5636] sd 0:0:1:0: device reset [ 90.697870][ T36] hid-generic 0005:C6A00000:0009.0036: unknown global tag 0xd [ 90.705389][ T36] hid-generic 0005:C6A00000:0009.0036: item 0 0 1 13 parsing failed [ 90.711806][ T5623] loop2: detected capacity change from 0 to 32768 [ 90.726038][ T36] hid-generic 0005:C6A00000:0009.0036: probe with driver hid-generic failed with error -22 [ 90.739293][ T5636] bond1: entered promiscuous mode [ 90.744502][ T5636] bond1: entered allmulticast mode [ 90.759464][ T5623] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 90.764738][ T5623] loop2: p1 start 460800 is beyond EOD, truncated [ 90.771235][ T5623] loop2: p2 size 83886080 extends beyond EOD, truncated [ 90.790668][ T5636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.805159][ T5623] loop2: p5 start 460800 is beyond EOD, truncated [ 90.809467][ T5634] loop0: detected capacity change from 0 to 1024 [ 90.811672][ T5623] loop2: p6 size 83886080 extends beyond EOD, truncated [ 90.829955][ T5636] bond1 (unregistering): Released all slaves [ 90.845125][ T5638] loop1: detected capacity change from 0 to 8192 [ 90.883242][ T5634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.916662][ T5638] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 90.934826][ T5638] SELinux: failed to load policy [ 90.974961][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.018665][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.049925][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.084289][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 91.099888][ T5652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.760'. [ 91.141948][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 91.207586][ T5663] loop1: detected capacity change from 0 to 512 [ 91.214451][ T5663] EXT4-fs: dax option not supported [ 91.228553][ T5663] tmpfs: Unknown parameter 'trans' [ 91.239250][ T5667] 9pnet: Could not find request transport: fdÿÿÿÿ [ 91.292571][ T5673] loop1: detected capacity change from 0 to 512 [ 91.307529][ T5673] ext4: Unknown parameter 'euid' [ 91.340384][ T5675] loop1: detected capacity change from 0 to 1024 [ 91.347283][ T5675] EXT4-fs: Ignoring removed bh option [ 91.364814][ T5675] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 91.405753][ T5675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.501131][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.064774][ T5685] loop2: detected capacity change from 0 to 32768 [ 92.117356][ T5685] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 92.122795][ T5685] loop2: p1 start 460800 is beyond EOD, truncated [ 92.129352][ T5685] loop2: p2 size 83886080 extends beyond EOD, truncated [ 92.160590][ T5685] loop2: p5 start 460800 is beyond EOD, truncated [ 92.167193][ T5685] loop2: p6 size 83886080 extends beyond EOD, truncated [ 92.185584][ T5686] loop1: detected capacity change from 0 to 32768 [ 92.237362][ T5686] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 92.242845][ T5686] loop1: p1 start 460800 is beyond EOD, truncated [ 92.249347][ T5686] loop1: p2 size 83886080 extends beyond EOD, truncated [ 92.252360][ T5665] syz.0.765 (5665) used greatest stack depth: 7240 bytes left [ 92.278460][ T5686] loop1: p5 start 460800 is beyond EOD, truncated [ 92.285038][ T5686] loop1: p6 size 83886080 extends beyond EOD, truncated [ 92.372212][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 92.443323][ T5701] loop0: detected capacity change from 0 to 1024 [ 92.465507][ T5701] ext4: Unknown parameter 'euid<00000000000000000000' [ 92.487303][ T5703] 9pnet: Could not find request transport: fdÿÿÿÿ [ 92.578930][ T5714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.775'. [ 92.591638][ T5719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.600314][ T5719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.632822][ T5724] syz.1.778 uses obsolete (PF_INET,SOCK_PACKET) [ 92.639472][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 93.011406][ T5731] loop3: detected capacity change from 0 to 32768 [ 93.018109][ T5744] loop2: detected capacity change from 0 to 32768 [ 93.068107][ T5744] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 93.073732][ T5731] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 93.079713][ T5731] loop3: p1 start 460800 is beyond EOD, truncated [ 93.086234][ T5731] loop3: p2 size 83886080 extends beyond EOD, truncated [ 93.087104][ T5744] loop2: p1 start 460800 is beyond EOD, truncated [ 93.100086][ T5744] loop2: p2 size 83886080 extends beyond EOD, truncated [ 93.102163][ T5731] loop3: p5 start 460800 is beyond EOD, truncated [ 93.113552][ T5731] loop3: p6 size 83886080 extends beyond EOD, truncated [ 93.124105][ T5744] loop2: p5 start 460800 is beyond EOD, truncated [ 93.130711][ T5744] loop2: p6 size 83886080 extends beyond EOD, truncated [ 93.162219][ T36] hid (null): unknown global tag 0xd [ 93.167677][ T36] hid (null): invalid report_count 54924 [ 93.173446][ T36] hid (null): unknown global tag 0x45 [ 93.179981][ T5751] sd 0:0:1:0: device reset [ 93.187936][ T36] hid-generic 0005:C6A00000:0009.0037: unknown global tag 0xd [ 93.195536][ T36] hid-generic 0005:C6A00000:0009.0037: item 0 0 1 13 parsing failed [ 93.209803][ T5751] bond1: entered promiscuous mode [ 93.214909][ T5751] bond1: entered allmulticast mode [ 93.221369][ T36] hid-generic 0005:C6A00000:0009.0037: probe with driver hid-generic failed with error -22 [ 93.232970][ T5751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.233285][ T5748] loop1: detected capacity change from 0 to 32768 [ 93.248668][ T5751] bond1 (unregistering): Released all slaves [ 93.277459][ T5748] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 93.283062][ T5748] loop1: p1 start 460800 is beyond EOD, truncated [ 93.289636][ T5748] loop1: p2 size 83886080 extends beyond EOD, truncated [ 93.312600][ T5748] loop1: p5 start 460800 is beyond EOD, truncated [ 93.319116][ T5748] loop1: p6 size 83886080 extends beyond EOD, truncated [ 93.650848][ T36] hid (null): unknown global tag 0xd [ 93.656259][ T36] hid (null): invalid report_count 54924 [ 93.662014][ T36] hid (null): unknown global tag 0x45 [ 93.672075][ T5778] sd 0:0:1:0: device reset [ 93.698419][ T5778] bond1: entered promiscuous mode [ 93.703612][ T5778] bond1: entered allmulticast mode [ 93.718710][ T36] hid-generic 0005:C6A00000:0009.0038: unknown global tag 0xd [ 93.726237][ T36] hid-generic 0005:C6A00000:0009.0038: item 0 0 1 13 parsing failed [ 93.728161][ T5778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.751327][ T5778] bond1 (unregistering): Released all slaves [ 93.785777][ T36] hid-generic 0005:C6A00000:0009.0038: probe with driver hid-generic failed with error -22 [ 93.809639][ T36] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 93.835115][ T36] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.895687][ T5800] 9pnet_fd: Insufficient options for proto=fd [ 93.916772][ T5804] loop2: detected capacity change from 0 to 512 [ 93.927927][ T5800] loop3: detected capacity change from 0 to 128 [ 93.957312][ T5804] EXT4-fs: dax option not supported [ 93.991951][ T5804] tmpfs: Unknown parameter 'trans' [ 94.067303][ T5811] __nla_validate_parse: 4 callbacks suppressed [ 94.067323][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 94.088272][ T5816] loop1: detected capacity change from 0 to 2048 [ 94.108263][ T5798] loop0: detected capacity change from 0 to 32768 [ 94.115633][ T5816] EXT4-fs (loop1): failed to initialize system zone (-117) [ 94.122969][ T5816] EXT4-fs (loop1): mount failed [ 94.168064][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 94.187749][ T5798] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 94.193061][ T5798] loop0: p1 start 460800 is beyond EOD, truncated [ 94.199588][ T5798] loop0: p2 size 83886080 extends beyond EOD, truncated [ 94.209399][ T5798] loop0: p5 start 460800 is beyond EOD, truncated [ 94.215854][ T5798] loop0: p6 size 83886080 extends beyond EOD, truncated [ 94.420492][ T5833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.819'. [ 94.496612][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 94.666845][ T5839] loop1: detected capacity change from 0 to 2048 [ 94.716446][ T5841] loop0: detected capacity change from 0 to 1024 [ 94.723416][ T5841] EXT4-fs: Ignoring removed bh option [ 94.730298][ T5839] loop1: p1 p2 p3 [ 94.745692][ T5841] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 94.769485][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.900172][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.912567][ T29] kauditd_printk_skb: 527 callbacks suppressed [ 94.912585][ T29] audit: type=1326 audit(1760801770.532:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 94.961494][ T5851] loop2: detected capacity change from 0 to 512 [ 94.973738][ T29] audit: type=1326 audit(1760801770.572:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 94.997066][ T29] audit: type=1326 audit(1760801770.572:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 95.007683][ T5851] EXT4-fs: dax option not supported [ 95.020634][ T29] audit: type=1326 audit(1760801770.572:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 95.042751][ T5839] IPv6: addrconf: prefix option has invalid lifetime [ 95.049152][ T29] audit: type=1326 audit(1760801770.572:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 95.056048][ T5839] IPv6: addrconf: prefix option has invalid lifetime [ 95.056059][ T5839] IPv6: addrconf: prefix option has invalid lifetime [ 95.056495][ T5851] tmpfs: Unknown parameter 'trans' [ 95.079341][ T29] audit: type=1326 audit(1760801770.572:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 95.121162][ T29] audit: type=1326 audit(1760801770.572:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 95.145050][ T29] audit: type=1326 audit(1760801770.572:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 95.168611][ T29] audit: type=1326 audit(1760801770.572:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 95.191971][ T29] audit: type=1326 audit(1760801770.572:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 95.232626][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 95.373590][ T5855] loop3: detected capacity change from 0 to 32768 [ 95.384566][ T5866] netlink: 14 bytes leftover after parsing attributes in process `syz.4.830'. [ 95.399538][ T5866] hsr_slave_0: left promiscuous mode [ 95.407010][ T5866] hsr_slave_1: left promiscuous mode [ 95.426819][ T5870] loop0: detected capacity change from 0 to 512 [ 95.433767][ T5855] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 95.439143][ T5855] loop3: p1 start 460800 is beyond EOD, truncated [ 95.445654][ T5855] loop3: p2 size 83886080 extends beyond EOD, truncated [ 95.453654][ T5870] EXT4-fs: dax option not supported [ 95.461739][ T5855] loop3: p5 start 460800 is beyond EOD, truncated [ 95.468296][ T5855] loop3: p6 size 83886080 extends beyond EOD, truncated [ 95.477598][ T5870] tmpfs: Unknown parameter 'trans' [ 95.511767][ T5876] 9pnet: Could not find request transport: fdÿÿÿÿ [ 95.619406][ T5887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.837'. [ 95.630689][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.837'. [ 95.679751][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 95.730266][ T5891] loop4: detected capacity change from 0 to 512 [ 95.737034][ T5891] EXT4-fs: dax option not supported [ 95.746222][ T5891] tmpfs: Unknown parameter 'trans' [ 95.794732][ T5873] loop2: detected capacity change from 0 to 32768 [ 95.847407][ T5873] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 95.861773][ T5873] loop2: p1 start 460800 is beyond EOD, truncated [ 95.868330][ T5873] loop2: p2 size 83886080 extends beyond EOD, truncated [ 95.888446][ T5897] loop0: detected capacity change from 0 to 1024 [ 95.897369][ T5897] EXT4-fs: Ignoring removed oldalloc option [ 95.903366][ T5897] EXT4-fs: Ignoring removed bh option [ 95.904374][ T5873] loop2: p5 start 460800 is beyond EOD, truncated [ 95.915397][ T5873] loop2: p6 size 83886080 extends beyond EOD, truncated [ 95.936396][ T5897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.985540][ T5911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.845'. [ 96.006820][ T5909] 9pnet: Could not find request transport: fdÿÿÿÿ [ 96.051263][ T5916] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 96.304383][ T5926] loop3: detected capacity change from 0 to 512 [ 96.313676][ T5926] EXT4-fs: dax option not supported [ 96.320798][ T5926] tmpfs: Unknown parameter 'trans' [ 96.461634][ T5934] loop2: detected capacity change from 0 to 2048 [ 96.528539][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.670766][ T5940] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.852: bg 0: block 234: padding at end of block bitmap is not set [ 96.747391][ T5942] 9pnet: Could not find request transport: fdÿÿÿÿ [ 96.855168][ T5945] 9pnet: Could not find request transport: fdÿÿÿÿ [ 96.931645][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.948175][ T5940] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 96.960642][ T5940] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.960642][ T5940] [ 96.994355][ T5951] loop3: detected capacity change from 0 to 1024 [ 97.015673][ T5951] EXT4-fs: Ignoring removed bh option [ 97.037630][ T5951] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 97.083214][ T5951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.255422][ T5970] loop0: detected capacity change from 0 to 512 [ 97.262153][ T5970] EXT4-fs: dax option not supported [ 97.269101][ T5970] tmpfs: Unknown parameter 'trans' [ 97.274890][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.376141][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.438139][ T5979] IPVS: Error connecting to the multicast addr [ 97.849916][ T6007] loop2: detected capacity change from 0 to 512 [ 97.857959][ T6007] EXT4-fs: dax option not supported [ 97.875882][ T6007] tmpfs: Unknown parameter 'trans' [ 98.046482][ T6019] program syz.0.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.064818][ T6021] loop2: detected capacity change from 0 to 2048 [ 98.113835][ T6021] EXT4-fs (loop2): failed to initialize system zone (-117) [ 98.122052][ T6021] EXT4-fs (loop2): mount failed [ 98.195727][ T36] hid (null): unknown global tag 0xd [ 98.201264][ T36] hid (null): invalid report_count 54924 [ 98.207048][ T36] hid (null): unknown global tag 0x45 [ 98.212786][ T6036] sd 0:0:1:0: device reset [ 98.233529][ T36] hid-generic 0005:C6A00000:0009.003A: unknown global tag 0xd [ 98.241163][ T36] hid-generic 0005:C6A00000:0009.003A: item 0 0 1 13 parsing failed [ 98.252481][ T6036] bond1: entered promiscuous mode [ 98.257600][ T6036] bond1: entered allmulticast mode [ 98.278624][ T6036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.285451][ T36] hid-generic 0005:C6A00000:0009.003A: probe with driver hid-generic failed with error -22 [ 98.299419][ T6036] bond1 (unregistering): Released all slaves [ 98.348949][ T6046] loop0: detected capacity change from 0 to 512 [ 98.359587][ T6033] loop3: detected capacity change from 0 to 32768 [ 98.376895][ T6046] EXT4-fs: dax option not supported [ 98.384252][ T6046] tmpfs: Unknown parameter 'trans' [ 98.397281][ T6033] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 98.407325][ T6033] loop3: p1 start 460800 is beyond EOD, truncated [ 98.413845][ T6033] loop3: p2 size 83886080 extends beyond EOD, truncated [ 98.485986][ T6037] loop1: detected capacity change from 0 to 32768 [ 98.493222][ T6033] loop3: p5 start 460800 is beyond EOD, truncated [ 98.499801][ T6033] loop3: p6 size 83886080 extends beyond EOD, truncated [ 98.540140][ T6037] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 98.545555][ T6037] loop1: p1 start 460800 is beyond EOD, truncated [ 98.552110][ T6037] loop1: p2 size 83886080 extends beyond EOD, truncated [ 98.568509][ T6059] 9pnet: Could not find request transport: fdÿÿÿÿ [ 98.569261][ T6037] loop1: p5 start 460800 is beyond EOD, truncated [ 98.581636][ T6037] loop1: p6 size 83886080 extends beyond EOD, truncated [ 98.674864][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.683519][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.148065][ T6077] __nla_validate_parse: 13 callbacks suppressed [ 99.148144][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 99.254186][ T6077] bridge0: entered promiscuous mode [ 99.324490][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 99.338843][ T6082] loop3: detected capacity change from 0 to 2048 [ 99.340507][ T6085] loop0: detected capacity change from 0 to 1024 [ 99.369988][ T6082] EXT4-fs (loop3): failed to initialize system zone (-117) [ 99.377888][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.390372][ T6082] EXT4-fs (loop3): mount failed [ 99.456357][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 99.471869][ T6098] 9pnet: Could not find request transport: fdÿÿÿÿ [ 99.504024][ T6103] loop4: detected capacity change from 0 to 512 [ 99.511233][ T6103] EXT4-fs: dax option not supported [ 99.518518][ T6103] tmpfs: Unknown parameter 'trans' [ 99.532676][ T6109] netlink: 'syz.3.909': attribute type 5 has an invalid length. [ 99.541616][ T6109] cgroup: Invalid name [ 99.615642][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 99.753356][ T6127] 9pnet: Could not find request transport: fdÿÿÿÿ [ 99.854991][ T6118] loop1: detected capacity change from 0 to 32768 [ 99.880001][ T6135] loop3: detected capacity change from 0 to 2048 [ 99.897487][ T6118] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 99.902847][ T6118] loop1: p1 start 460800 is beyond EOD, truncated [ 99.909443][ T6118] loop1: p2 size 83886080 extends beyond EOD, truncated [ 99.918850][ T6135] EXT4-fs (loop3): failed to initialize system zone (-117) [ 99.926192][ T6135] EXT4-fs (loop3): mount failed [ 99.932682][ T6118] loop1: p5 start 460800 is beyond EOD, truncated [ 99.939167][ T6118] loop1: p6 size 83886080 extends beyond EOD, truncated [ 99.961451][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 100.012713][ T6141] loop3: detected capacity change from 0 to 512 [ 100.014129][ T6085] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 100.019776][ T6141] EXT4-fs: dax option not supported [ 100.031542][ T6085] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.031542][ T6085] [ 100.040597][ T6141] tmpfs: Unknown parameter 'trans' [ 100.046427][ T6085] EXT4-fs (loop0): Total free blocks count 0 [ 100.057657][ T6085] EXT4-fs (loop0): Free/Dirty block details [ 100.063694][ T6085] EXT4-fs (loop0): free_blocks=0 [ 100.068708][ T6085] EXT4-fs (loop0): dirty_blocks=0 [ 100.073761][ T6085] EXT4-fs (loop0): Block reservation details [ 100.079795][ T6085] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 100.245319][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 100.295622][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.482944][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 100.482963][ T29] audit: type=1326 audit(1760801776.102:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.518413][ T29] audit: type=1326 audit(1760801776.132:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.541886][ T29] audit: type=1326 audit(1760801776.132:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.565304][ T29] audit: type=1326 audit(1760801776.132:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.588735][ T29] audit: type=1326 audit(1760801776.132:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.612099][ T29] audit: type=1326 audit(1760801776.132:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.635481][ T29] audit: type=1326 audit(1760801776.132:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.658881][ T29] audit: type=1326 audit(1760801776.142:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.684443][ T29] audit: type=1326 audit(1760801776.142:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.708346][ T29] audit: type=1326 audit(1760801776.142:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac09dbefc9 code=0x7ffc0000 [ 100.740023][ T6169] loop4: detected capacity change from 0 to 1024 [ 100.746961][ T6169] EXT4-fs: Ignoring removed bh option [ 100.752861][ T6169] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 100.770673][ T6167] usb usb1: check_ctrlrecip: process 6167 (syz.0.931) requesting ep 01 but needs 81 [ 100.771268][ T6169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.780185][ T6167] usb usb1: usbfs: process 6167 (syz.0.931) did not claim interface 0 before use [ 100.840076][ T6167] loop0: detected capacity change from 0 to 2048 [ 100.860405][ T6167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.908701][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.921297][ T6167] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 100.929068][ T6167] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.931'. [ 100.961031][ T6165] loop1: detected capacity change from 0 to 32768 [ 100.990528][ T3313] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 101.037134][ T3313] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 101.088956][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.117525][ T6165] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 101.122947][ T6165] loop1: p1 start 460800 is beyond EOD, truncated [ 101.129486][ T6165] loop1: p2 size 83886080 extends beyond EOD, truncated [ 101.138367][ T6165] loop1: p5 start 460800 is beyond EOD, truncated [ 101.144877][ T6165] loop1: p6 size 83886080 extends beyond EOD, truncated [ 101.260950][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.269707][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.728717][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 101.824849][ T6184] loop0: detected capacity change from 0 to 32768 [ 101.846842][ T6182] loop3: detected capacity change from 0 to 32768 [ 101.877349][ T6184] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 101.882798][ T6184] loop0: p1 start 460800 is beyond EOD, truncated [ 101.889313][ T6184] loop0: p2 size 83886080 extends beyond EOD, truncated [ 101.897387][ T6182] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 101.898255][ T6184] loop0: p5 start 460800 is beyond EOD, truncated [ 101.902762][ T6182] loop3: p1 start 460800 is beyond EOD, truncated [ 101.909169][ T6184] loop0: p6 size 83886080 extends beyond EOD, truncated [ 101.915590][ T6182] loop3: p2 size 83886080 extends beyond EOD, truncated [ 101.922628][ T6182] loop3: p5 start 460800 is beyond EOD, truncated [ 101.922652][ T6182] loop3: p6 size 83886080 extends beyond EOD, truncated [ 102.312699][ T6218] loop2: detected capacity change from 0 to 32768 [ 102.377785][ T6218] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 102.383150][ T6218] loop2: p1 start 460800 is beyond EOD, truncated [ 102.389654][ T6218] loop2: p2 size 83886080 extends beyond EOD, truncated [ 102.401143][ T6218] loop2: p5 start 460800 is beyond EOD, truncated [ 102.407667][ T6218] loop2: p6 size 83886080 extends beyond EOD, truncated [ 102.811752][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 102.938270][ T6238] FAULT_INJECTION: forcing a failure. [ 102.938270][ T6238] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.951865][ T6238] CPU: 0 UID: 0 PID: 6238 Comm: syz.1.954 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.951901][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.951919][ T6238] Call Trace: [ 102.951928][ T6238] [ 102.951938][ T6238] __dump_stack+0x1d/0x30 [ 102.951962][ T6238] dump_stack_lvl+0xe8/0x140 [ 102.951987][ T6238] dump_stack+0x15/0x1b [ 102.952039][ T6238] should_fail_ex+0x265/0x280 [ 102.952141][ T6238] should_fail_alloc_page+0xf2/0x100 [ 102.952184][ T6238] __alloc_frozen_pages_noprof+0xff/0x360 [ 102.952245][ T6238] alloc_pages_mpol+0xb3/0x260 [ 102.952270][ T6238] ? alloc_pages_noprof+0x61/0x130 [ 102.952297][ T6238] alloc_pages_noprof+0x90/0x130 [ 102.952325][ T6238] alloc_skb_with_frags+0x193/0x470 [ 102.952398][ T6238] sock_alloc_send_pskb+0x430/0x4e0 [ 