last executing test programs: 1.84702485s ago: executing program 0 (id=3558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r1, 0x0, 0x100800001) 1.84518332s ago: executing program 3 (id=3559): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 1.792759005s ago: executing program 0 (id=3561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 1.730980541s ago: executing program 3 (id=3563): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 1.718556302s ago: executing program 3 (id=3565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.692762844s ago: executing program 3 (id=3566): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x784, &(0x7f00000007c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0xac17c, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66fccf0e515e4c22bae6d602001b00000000000000000001", [0x1000000000]}) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x8008, 0x0, 0x0) 1.344199696s ago: executing program 3 (id=3575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$eJzs3U9oI9UfAPBvOmnSXfj9tjdREKI3Qct2b3qxRbqw2ItK8M9BDG5XJa1Ci8X2sG09KB4Fj3rypqAHD+JRBEW8efDqCrIqHrS3BRefTCaTTJu02y5WKX4+0PTlvfed73cmQzINyetzc9G9PBlXdnevx9RULepzj8zFjVpMRxal7RjVGNMHAJwON1KK31PhiCG1Ey4JADhhvdf/FyKiFdNFz+tfHjY/efUHgFOv//f/mcPmTB008MqJlAQAnLCR9//v3TPc6P3Uy7v1yqcCAIDT6omnn3l0fjHi8VZrKmLlzfX2ejseGo7PX4mXYjmW4nyci5sRxYVCflPr3V68tLhwvtVqbcVP09GOiIl+YLu4UpjPevHNmB2MDK42UkrZxU8WF2ZbPRGxvdXLHyu19fZknO3n//5sLA0vPKbLIqJ3c2lx4UKrv4H2Shm/FbEzfN8ir38mzsW3zw82k1L5CcbFhauzE/07w/j1djMuD47Cge+AAAAAAAAAAAAAAAAAAAAAAADAbZlpDUwP1s9J+e9ipZyZmTHjvfVxivj++kA7xfpAqZkipd9ee6D9VhZ71gfavz7PuoUEAQAAAAAAAAAAAAAAAAAAYGBtoxGd5eWl1bWNzW61sbW6tjEREXnPy19/9MWZGJ1zi0a9SNGMGKRo9dNudjspKyenLGI0PMuTlz0ffDqouDqnOdiLsWU0xw/tRt743z0/vjscujsrt/zncHIW43cwq5Tx8L6kK/8vSjrOgRo0LlR7mqPZr6WUKj1vVMOvPju6wahF1I//wG12J+LgOSlvfHX9xTvLo9/5PBXuu//ck9feef+Xbmc5zxy9R7CxunYzdTu1cvLxDkt+qMueWhSNWvVMqB8WvrO3p5N99+tTd739zdGyp2rPq/n5vG9OVuzOx/vDG0UjLzNvNIZny5lh+GR/J5aXJsec/Ldq3MZjesd7n32Y0g8/HzlFIa9+YuRpo/b3PQMBAAAAAAAAAAAAAAAAAAClynfF+/pf9p08LOrBx06+MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD45wz//3+lsbMd+3qO0vhja0xUc2l1LaLxb+8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/cX8FAAD//zbhVeI=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x2000000, 0x2}) 1.127124366s ago: executing program 2 (id=3582): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 1.072376411s ago: executing program 2 (id=3583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 1.044188874s ago: executing program 2 (id=3584): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x3328, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x30}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 1.022220296s ago: executing program 1 (id=3585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 972.385801ms ago: executing program 0 (id=3586): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x690e, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xe209}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) 948.886073ms ago: executing program 0 (id=3587): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x25dfdbfb, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 895.336048ms ago: executing program 3 (id=3588): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 894.613948ms ago: executing program 1 (id=3589): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 858.455381ms ago: executing program 1 (id=3591): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r3, 0x4b48, &(0x7f0000003d40)=""/160) 826.377984ms ago: executing program 1 (id=3592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) 475.929356ms ago: executing program 1 (id=3602): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 422.264701ms ago: executing program 2 (id=3594): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) 394.597004ms ago: executing program 2 (id=3595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000003c0), 0x2, 0x4e6, &(0x7f0000000840)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 394.214954ms ago: executing program 4 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1d93, &(0x7f0000010400), &(0x7f0000010080), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 332.284819ms ago: executing program 1 (id=3597): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_setup(0xb, &(0x7f0000000080)=0x0) io_destroy(r2) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x9, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f91b4847f70e06d038e7ff7fc6e5539b3265078b089b3b083872090890e0878f0e1ac6e7049b3367959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31300d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f097e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f028dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffebd}}, 0x1006) 300.730462ms ago: executing program 4 (id=3598): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 279.887424ms ago: executing program 4 (id=3599): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=';', 0x1}], 0x1}, 0x24008011) sendmsg$inet(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="cd", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) 261.795136ms ago: executing program 4 (id=3600): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x200}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x4c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 113.10037ms ago: executing program 4 (id=3601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r3, 0x4b48, &(0x7f0000003d40)=""/160) 88.660612ms ago: executing program 0 (id=3603): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f0000a98000/0x5000)=nil, 0x0) madvise(&(0x7f00009a1000/0x4000)=nil, 0x4000, 0x0) 38.712377ms ago: executing program 2 (id=3604): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x784, &(0x7f00000007c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0xac17c, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66fccf0e515e4c22bae6d602001b00000000000000000001", [0x1000000000]}) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x8008, 0x0, 0x0) 12.515479ms ago: executing program 4 (id=3605): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) 0s ago: executing program 0 (id=3614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000003c0), 0x2, 0x4e6, &(0x7f0000000840)="$eJzs3MtrXNUfAPDvvUnapo9f8qvPPrSjVQyKTZM+Fy6sKHQjCIrUZUzSUpu20kRoS7BRpIILpX+Bj53gX+BKN6LiQnGruBWhSDatLmTkztwbZzozeXWSaZPPB6Y9595z7znn3nuS85ibANatUvZPErE1In6JiL5qtD5Bqfrfzdnp0b9mp0eTKJdf/jOppLsxOz1aJC2O25JHBtKI9L0kdjXJd/LS5TMjExPjF/L44FSah86OnBo/NX5u+OjRgwd6jxwePtSWemZlurHz7fO7dxx/7dqLoyeuvf7dF1l5y/n+2npU9S8xh66GLaUo1V/LGo8v8ex3um014aQ7+zftXGFYtOypzW5XT6X995VzlX198cK7RboNnSwksCKyxr6xYevc77KZcq0kqR4ArBGJJg3rVPGL/sZsNlKdHm0cBzfR3dYuSEddPxaVCmX1vpl/qnu6KyPYUn91bNSzQvnfGxEnZv7+OPtE03kIAID2+upYxOa831F8qnvSuL8m3f/yWaH+iPh/RGyPiHvy/st9EZW0D0TEgzXHJPl60nxKt8Qb+z8/9eaB2u5q22T9v2fyta36/t/c+kV/Vx7bVql/T3Ly9MT4/vyaDETPxiw+1HjquWm1r5//+aNW+Zdq+n/ZJ8u/6Avm5fij+5YJurGRqZHbrXfh+juVC3ulsf5JdCdFKGJHROxcxvmza3b6yc93t9pfV/+sng31/7D1ydswDil/GvFE9f7PxC31j3zdI6msT559c3Dy0uWnT9euTw4dOTx8aHBTTIzvHyyeikbf/3j1pTzYMIxY+P6vrOz+b276/M+tXPYnteu1k0vP4+qv77cc0yz3+d+QvFIJF+tSF0empi4MRWxIZhq3D/937MWR3rr0Wf0H9jZv/9sj/vkkP25XRGQP8UMR8XBE7MnL/khEPBoRe+ep/7fPPfZGqyHknXD/x5Z0/1sFnv0hovmurjPffNmQ8QelRdY/u/8HK6GBfMvYyNSmheo1X0lrA7d9AQEAAOAusCcitkaS7svnOLdGmu7bF7FlbgZlcuqpk+ffOjdWfUegP3rSYqarr2Y+dCifG87i2VHDNfFs/4HKvHG5XC73ZvFs/D6xrbNVh3VvS4v2n/m98ZUWYK1Z0jpaqzfagLvS8tfR2/+FDGB1raHv8wNLpP3D+rXo9r9Sb8EBHdOs/V+JuNmBogCrrFn7f7UD5QBWn/E/rF/aP6xbC75MC6xJi3pJfhmB7cfnSZN0r0ymrQNp1G3JfuLV/RWA/ogicfEFx/lP+Fsa0Z4SdrW1pr119zRtmmZTtCOvSBdM072EP8SwuoH0zihGNbAxIhZ4eucetitF4PJKF6zSCD7r7E8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2/dvAAAA//+lFtmI") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") kernel console output (not intermixed with test programs): m="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 158.113059][ T29] audit: type=1326 audit(1726938411.128:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.113736][T20243] loop3: detected capacity change from 0 to 128 [ 158.136629][ T29] audit: type=1326 audit(1726938411.128:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.166428][ T29] audit: type=1326 audit(1726938411.128:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.190226][ T29] audit: type=1326 audit(1726938411.128:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.213389][ T29] audit: type=1326 audit(1726938411.128:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.220405][T20243] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.236436][ T29] audit: type=1326 audit(1726938411.128:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.251076][T20243] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.271336][ T29] audit: type=1326 audit(1726938411.128:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.303492][ T29] audit: type=1326 audit(1726938411.128:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.326889][ T29] audit: type=1326 audit(1726938411.128:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc6def9 code=0x7ffc0000 [ 158.512907][T20274] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 158.613804][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2865'. [ 158.677693][T20326] vhci_hcd: invalid port number 97 [ 158.682855][T20326] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 158.812167][T20351] loop1: detected capacity change from 0 to 512 [ 158.833059][T20351] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.851362][T20360] loop4: detected capacity change from 0 to 1024 [ 158.890661][T20368] loop1: detected capacity change from 0 to 512 [ 158.912170][T20368] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.912789][T18220] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 158.936763][T18220] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 158.970483][T20368] Process accounting resumed [ 158.976271][T20368] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 159.025336][T20382] loop0: detected capacity change from 0 to 512 [ 159.038711][T20382] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.050588][T20382] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 159.079910][T20392] bond_slave_0: entered promiscuous mode [ 159.085670][T20392] bond_slave_1: entered promiscuous mode [ 159.091718][T20392] bond_slave_0: left promiscuous mode [ 159.097168][T20392] bond_slave_1: left promiscuous mode [ 