102.952443][ T6238] ? mntput+0x4b/0x80 [ 102.952476][ T6238] tun_get_user+0x9b3/0x26e0 [ 102.952598][ T6238] ? ref_tracker_alloc+0x1f2/0x2f0 [ 102.952664][ T6238] ? selinux_file_permission+0x1e4/0x320 [ 102.952697][ T6238] tun_chr_write_iter+0x15e/0x210 [ 102.952793][ T6238] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 102.952871][ T6238] vfs_write+0x52a/0x960 [ 102.952910][ T6238] ksys_write+0xda/0x1a0 [ 102.952944][ T6238] __x64_sys_write+0x40/0x50 [ 102.952983][ T6238] x64_sys_call+0x2802/0x3000 [ 102.953065][ T6238] do_syscall_64+0xd2/0x200 [ 102.953091][ T6238] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.953265][ T6238] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.953298][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.953328][ T6238] RIP: 0033:0x7fac09dbda7f [ 102.953347][ T6238] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 102.953373][ T6238] RSP: 002b:00007fac08827000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 102.953399][ T6238] RAX: ffffffffffffffda RBX: 00007fac0a015fa0 RCX: 00007fac09dbda7f [ 102.953433][ T6238] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 00000000000000c8 [ 102.953451][ T6238] RBP: 00007fac08827090 R08: 0000000000000000 R09: 0000000000000000 [ 102.953479][ T6238] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 102.953496][ T6238] R13: 00007fac0a016038 R14: 00007fac0a015fa0 R15: 00007ffd3b8ecb48 [ 102.953516][ T6238] [ 103.242471][ T6241] bond1: entered promiscuous mode [ 103.247611][ T6241] bond1: entered allmulticast mode [ 103.253140][ T6241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.340106][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 103.633283][ T6272] usb usb1: check_ctrlrecip: process 6272 (syz.1.965) requesting ep 01 but needs 81 [ 103.642792][ T6272] usb usb1: usbfs: process 6272 (syz.1.965) did not claim interface 0 before use [ 103.665219][ T6274] loop2: detected capacity change from 0 to 2048 [ 103.673375][ T6272] loop1: detected capacity change from 0 to 2048 [ 103.689769][ T6272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.708631][ T6274] EXT4-fs (loop2): failed to initialize system zone (-117) [ 103.715951][ T6274] EXT4-fs (loop2): mount failed [ 103.749260][ T3312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 103.784070][ T3312] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 103.821319][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.851656][ T6291] loop1: detected capacity change from 0 to 2048 [ 103.868094][ T6291] EXT4-fs (loop1): failed to initialize system zone (-117) [ 103.877330][ T6291] EXT4-fs (loop1): mount failed [ 103.964322][ T36] hid (null): unknown global tag 0xd [ 103.969812][ T36] hid (null): invalid report_count 54924 [ 103.975553][ T36] hid (null): unknown global tag 0x45 [ 103.982216][ T36] hid-generic 0005:C6A00000:0009.003B: unknown global tag 0xd [ 103.987106][ T6306] sd 0:0:1:0: device reset [ 103.989944][ T36] hid-generic 0005:C6A00000:0009.003B: item 0 0 1 13 parsing failed [ 104.054251][ T36] hid-generic 0005:C6A00000:0009.003B: probe with driver hid-generic failed with error -22 [ 104.079906][ T6306] bond1: entered promiscuous mode [ 104.085029][ T6306] bond1: entered allmulticast mode [ 104.107096][ T6306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.119379][ T6306] bond1 (unregistering): Released all slaves [ 104.203041][ T6317] SELinux: Context system_u:object is not valid (left unmapped). [ 104.276567][ T6320] bond1: entered promiscuous mode [ 104.281792][ T6320] bond1: entered allmulticast mode [ 104.321754][ T6308] loop2: detected capacity change from 0 to 32768 [ 104.329011][ T6320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.377532][ T6308] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 104.382982][ T6308] loop2: p1 start 460800 is beyond EOD, truncated [ 104.389520][ T6308] loop2: p2 size 83886080 extends beyond EOD, truncated [ 104.400028][ T6308] loop2: p5 start 460800 is beyond EOD, truncated [ 104.406545][ T6308] loop2: p6 size 83886080 extends beyond EOD, truncated [ 104.464777][ T6334] __nla_validate_parse: 4 callbacks suppressed [ 104.464794][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 104.524611][ T6351] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 104.559167][ T6356] loop3: detected capacity change from 0 to 512 [ 104.566675][ T6356] EXT4-fs: dax option not supported [ 104.575309][ T6356] tmpfs: Unknown parameter 'trans' [ 104.720170][ T6364] loop3: detected capacity change from 0 to 764 [ 104.726762][ T6366] loop0: detected capacity change from 0 to 128 [ 104.733515][ T6364] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 104.771821][ T6366] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.829651][ T6366] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.844608][ T6371] sd 0:0:1:0: device reset [ 104.868045][ T36] hid (null): unknown global tag 0xd [ 104.873429][ T36] hid (null): invalid report_count 54924 [ 104.879285][ T36] hid (null): unknown global tag 0x45 [ 104.899830][ T36] hid-generic 0005:C6A00000:0009.003C: unknown global tag 0xd [ 104.907453][ T36] hid-generic 0005:C6A00000:0009.003C: item 0 0 1 13 parsing failed [ 104.927154][ T36] hid-generic 0005:C6A00000:0009.003C: probe with driver hid-generic failed with error -22 [ 104.948937][ T6371] bond1: entered promiscuous mode [ 104.954046][ T6371] bond1: entered allmulticast mode [ 104.998254][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.008662][ T6371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.019304][ T6371] bond1 (unregistering): Released all slaves [ 105.034446][ T6375] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 105.042350][ T6375] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.994'. [ 105.065088][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 105.111486][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 105.127027][ T6387] loop1: detected capacity change from 0 to 128 [ 105.131674][ T6384] loop0: detected capacity change from 0 to 512 [ 105.143613][ T6387] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.147368][ T6384] EXT4-fs: Ignoring removed orlov option [ 105.163557][ T6387] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.180265][ T6391] loop3: detected capacity change from 0 to 2048 [ 105.190489][ T6392] loop2: detected capacity change from 0 to 256 [ 105.225521][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 105.234875][ T6392] hsr_slave_0: left promiscuous mode [ 105.240911][ T6392] hsr_slave_1: left promiscuous mode [ 105.247041][ T6391] EXT4-fs (loop3): failed to initialize system zone (-117) [ 105.254385][ T6391] EXT4-fs (loop3): mount failed [ 105.298043][ T6384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.317791][ T6384] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.338958][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 105.348948][ T6387] netlink: 'syz.1.999': attribute type 21 has an invalid length. [ 105.397630][ T6384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.998: bg 0: block 328: padding at end of block bitmap is not set [ 105.403110][ T6387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.999'. [ 105.424100][ T31] kworker/u8:1: attempt to access beyond end of device [ 105.424100][ T31] loop2: rw=1, sector=256, nr_sectors = 100 limit=256 [ 105.476664][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 105.522350][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 105.522368][ T29] audit: type=1326 audit(1760801781.142:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.575682][ T29] audit: type=1326 audit(1760801781.182:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.575825][ T6407] 9pnet: Could not find request transport: fdÿÿÿÿ [ 105.599300][ T29] audit: type=1326 audit(1760801781.182:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.629395][ T29] audit: type=1326 audit(1760801781.182:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.652650][ T29] audit: type=1326 