159.115629][T20394] loop7: detected capacity change from 0 to 16384 [ 159.174836][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.234312][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.316212][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.337231][T20399] loop7: detected capacity change from 16384 to 16383 [ 159.366329][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.405348][T20419] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 159.427235][T20404] Invalid logical block size (65472) [ 159.434456][T20405] gre0 speed is unknown, defaulting to 1000 [ 159.447715][ T36] bridge_slave_1: left allmulticast mode [ 159.453447][ T36] bridge_slave_1: left promiscuous mode [ 159.459222][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.472823][ T36] bridge_slave_0: left allmulticast mode [ 159.478548][ T36] bridge_slave_0: left promiscuous mode [ 159.484232][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.610328][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.621385][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.632699][ T36] bond0 (unregistering): Released all slaves [ 159.640796][T20405] lo speed is unknown, defaulting to 1000 [ 159.640843][T20441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2905'. [ 159.721733][ T36] hsr_slave_0: left promiscuous mode [ 159.730087][ T36] hsr_slave_1: left promiscuous mode [ 159.736047][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.743682][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.755733][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.763220][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.775161][ T36] veth1_macvtap: left promiscuous mode [ 159.780966][ T36] veth0_macvtap: left promiscuous mode [ 159.786618][ T36] veth1_vlan: left promiscuous mode [ 159.791958][ T36] veth0_vlan: left promiscuous mode [ 159.991886][ T36] team0 (unregistering): Port device team_slave_1 removed [ 160.013400][ T36] team0 (unregistering): Port device team_slave_0 removed [ 160.097458][T20534] syz.1.2920[20534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.097527][T20534] syz.1.2920[20534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.142651][T11147] lo speed is unknown, defaulting to 1000 [ 160.183136][T20405] chnl_net:caif_netlink_parms(): no params data found [ 160.199518][T20574] loop1: detected capacity change from 0 to 512 [ 160.219845][T20574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.245280][T20574] EXT4-fs (loop1): 1 truncate cleaned up [ 160.303494][T20405] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.310662][T20405] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.323515][T20405] bridge_slave_0: entered allmulticast mode [ 160.330368][T20405] bridge_slave_0: entered promiscuous mode [ 160.341392][T20405] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.348529][T20405] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.355796][T20405] bridge_slave_1: entered allmulticast mode [ 160.362793][T20405] bridge_slave_1: entered promiscuous mode [ 160.384777][T20405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.397121][T20405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.422069][T20574] EXT4-fs (loop1): shut down requested (0) [ 160.435618][T20405] team0: Port device team_slave_0 added [ 160.470723][T20405] team0: Port device team_slave_1 added [ 160.505830][T20405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.512897][T20405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.538972][T20405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.550596][T20405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.557624][T20405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.583654][T20405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.596935][T20705] netlink: 'syz.0.2924': attribute type 21 has an invalid length. [ 160.642180][T20405] hsr_slave_0: entered promiscuous mode [ 160.663311][T20405] hsr_slave_1: entered promiscuous mode [ 160.687482][T20405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.695075][T20405] Cannot create hsr debugfs directory [ 160.710871][T20758] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.012723][T20857] loop0: detected capacity change from 0 to 1024 [ 161.019524][T20857] EXT4-fs: Ignoring removed orlov option [ 161.025275][T20857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.103486][T20405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.116745][T20405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.129909][T20405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.139817][T20405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.186284][T20405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.200682][T20405] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.213318][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.220482][ T7401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.239474][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.246561][ T7401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.270834][T20405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.281358][T20405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.330801][T20904] bridge0: port 3(veth0_to_bond) entered blocking state [ 161.337857][T20904] bridge0: port 3(veth0_to_bond) entered disabled state [ 161.345159][T20904] veth0_to_bond: entered allmulticast mode [ 161.351924][T20904] veth0_to_bond: entered promiscuous mode [ 161.367492][T20904] bridge0: port 3(veth0_to_bond) entered blocking state [ 161.374526][T20904] bridge0: port 3(veth0_to_bond) entered forwarding state [ 161.380309][T20912] loop0: detected capacity change from 0 to 512 [ 161.386078][T20904] veth0_to_bond: left allmulticast mode [ 161.393667][T20904] veth0_to_bond: left promiscuous mode [ 161.399368][T20904] bridge0: port 3(veth0_to_bond) entered disabled state [ 161.410907][T20912] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 161.414510][T20405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.430689][T20912] EXT4-fs (loop0): Remounting filesystem read-only [ 161.442609][T20912] EXT4-fs (loop0): 1 truncate cleaned up [ 161.459586][T20912] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 161.488178][T20923] tipc: Invalid UDP bearer configuration [ 161.488193][T20923] tipc: Enabling of bearer rejected, failed to enable media [ 161.510086][T20926] SELinux: policydb version 0 does not match my version range 15-33 [ 161.526184][T20926] SELinux: failed to load policy [ 161.539995][T20929] syz.3.2962[20929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.540130][T20929] syz.3.2962[20929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.563896][T20933] loop0: detected capacity change from 0 to 512 [ 161.589417][T20933] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.598740][T20935] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2964'. [ 161.613396][T20933] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.2963: path /79/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 161.646809][T20933] EXT4-fs (loop0): Remounting filesystem read-only [ 161.670883][T20405] veth0_vlan: entered promiscuous mode [ 161.680544][T20405] veth1_vlan: entered promiscuous mode [ 161.700581][T20405] veth0_macvtap: entered promiscuous mode [ 161.712272][T20405] veth1_macvtap: entered promiscuous mode [ 161.735139][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.745788][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.755715][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.766175][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.776184][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.786685][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.796652][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.807215][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.817168][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.827663][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.837537][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.848030][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.857877][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.868346][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.880651][T20405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.891052][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.901632][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.911568][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.922257][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.932165][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.942652][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.952613][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.963108][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.973053][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.983639][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.993533][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.004113][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.013977][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.024448][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.034289][T20405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.044755][T20405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.056967][T20405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.075234][T20405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.084052][T20405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.092971][T20405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.101819][T20405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.215746][T20967] loop4: detected capacity change from 0 to 512 [ 162.249354][T20967] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.271339][T20967] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 162.436914][T20989] syz.1.2980[20989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.439476][T20989] syz.1.2980[20989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.546502][T20995] loop4: detected capacity change from 0 to 512 [ 162.567001][T20998] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2984'. [ 162.593579][T20995] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.628817][T21008] loop1: detected capacity change from 0 to 128 [ 162.670167][T21019] netlink: 'syz.1.2992': attribute type 15 has an invalid length. [ 162.780445][T21037] loop1: detected capacity