audit(1760801781.182:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.676129][ T29] audit: type=1326 audit(1760801781.182:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.682190][ T3368] hid (null): unknown global tag 0xd [ 105.699658][ T29] audit: type=1326 audit(1760801781.182:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.699699][ T29] audit: type=1326 audit(1760801781.182:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.705022][ T3368] hid (null): invalid report_count 54924 [ 105.728595][ T29] audit: type=1326 audit(1760801781.182:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.751983][ T3368] hid (null): unknown global tag 0x45 [ 105.757669][ T29] audit: type=1326 audit(1760801781.182:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe5f978efc9 code=0x7ffc0000 [ 105.783575][ T3368] hid-generic 0005:C6A00000:0009.003D: unknown global tag 0xd [ 105.817848][ T3368] hid-generic 0005:C6A00000:0009.003D: item 0 0 1 13 parsing failed [ 105.836197][ T6412] sd 0:0:1:0: device reset [ 105.889900][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.939069][ T3368] hid-generic 0005:C6A00000:0009.003D: probe with driver hid-generic failed with error -22 [ 105.950686][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.011125][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 106.034575][ T6413] loop3: detected capacity change from 0 to 32768 [ 106.090140][ T6431] loop1: detected capacity change from 0 to 2048 [ 106.105116][ T6413] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 106.117197][ T6413] loop3: p1 start 460800 is beyond EOD, truncated [ 106.123701][ T6413] loop3: p2 size 83886080 extends beyond EOD, truncated [ 106.141827][ T6431] EXT4-fs (loop1): failed to initialize system zone (-117) [ 106.149578][ T6431] EXT4-fs (loop1): mount failed [ 106.155456][ T6413] loop3: p5 start 460800 is beyond EOD, truncated [ 106.161996][ T6413] loop3: p6 size 83886080 extends beyond EOD, truncated [ 106.197119][ T6446] loop4: detected capacity change from 0 to 1024 [ 106.204914][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 106.270560][ T6446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.285461][ T6446] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.312284][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.624813][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.633837][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.922507][ T3368] hid (null): unknown global tag 0xd [ 106.928123][ T3368] hid (null): invalid report_count 54924 [ 106.933850][ T3368] hid (null): unknown global tag 0x45 [ 106.994184][ T3368] hid-generic 0005:C6A00000:0009.003E: unknown global tag 0xd [ 107.001843][ T3368] hid-generic 0005:C6A00000:0009.003E: item 0 0 1 13 parsing failed [ 107.006410][ T6479] usb usb1: check_ctrlrecip: process 6479 (syz.4.1033) requesting ep 01 but needs 81 [ 107.019430][ T6479] usb usb1: usbfs: process 6479 (syz.4.1033) did not claim interface 0 before use [ 107.025800][ T3368] hid-generic 0005:C6A00000:0009.003E: probe with driver hid-generic failed with error -22 [ 107.049022][ T6479] loop4: detected capacity change from 0 to 2048 [ 107.079544][ T6479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.117388][ T3314] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 107.163456][ T3314] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 107.181502][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.301069][ T3368] hid (null): unknown global tag 0xd [ 107.306645][ T3368] hid (null): invalid report_count 54924 [ 107.312704][ T3368] hid (null): unknown global tag 0x45 [ 107.318983][ T6508] sd 0:0:1:0: device reset [ 107.324644][ T6492] loop3: detected capacity change from 0 to 32768 [ 107.333755][ T3368] hid-generic 0005:C6A00000:0009.003F: unknown global tag 0xd [ 107.341348][ T3368] hid-generic 0005:C6A00000:0009.003F: item 0 0 1 13 parsing failed [ 107.355271][ T6508] bond2: entered promiscuous mode [ 107.360556][ T6508] bond2: entered allmulticast mode [ 107.366082][ T6508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.373074][ T3368] hid-generic 0005:C6A00000:0009.003F: probe with driver hid-generic failed with error -22 [ 107.387779][ T6508] bond2 (unregistering): Released all slaves [ 107.387948][ T6492] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 107.399324][ T6492] loop3: p1 start 460800 is beyond EOD, truncated [ 107.405783][ T6492] loop3: p2 size 83886080 extends beyond EOD, truncated [ 107.415693][ T6492] loop3: p5 start 460800 is beyond EOD, truncated [ 107.422202][ T6492] loop3: p6 size 83886080 extends beyond EOD, truncated [ 107.450943][ T6497] loop1: detected capacity change from 0 to 32768 [ 107.478875][ T1037] hid (null): unknown global tag 0xd [ 107.484240][ T1037] hid (null): invalid report_count 54924 [ 107.490076][ T1037] hid (null): unknown global tag 0x45 [ 107.497566][ T1037] hid-generic 0005:C6A00000:0009.0040: unknown global tag 0xd [ 107.505058][ T1037] hid-generic 0005:C6A00000:0009.0040: item 0 0 1 13 parsing failed [ 107.513355][ T6497] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 107.513626][ T1037] hid-generic 0005:C6A00000:0009.0040: probe with driver hid-generic failed with error -22 [ 107.519214][ T6497] loop1: p1 start 460800 is beyond EOD, truncated [ 107.535416][ T6497] loop1: p2 size 83886080 extends beyond EOD, truncated [ 107.543885][ T6497] loop1: p5 start 460800 is beyond EOD, truncated [ 107.550444][ T6497] loop1: p6 size 83886080 extends beyond EOD, truncated [ 107.581198][ T3368] hid (null): unknown global tag 0xd [ 107.586319][ T6520] sd 0:0:1:0: device reset [ 107.586823][ T3368] hid (null): invalid report_count 54924 [ 107.597186][ T3368] hid (null): unknown global tag 0x45 [ 107.603497][ T3368] hid-generic 0005:C6A00000:0009.0041: unknown global tag 0xd [ 107.606655][ T6520] bond2: entered promiscuous mode [ 107.611046][ T3368] hid-generic 0005:C6A00000:0009.0041: item 0 0 1 13 parsing failed [ 107.616192][ T6520] bond2: entered allmulticast mode [ 107.624643][ T3368] hid-generic 0005:C6A00000:0009.0041: probe with driver hid-generic failed with error -22 [ 107.630965][ T6520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.650267][ T6520] bond2 (unregistering): Released all slaves [ 107.733809][ T6524] usb usb1: check_ctrlrecip: process 6524 (syz.4.1049) requesting ep 01 but needs 81 [ 107.743383][ T6524] usb usb1: usbfs: process 6524 (syz.4.1049) did not claim interface 0 before use [ 107.762084][ T6524] loop4: detected capacity change from 0 to 2048 [ 107.779456][ T6524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.803789][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.981847][ T6542] 9pnet_fd: Insufficient options for proto=fd [ 107.997640][ T6542] loop4: detected capacity change from 0 to 128 [ 108.043710][ T1037] hid (null): unknown global tag 0xd [ 108.049334][ T1037] hid (null): invalid report_count 54924 [ 108.055068][ T1037] hid (null): unknown global tag 0x45 [ 108.061274][ T6544] sd 0:0:1:0: device reset [ 108.067260][ T1037] hid-generic 0005:C6A00000:0009.0042: unknown global tag 0xd [ 108.074794][ T1037] hid-generic 0005:C6A00000:0009.0042: item 0 0 1 13 parsing failed [ 108.083360][ T1037] hid-generic 0005:C6A00000:0009.0042: probe with driver hid-generic failed with error -22 [ 108.167296][ T6544] bond2: entered promiscuous mode [ 108.172409][ T6544] bond2: entered allmulticast mode [ 108.184082][ T6544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.304862][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.313546][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.399753][ T6544] bond2 (unregistering): Released all slaves [ 108.805677][ T6570] loop4: detected capacity change from 0 to 1024 [ 108.812819][ T6570] EXT4-fs: Ignoring removed bh option [ 108.823129][ T6570] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 108.839707][ T6570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.871090][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.894168][ T3368] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 108.905547][ T6565] loop1: detected capacity change from 0 to 32768 [ 108.912485][ T3368] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.955801][ T6580] 9pnet_fd: Insufficient options for proto=fd [ 108.957661][ T6565] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 108.967475][ T6565] loop1: p1 start 460800 is beyond EOD, truncated [ 108.973968][ T6565] loop1: p2 size 83886080 extends beyond EOD, truncated [ 108.982852][ T6565] loop1: p5 start 460800 is beyond EOD, truncated [ 108.989362][ T6565] loop1: p6 size 83886080 extends beyond EOD, truncated [ 108.991363][ T6580] loop4: detected capacity change from 0 to 128 [ 109.071388][ T3495] hid (null): unknown global tag 0xd [ 109.075304][ T6582] sd 0:0:1:0: device reset [ 109.076750][ T3495] hid (null): invalid report_count 54924 [ 109.076795][ T3495] hid (null): unknown global tag 0x45 [ 109.085100][ T3368] hid (null): unknown global tag 0xd [ 109.089156][ T3495] hid-generic 0005:C6A00000:0009.0044: unknown global tag 0xd [ 109.092370][ T3368] hid (null): invalid report_count 54924 [ 109.097804][ T3495] hid-generic 0005:C6A00000:0009.0044: item 0 0 1 13 parsing failed [ 109.098063][ T3495] hid-generic 0005:C6A00000:0009.0044: probe with driver hid-generic failed with error -22 [ 109.105606][ T3368] hid (null): unknown global tag 0x45 [ 109.134078][ T6582] bond2: entered promiscuous mode [ 109.136137][ T3368] hid-generic 0005:C6A00000:0009.0045: unknown global tag 0xd [ 109.139951][ T6582] bond2: entered allmulticast mode [ 109.147423][ T3368] hid-generic 0005:C6A00000:0009.0045: item 0 0 1 13 parsing failed [ 109.153439][ T6584] sd 0:0:1:0: device reset [ 109.165371][ T3368] hid-generic 0005:C6A00000:0009.0045: probe with driver hid-generic failed with error -22 [ 109.165667][ T6582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.186254][ T6582] bond2 (unregistering): Released all slaves [ 109.242822][ T6584] bond1: entered promiscuous mode [ 109.247999][ T6584] bond1: entered allmulticast mode [ 109.253464][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.257550][ T6589] 9pnet: Could not find request transport: fdÿÿÿÿ [ 109.283584][ T6584] bond1 (unregistering): Released all slaves [ 109.394311][ T3368] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 109.410640][ T3368] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.525241][ T6615] usb usb1: check_ctrlrecip: process 6615 (syz.1.1085) requesting ep 01 but needs 81 [ 109.535182][ T6615] usb usb1: usbfs: process 6615 (syz.1.1085) did not claim interface 0 before use [ 109.575060][ T6605] __nla_validate_parse: 3 callbacks suppressed [ 109.575080][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 109.592039][ T6615] loop1: detected capacity change from 0 to 2048 [ 109.608671][ T6615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.637186][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.732307][ T6616] loop2: detected capacity change from 0 to 32768 [ 109.775895][ T6636] 9pnet_fd: Insufficient options for proto=fd [ 109.784358][ T3495] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 109.792402][ T6616] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 109.798067][ T3495] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.807835][ T6616] loop2: p1 start 460800 is beyond EOD, truncated [ 109.814454][ T6616] loop2: p2 size 83886080 extends beyond EOD, truncated [ 109.825222][ T6616] loop2: p5 start 460800 is beyond EOD, truncated [ 109.831905][ T6616] loop2: p6 size 83886080 extends beyond EOD, truncated [ 109.841377][ T6641] sd 0:0:1:0: device reset [ 109.875439][ T6648] usb usb1: check_ctrlrecip: process 6648 (syz.1.1097) requesting ep 01 but needs 81 [ 109.885205][ T6648] usb usb1: usbfs: process 6648 (syz.1.1097) did not claim interface 0 before use [ 109.904361][ T6648] loop1: detected capacity change from 0 to 2048 [ 109.918687][ T6648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.946411][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.946794][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 109.989196][ T3495] hid (null): unknown global tag 0xd [ 109.994595][ T3495] hid (null): invalid report_count 54924 [ 109.997683][ T6657] sd 0:0:1:0: device reset [ 110.000461][ T3495] hid (null): unknown global tag 0x45 [ 110.011244][ T3495] hid-generic 0005:C6A00000:0009.0048: unknown global tag 0xd [ 110.018793][ T3495] hid-generic 0005:C6A00000:0009.0048: item 0 0 1 13 parsing failed [ 110.019166][ T6657] bond2: entered promiscuous mode [ 110.027712][ T3495] hid-generic 0005:C6A00000:0009.0048: probe with driver hid-generic failed with error -22 [ 110.032147][ T6657] bond2: entered allmulticast mode [ 110.047823][ T6657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.057728][ T6657] bond2 (unregistering): Released all slaves [ 110.141850][ T6667] loop1: detected capacity change from 0 to 2048 [ 110.161517][ T6667] EXT4-fs (loop1): failed to initialize system zone (-117) [ 110.169280][ T6667] EXT4-fs (loop1): mount failed [ 110.176502][ T6673] 9pnet_fd: Insufficient options for proto=fd [ 110.191551][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 110.213416][ T3495] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 110.237124][ T3495] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.301765][ T6685] usb usb1: check_ctrlrecip: process 6685 (syz.4.1109) requesting ep 01 but needs 81 [ 110.311417][ T6685] usb usb1: usbfs: process 6685 (syz.4.1109) did not claim interface 0 before use [ 110.339322][ T6685] loop4: detected capacity change from 0 to 2048 [ 110.350458][ T6687] loop0: detected capacity change from 0 to 2048 [ 110.369557][ T6685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.382633][ T6687] EXT4-fs (loop0): failed to initialize system zone (-117) [ 110.403785][ T6687] EXT4-fs (loop0): mount failed [ 110.407611][ T3314] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 110.423630][ T3314] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 110.444656][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.462068][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 110.545556][ T36] hid (null): unknown global tag 0xd [ 110.551138][ T36] hid (null): invalid report_count 54924 [ 110.556994][ T36] hid (null): unknown global tag 0x45 [ 110.563609][ T36] hid-generic 0005:C6A00000:0009.004A: unknown global tag 0xd [ 110.571316][ T36] hid-generic 0005:C6A00000:0009.004A: item 0 0 1 13 parsing failed [ 110.580828][ T36] hid-generic 0005:C6A00000:0009.004A: probe with driver hid-generic failed with error -22 [ 110.597605][ T6705] bond2: entered promiscuous mode [ 110.602824][ T6705] bond2: entered allmulticast mode [ 110.608332][ T6705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.619439][ T6705] bond2 (unregistering): Released all slaves [ 110.630433][ T36] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 110.639129][ T36] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.823481][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 110.823498][ T29] audit: type=1326 audit(1760801786.442:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 110.854108][ T29] audit: type=1326 audit(1760801786.452:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 110.857868][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'. [ 110.877689][ T29] audit: type=1326 audit(1760801786.452:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 110.910013][ T29] audit: type=1326 audit(1760801786.452:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 110.933535][ T29] audit: type=1326 audit(1760801786.452:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 110.957071][ T29] audit: type=1326 audit(1760801786.452:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 110.981413][ T29] audit: type=1326 audit(1760801786.452:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 111.005027][ T29] audit: type=1326 audit(1760801786.452:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 111.028635][ T29] audit: type=1326 audit(1760801786.452:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 111.052162][ T29] audit: type=1326 audit(1760801786.452:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 111.080949][ T36] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 111.145434][ T36] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.183441][ T6745] bond2: entered promiscuous mode [ 111.188748][ T6745] bond2: entered allmulticast mode [ 111.197146][ T6745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.201629][ T36] hid (null): unknown global tag 0xd [ 111.209202][ T36] hid (null): invalid report_count 54924 [ 111.215500][ T36] hid (null): unknown global tag 0x45 [ 111.222990][ T36] hid-generic 0005:C6A00000:0009.004D: unknown global tag 0xd [ 111.230624][ T36] hid-generic 0005:C6A00000:0009.004D: item 0 0 1 13 parsing failed [ 111.232328][ T6745] bond2 (unregistering): Released all slaves [ 111.239549][ T36] hid-generic 0005:C6A00000:0009.004D: probe with driver hid-generic failed with error -22 [ 111.348832][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 111.398666][ T3495] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 111.412081][ T3495] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.470697][ T6780] loop3: detected capacity change from 0 to 2048 [ 111.487186][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1143'. [ 111.497996][ T6780] EXT4-fs (loop3): failed to initialize system zone (-117) [ 111.505308][ T6780] EXT4-fs (loop3): mount failed [ 111.577092][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 111.594227][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.603040][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.866526][ T6792] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1148'. [ 112.190301][ T36] hid (null): unknown global tag 0xd [ 112.195741][ T36] hid (null): invalid report_count 54924 [ 112.201504][ T36] hid (null): unknown global tag 0x45 [ 112.220834][ T6803] bond2: entered promiscuous mode [ 112.225951][ T6803] bond2: entered allmulticast mode [ 112.232063][ T36] hid-generic 0005:C6A00000:0009.004F: unknown global tag 0xd [ 112.239678][ T36] hid-generic 0005:C6A00000:0009.004F: item 0 0 1 13 parsing failed [ 112.241021][ T6806] usb usb1: check_ctrlrecip: process 6806 (syz.1.1154) requesting ep 01 but needs 81 [ 112.250757][ T6803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.257341][ T6806] usb usb1: usbfs: process 6806 (syz.1.1154) did not claim interface 0 before use [ 112.264327][ T36] hid-generic 0005:C6A00000:0009.004F: probe with driver hid-generic failed with error -22 [ 112.288207][ T6803] bond2 (unregistering): Released all slaves [ 112.303584][ T6806] loop1: detected capacity change from 0 to 2048 [ 112.312542][ T3495] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 112.324087][ T3495] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.370718][ T6806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.410037][ T6822] loop0: detected capacity change from 0 to 1024 [ 112.412372][ T3312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 112.417271][ T6822] EXT4-fs: Ignoring removed bh option [ 112.438108][ T6822] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 112.438501][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1158'. [ 112.448871][ T3312] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 112.469430][ T6822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.486461][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.529625][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.586375][ T6838] usb usb1: check_ctrlrecip: process 6838 (syz.1.1164) requesting ep 01 but needs 81 [ 112.596059][ T6838] usb usb1: usbfs: process 6838 (syz.1.1164) did not claim interface 0 before use [ 112.627075][ T6838] loop1: detected capacity change from 0 to 2048 [ 112.633704][ T6840] sd 0:0:1:0: device reset [ 112.650498][ T6838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.685649][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.729863][ T10] hid (null): unknown global tag 0xd [ 112.735253][ T10] hid (null): invalid report_count 54924 [ 112.741195][ T10] hid (null): unknown global tag 0x45 [ 112.753792][ T6848] bond1: entered promiscuous mode [ 112.758916][ T6848] bond1: entered allmulticast mode [ 112.765063][ T10] hid-generic 0005:C6A00000:0009.0051: unknown global tag 0xd [ 112.772589][ T10] hid-generic 0005:C6A00000:0009.0051: item 0 0 1 13 parsing failed [ 112.790230][ T6848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.797694][ T10] hid-generic 0005:C6A00000:0009.0051: probe with driver hid-generic failed with error -22 [ 112.811898][ T6848] bond1 (unregistering): Released all slaves [ 113.201283][ T6864] loop1: detected capacity change from 0 to 1024 [ 113.245042][ T6864] EXT4-fs: Ignoring removed bh option [ 113.281670][ T6864] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 113.304016][ T6866] 9pnet_fd: Insufficient options for proto=fd [ 113.340687][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.349213][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.363657][ T6864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.501669][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.513655][ T6871] sd 0:0:1:0: device reset [ 113.625554][ T6883] loop1: detected capacity change from 0 to 2048 [ 113.637392][ T6882] loop3: detected capacity change from 0 to 1024 [ 113.644654][ T6882] EXT4-fs: Ignoring removed oldalloc option [ 113.650893][ T6882] EXT4-fs: Ignoring removed bh option [ 113.671784][ T6882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.687357][ T6883] EXT4-fs (loop1): failed to initialize system zone (-117) [ 113.697379][ T6883] EXT4-fs (loop1): mount failed [ 113.699116][ T6891] loop4: detected capacity change from 0 to 2048 [ 113.719339][ T6891] EXT4-fs (loop4): failed to initialize system zone (-117) [ 113.727710][ T6891] EXT4-fs (loop4): mount failed [ 113.805335][ T3495] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 113.819239][ T3495] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.829678][ T6900] loop4: detected capacity change from 0 to 1024 [ 113.836802][ T6900] EXT4-fs: Ignoring removed bh option [ 113.843422][ T6900] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 113.860196][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.906818][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.951359][ T6910] sd 0:0:1:0: device reset [ 114.297151][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.305805][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.542374][ T36] hid (null): unknown global tag 0xd [ 114.547811][ T36] hid (null): invalid report_count 54924 [ 114.553524][ T36] hid (null): unknown global tag 0x45 [ 114.561344][ T6925] sd 0:0:1:0: device reset [ 114.633536][ T6925] bond1: entered promiscuous mode [ 114.638728][ T6925] bond1: entered allmulticast mode [ 114.661031][ T36] hid-generic 0005:C6A00000:0009.0053: unknown global tag 0xd [ 114.668696][ T36] hid-generic 0005:C6A00000:0009.0053: item 0 0 1 13 parsing failed [ 114.715534][ T6925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.769871][ T36] hid-generic 0005:C6A00000:0009.0053: probe with driver hid-generic failed with error -22 [ 114.801076][ T6925] bond1 (unregistering): Released all slaves [ 114.966754][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.992470][ T6932] loop3: detected capacity change from 0 to 1024 [ 114.999617][ T6932] EXT4-fs: Ignoring removed bh option [ 115.005757][ T6932] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 115.018201][ T6928] __nla_validate_parse: 4 callbacks suppressed [ 115.018259][ T6928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1198'. [ 115.034981][ T6932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.039660][ T6939] loop2: detected capacity change from 0 to 2048 [ 115.066018][ T6939] EXT4-fs (loop2): failed to initialize system zone (-117) [ 115.066195][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.074622][ T6939] EXT4-fs (loop2): mount failed [ 115.097529][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 115.199041][ T6959] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 115.250282][ T6966] loop3: detected capacity change from 0 to 512 [ 115.256875][ T6966] EXT4-fs: dax option not supported [ 115.266857][ T6966] tmpfs: Unknown parameter 'trans' [ 115.341586][ T6970] loop3: detected capacity change from 0 to 1024 [ 115.348527][ T6970] EXT4-fs: Ignoring removed bh option [ 115.354454][ T6970] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 115.369366][ T6970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.413604][ T3320] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 115.427778][ T3320] EXT4-fs error (device loop3): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /250/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 115.450195][ T3320] EXT4-fs (loop3): Remounting filesystem read-only [ 115.459018][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.628294][ T6985] loop3: detected capacity change from 0 to 2048 [ 115.640668][ T6985] EXT4-fs (loop3): failed to initialize system zone (-117) [ 115.648287][ T6985] EXT4-fs (loop3): mount failed [ 115.686811][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 115.896039][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 115.896059][ T29] audit: type=1326 audit(1760801791.512:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 115.926037][ T29] audit: type=1326 audit(1760801791.512:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 115.949725][ T29] audit: type=1326 audit(1760801791.512:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 115.973166][ T29] audit: type=1326 audit(1760801791.512:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 115.996618][ T29] audit: type=1326 audit(1760801791.512:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 116.020252][ T29] audit: type=1326 audit(1760801791.512:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 116.066078][ T29] audit: type=1326 audit(1760801791.552:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 116.089586][ T29] audit: type=1326 audit(1760801791.552:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 116.113313][ T29] audit: type=1326 audit(1760801791.552:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62478fda7f code=0x7ffc0000 [ 116.136812][ T29] audit: type=1326 audit(1760801791.552:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62478fefc9 code=0x7ffc0000 [ 116.218185][ T6998] loop4: detected capacity change from 0 to 1024 [ 116.264654][ T6998] EXT4-fs: Ignoring removed bh option [ 116.270644][ T6998] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 116.288923][ T6998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.373713][ T3314] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /253/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 116.396315][ T3314] EXT4-fs (loop4): Remounting filesystem read-only [ 116.408636][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.448384][ T7014] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1232'. [ 116.543050][ T7028] usb usb1: check_ctrlrecip: process 7028 (syz.2.1238) requesting ep 01 but needs 81 [ 116.552700][ T7028] usb usb1: usbfs: process 7028 (syz.2.1238) did not claim interface 0 before use [ 116.589726][ T7028] loop2: detected capacity change from 0 to 2048 [ 116.596254][ T7031] loop4: detected capacity change from 0 to 2048 [ 116.613348][ T7031] EXT4-fs (loop4): failed to initialize system zone (-117) [ 116.622184][ T7031] EXT4-fs (loop4): mount failed [ 116.640637][ T3318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 116.655552][ T3318] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 116.671982][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 116.742481][ T7048] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1246'. [ 116.886572][ T7065] usb usb1: check_ctrlrecip: process 7065 (syz.4.1254) requesting ep 01 but needs 81 [ 116.896154][ T7065] usb usb1: usbfs: process 7065 (syz.4.1254) did not claim interface 0 before use [ 116.897417][ T7070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1252'. [ 116.948412][ T7065] loop4: detected capacity change from 0 to 2048 [ 116.953083][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 116.994606][ T7077] loop2: detected capacity change from 0 to 1024 [ 117.001930][ T7077] EXT4-fs: Ignoring removed oldalloc option [ 117.008034][ T7077] EXT4-fs: Ignoring removed bh option [ 117.025858][ T3314] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 117.058989][ T3314] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 117.385409][ T7098] loop4: detected capacity change from 0 to 512 [ 117.393105][ T7098] EXT4-fs: dax option not supported [ 117.403366][ T7098] tmpfs: Unknown parameter 'trans' [ 117.463660][ T7100] loop0: detected capacity change from 0 to 1024 [ 117.472773][ T7100] EXT4-fs: Ignoring removed bh option [ 117.479713][ T7100] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 117.633712][ T7113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1268'. [ 117.676884][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 117.911409][ T7077] ================================================================== [ 117.919557][ T7077] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 117.927586][ T7077] [ 117.929950][ T7077] write to 0xffff888119c0edfc of 4 bytes by task 7083 on cpu 0: [ 117.937607][ T7077] xas_set_mark+0x12b/0x140 [ 117.942248][ T7077] tag_pages_for_writeback+0xc2/0x290 [ 117.947672][ T7077] ext4_do_writepages+0x6b2/0x2750 [ 117.952842][ T7077] ext4_writepages+0x176/0x300 [ 117.957701][ T7077] do_writepages+0x1c6/0x310 [ 117.962419][ T7077] file_write_and_wait_range+0x156/0x2c0 [ 117.968101][ T7077] generic_buffers_fsync_noflush+0x45/0x120 [ 117.974034][ T7077] ext4_sync_file+0x1ab/0x690 [ 117.978729][ T7077] vfs_fsync_range+0x10d/0x130 [ 117.983511][ T7077] ext4_buffered_write_iter+0x34f/0x3c0 [ 117.989086][ T7077] ext4_file_write_iter+0x387/0xf60 [ 117.994309][ T7077] iter_file_splice_write+0x666/0xa60 [ 117.999697][ T7077] direct_splice_actor+0x156/0x2a0 [ 118.004816][ T7077] splice_direct_to_actor+0x312/0x680 [ 118.010293][ T7077] do_splice_direct+0xda/0x150 [ 118.015070][ T7077] do_sendfile+0x380/0x650 [ 118.019514][ T7077] __x64_sys_sendfile64+0x105/0x150 [ 118.024740][ T7077] x64_sys_call+0x2bb4/0x3000 [ 118.029427][ T7077] do_syscall_64+0xd2/0x200 [ 118.033943][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.039849][ T7077] [ 118.042179][ T7077] read to 0xffff888119c0edfc of 4 bytes by task 7077 on cpu 1: [ 118.049810][ T7077] file_write_and_wait_range+0x10e/0x2c0 [ 118.055463][ T7077] generic_buffers_fsync_noflush+0x45/0x120 [ 118.061376][ T7077] ext4_sync_file+0x1ab/0x690 [ 118.066065][ T7077] vfs_fsync_range+0x10d/0x130 [ 118.070848][ T7077] ext4_buffered_write_iter+0x34f/0x3c0 [ 118.076403][ T7077] ext4_file_write_iter+0x387/0xf60 [ 118.081625][ T7077] iter_file_splice_write+0x666/0xa60 [ 118.087069][ T7077] direct_splice_actor+0x156/0x2a0 [ 118.092192][ T7077] splice_direct_to_actor+0x312/0x680 [ 118.097580][ T7077] do_splice_direct+0xda/0x150 [ 118.102385][ T7077] do_sendfile+0x380/0x650 [ 118.106832][ T7077] __x64_sys_sendfile64+0x105/0x150 [ 118.112193][ T7077] x64_sys_call+0x2bb4/0x3000 [ 118.116982][ T7077] do_syscall_64+0xd2/0x200 [ 118.121502][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.127428][ T7077] [ 118.129758][ T7077] value changed: 0x02000021 -> 0x04000021 [ 118.135477][ T7077] [ 118.137799][ T7077] Reported by Kernel Concurrency Sanitizer on: [ 118.143961][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.2.1257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.153685][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.163771][ T7077] ================================================================== [ 118.260460][ T3318] EXT4-fs unmount: 7 callbacks suppressed [ 118.260480][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.