change from 0 to 512 [ 162.787597][T21037] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 162.798913][T21037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 162.807747][T21037] System zones: 1-12 [ 162.811917][T21037] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.818361][T21037] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.3000: Inode bitmap for bg 0 marked uninitialized [ 162.844717][T21037] loop1: detected capacity change from 0 to 512 [ 162.857287][T21037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.866613][T21037] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.876432][T21037] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3000: bg 0: block 248: padding at end of block bitmap is not set [ 162.895765][T21037] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.3000: Failed to acquire dquot type 1 [ 162.910137][T21050] syz.0.3012[21050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.910239][T21050] syz.0.3012[21050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.913151][T21037] EXT4-fs (loop1): 1 truncate cleaned up [ 162.943633][T21050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3012'. [ 162.999774][T21063] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 163.008072][T21063] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 163.040356][T21071] loop1: detected capacity change from 0 to 128 [ 163.057221][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 163.057238][ T29] audit: type=1326 audit(1726938416.068:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.087030][ T29] audit: type=1326 audit(1726938416.068:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.126241][ T29] audit: type=1326 audit(1726938416.078:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.139016][T21071] syz.1.3010: attempt to access beyond end of device [ 163.139016][T21071] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 163.149828][ T29] audit: type=1326 audit(1726938416.078:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.163191][T21071] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 163.195395][ T29] audit: type=1326 audit(1726938416.078:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.219106][ T29] audit: type=1326 audit(1726938416.078:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.242726][ T29] audit: type=1326 audit(1726938416.078:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.242758][ T29] audit: type=1326 audit(1726938416.078:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.242821][ T29] audit: type=1326 audit(1726938416.078:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.242881][ T29] audit: type=1326 audit(1726938416.108:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.4.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a834def9 code=0x7ffc0000 [ 163.355092][T21087] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3015'. [ 163.392462][T21100] pim6reg1: entered promiscuous mode [ 163.398018][T21100] pim6reg1: entered allmulticast mode [ 163.523455][T21120] loop7: detected capacity change from 0 to 16384 [ 163.627767][T21130] loop0: detected capacity change from 0 to 512 [ 163.663561][T21130] EXT4-fs mount: 36 callbacks suppressed [ 163.663586][T21130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.688437][T21130] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.694674][T21139] loop2: detected capacity change from 0 to 512 [ 163.707017][T21130] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 163.722696][T21139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.735404][T21139] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.735754][T18608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.748686][T21139] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.3035: corrupted inode contents [ 163.767414][T21139] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.3035: mark_inode_dirty error [ 163.769228][T21125] loop7: detected capacity change from 16384 to 16383 [ 163.779088][T21139] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.3035: corrupted inode contents [ 163.821741][T16397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.867980][T21152] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3038'. [ 163.877300][T21133] Invalid logical block size (65472) [ 163.994278][T21161] loop2: detected capacity change from 0 to 1024 [ 164.005359][T21161] EXT4-fs: Ignoring removed orlov option [ 164.011154][T21161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.053392][T21161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.073697][T21161] EXT4-fs (loop2): shut down requested (0) [ 164.100368][T16397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.184324][T21183] syz.2.3049[21183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.184386][T21183] syz.2.3049[21183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.422001][T21195] bridge0: port 3(veth0_to_bond) entered blocking state [ 164.440537][T21195] bridge0: port 3(veth0_to_bond) entered disabled state [ 164.448527][T21196] loop7: detected capacity change from 0 to 16384 [ 164.450763][T21195] veth0_to_bond: entered allmulticast mode [ 164.462642][T21195] veth0_to_bond: entered promiscuous mode [ 164.471651][T21195] bridge0: port 3(veth0_to_bond) entered blocking state [ 164.478746][T21195] bridge0: port 3(veth0_to_bond) entered forwarding state [ 164.490439][T21195] veth0_to_bond: left allmulticast mode [ 164.496167][T21195] veth0_to_bond: left promiscuous mode [ 164.501837][T21195] bridge0: port 3(veth0_to_bond) entered disabled state [ 164.639994][T21204] syz.1.3056[21204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.640065][T21204] syz.1.3056[21204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.673327][T21206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=21206 comm=syz.1.3057 [ 164.701309][T21206] netlink: 'syz.1.3057': attribute type 1 has an invalid length. [ 164.707143][T21197] loop7: detected capacity change from 16384 to 16383 [ 164.709120][T21206] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3057'. [ 164.767773][T21145] syz.0.3036 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 164.778994][T21145] CPU: 1 UID: 0 PID: 21145 Comm: syz.0.3036 Tainted: G W 6.11.0-syzkaller-07983-g7856a565416e #0 [ 164.790932][T21145] Tainted: [W]=WARN [ 164.794822][T21145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 164.804959][T21145] Call Trace: [ 164.808301][T21145] [ 164.811281][T21145] dump_stack_lvl+0xf2/0x150 [ 164.815897][T21145] dump_stack+0x15/0x20 [ 164.820068][T21145] dump_header+0x83/0x2d0 [ 164.824418][T21145] oom_kill_process+0x341/0x4c0 [ 164.829303][T21145] out_of_memory+0x9af/0xbe0 [ 164.834038][T21145] ? css_next_descendant_pre+0x11c/0x140 [ 164.839689][T21145] mem_cgroup_out_of_memory+0x13e/0x190 [ 164.845352][T21145] try_charge_memcg+0x51b/0x810 [ 164.850218][T21145] charge_memcg+0x50/0xc0 [ 164.854593][T21145] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 164.860702][T21145] __read_swap_cache_async+0x236/0x480 [ 164.866211][T21145] swap_cluster_readahead+0x276/0x3f0 [ 164.871603][T21145] swapin_readahead+0xe4/0x6f0 [ 164.876389][T21145] ? __filemap_get_folio+0x420/0x5b0 [ 164.881728][T21145] ? swap_cache_get_folio+0x77/0x210 [ 164.887040][T21145] do_swap_page+0x2af/0x23e0 [ 164.891663][T21145] ? __rcu_read_lock+0x36/0x50 [ 164.896546][T21145] ? pte_offset_map_nolock+0x124/0x1d0 [ 164.902049][T21145] handle_mm_fault+0x8c5/0x2a80 [ 164.906996][T21145] exc_page_fault+0x3b9/0x650 [ 164.911720][T21145] asm_exc_page_fault+0x26/0x30 [ 164.916591][T21145] RIP: 0033:0x7f61172b19c8 [ 164.921009][T21145] Code: 31 d2 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d d8 60 2e 00 00 0f 8e 99 fd ff ff e8 21 e5 fe ff 49 39 c4 72 64 0f 1f 40 00 <69> 3d c6 3c e1 00 e8 03 00 00 48 8d 1d a7 45 2e 00 e8 72 c4 12 00 [ 164.940783][T21145] RSP: 002b:00007ffdb55c7110 EFLAGS: 00010216 [ 164.946859][T21145] RAX: 000000000002832e RBX: 00007f6117597a80 RCX: 00000000000280a0 [ 164.954933][T21145] RDX: 000000000000028e RSI: 00007ffdb55c70f0 RDI: 0000000000000001 [ 164.962930][T21145] RBP: 00007f6117597a80 R08: 000000002707af7e R09: 7fffffffffffffff [ 164.970970][T21145] R10: 00007f61180d30b8 R11: 00007f61180d3080 R12: 000000000002833a [ 164.979022][T21145] R13: 00007ffdb55c7210 R14: 0000000000000032 R15: ffffffffffffffff [ 164.987005][T21145] [ 164.990198][T21145] memory: usage 307200kB, limit 307200kB, failcnt 215 [ 164.996996][T21145] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 165.005024][T21145] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 165.012449][T21145] Memory cgroup stats for /syz0: [ 165.012760][T21145] cache 98304 [ 165.021081][T21145] rss 4096 [ 165.024134][T21145] shmem 0 [ 165.027125][T21145] mapped_file 98304 [ 165.030943][T21145] dirty 98304 [ 165.034245][T21145] writeback 4096 [ 165.037869][T21145] workingset_refault_anon 109 [ 165.042556][T21145] workingset_refault_file 32 [ 165.047202][T21145] swap 221184 [ 165.050511][T21145] swapcached 8192 [ 165.054455][T21145] pgpgin 110925 [ 165.057949][T21145] pgpgout 110899 [ 165.061503][T21145] pgfault 126716 [ 165.065062][T21145] pgmajfault 64 [ 165.068644][T21145] inactive_anon 0 [ 165.070628][T21212] netlink: 'syz.1.3059': attribute type 4 has an invalid length. [ 165.072266][T21145] active_anon 8192 [ 165.072277][T21145] inactive_file 0 [ 165.072286][T21145] active_file 98304 [ 165.091296][T21145] unevictable 0 [ 165.094811][T21145] hierarchical_memory_limit 314572800 [ 165.100210][T21145] hierarchical_memsw_limit 9223372036854771712 [ 165.106440][T21145] total_cache 98304 [ 165.110273][T21145] total_rss 4096 [ 165.113825][T21145] total_shmem 0 [ 165.117320][T21145] total_mapped_file 98304 [ 165.121680][T21145] total_dirty 98304 [ 165.125477][T21145] total_writeback 4096 [ 165.129584][T21145] total_workingset_refault_anon 109 [ 165.134861][T21145] total_workingset_refault_file 32 [ 165.140023][T21145] total_swap 221184 [ 165.143822][T21145] total_swapcached 8192 [ 165.147999][T21145] total_pgpgin 110925 [ 165.152071][T21145] total_pgpgout 110899 [ 165.156185][T21145] total_pgfault 126716 [ 165.160336][T21145] total_pgmajfault 64 [ 165.164329][T21145] total_inactive_anon 0 [ 165.168518][T21145] total_active_anon 8192 [ 165.172767][T21145] total_inactive_file 0 [ 165.176937][T21145] total_active_file 98304 [ 165.181276][T21145] total_unevictable 0 [ 165.185321][T21145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3036,pid=21145,uid=0 [ 165.200046][T21145] Memory cgroup out of memory: Killed process 21145 (syz.0.3036) total-vm:86984kB, anon-rss:612kB, file-rss:15908kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 165.219732][T21213] netlink: 'syz.1.3059': attribute type 4 has an invalid length. [ 165.282651][T21215] loop1: detected capacity change from 0 to 512 [ 165.292137][T21215] EXT4-fs: Ignoring removed oldalloc option [ 165.298537][T21200] Invalid logical block size (65472) [ 165.314457][T21215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.351727][T21215] EXT4-fs (loop1): 1 truncate cleaned up [ 165.359903][T21215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.405720][T18200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.474869][T21179] Cannot find set identified by id 0 to match [ 165.551042][T21245] loop7: detected capacity change from 0 to 16384 [ 165.657690][T21256] vhci_hcd: invalid port number 157 [ 165.662968][T21256] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 165.747200][T21254] loop7: detected capacity change from 16384 to 16383 [ 165.801410][T21271] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3082'. [ 165.826314][T21257] Invalid logical block size (65472) [ 165.843034][T21275] loop1: detected capacity change from 0 to 256 [ 166.131673][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.205329][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.300470][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.315122][T21310] loop0: detected capacity change from 0 to 128 [ 166.350997][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.365386][T21291] gre0 speed is unknown, defaulting to 1000 [ 166.436658][ T36] bridge_slave_1: left allmulticast mode [ 166.442471][ T36] bridge_slave_1: left promiscuous mode [ 166.448142][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.456115][ T36] bridge_slave_0: left allmulticast mode [ 166.461899][ T36] bridge_slave_0: left promiscuous mode [ 166.467687][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.570218][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.581339][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.592060][ T36] bond0 (unregistering): Released all slaves [ 166.644984][T21291] chnl_net:caif_netlink_parms(): no params data found [ 166.665398][ T36] hsr_slave_0: left promiscuous mode [ 166.675583][ T36] hsr_slave_1: left promiscuous mode [ 166.682139][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.689711][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.697704][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.705174][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.714888][ T36] veth1_macvtap: left promiscuous mode [ 166.720384][ T36] veth0_macvtap: left promiscuous mode [ 166.725858][ T36] veth1_vlan: left promiscuous mode [ 166.731159][ T36] veth0_vlan: left promiscuous mode [ 166.832911][ T36] team0 (unregistering): Port device team_slave_1 removed [ 166.843786][ T36] team0 (unregistering): Port device team_slave_0 removed [ 166.909426][T21291] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.916597][T21291] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.923855][T21291] bridge_slave_0: entered allmulticast mode [ 166.930320][T21291] bridge_slave_0: entered promiscuous mode [ 166.938746][T21291] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.945821][T21291] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.953218][T21291] bridge_slave_1: entered allmulticast mode [ 166.960043][T21291] bridge_slave_1: entered promiscuous mode [ 166.980064][T21291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.990872][T21291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.012150][T21291] team0: Port device team_slave_0 added [ 167.019028][T21291] team0: Port device team_slave_1 added [ 167.035012][T21291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.042144][T21291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.068226][T21291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.079705][T21291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.086831][T21291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.112879][T21291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.144882][T21291] hsr_slave_0: entered promiscuous mode [ 167.151164][T21291] hsr_slave_1: entered promiscuous mode [ 167.157285][T21291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.164846][T21291] Cannot create hsr debugfs directory [ 167.451543][T21291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.460161][T21291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.468869][T21291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.477817][T21291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.514335][T21291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.528339][T21291] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.539794][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.547061][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.555868][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.562966][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.629184][T21291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.740065][T21291] veth0_vlan: entered promiscuous mode [ 167.748848][T21291] veth1_vlan: entered promiscuous mode [ 167.765311][T21291] veth0_macvtap: entered promiscuous mode [ 167.772950][T21291] veth1_macvtap: entered promiscuous mode [ 167.784140][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.795214][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.805239][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.815865][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.825783][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.836353][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.846213][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.856649][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.866481][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.877015][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.886923][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.897363][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.907201][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.917638][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.929530][T21291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.941026][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.951759][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.961804][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.972304][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.982291][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.992739][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.002553][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.013056][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.022945][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.033449][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.043432][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.053871][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.063738][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.074309][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.084443][T21291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.094991][T21291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.105829][T21291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.116791][T21291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.125613][T21291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.134405][T21291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.143157][T21291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.590212][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 171.590230][ T29] audit: type=1326 audit(1726938424.608:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21692 comm="syz.0.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61173ddef9 code=0x7ffc0000 [ 171.638673][ T29] audit: type=1326 audit(1726938424.608:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21692 comm="syz.0.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61173ddef9 code=0x7ffc0000 [ 171.662269][ T29] audit: type=1326 audit(1726938424.608:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21692 comm="syz.0.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61173ddef9 code=0x7ffc0000 [ 171.685791][ T29] audit: type=1326 audit(1726938424.608:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21692 comm="syz.0.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61173ddef9 code=0x7ffc0000 [ 171.709507][ T29] audit: type=1326 audit(1726938424.608:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21692 comm="syz.0.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61173ddef9 code=0x7ffc0000 [ 171.733143][ T29] audit: type=1326 audit(1726938424.608:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21692 comm="syz.0.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61173ddef9 code=0x7ffc0000 [ 171.756675][ T29] audit: type=1400 audit(1726938424.648:4753): avc: denied { read } for pid=21691 comm="syz.2.3101" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.780006][ T29] audit: type=1400 audit(1726938424.648:4754): avc: denied { open } for pid=21691 comm="syz.2.3101" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.804036][ T29] audit: type=1400 audit(1726938424.648:4755): avc: denied { ioctl } for pid=21691 comm="syz.2.3101" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.838784][ T29] audit: type=1400 audit(1726938424.688:4756): avc: denied { create } for pid=21696 comm="syz.2.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.887732][T21703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3103'. [ 171.894066][T21705] loop0: detected capacity change from 0 to 512 [ 171.915066][T21705] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.939852][T21705] EXT4-fs (loop0): 1 truncate cleaned up [ 171.956516][T21705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.989833][T21695] gre0 speed is unknown, defaulting to 1000 [ 171.999223][T21726] 9pnet: p9_errstr2errno: server reported unknown error œæçæÎsÅ‚Ün02ÖÌü䧑̼§6þ [ 172.073636][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.103376][T21736] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 172.170744][T21705] EXT4-fs (loop0): shut down requested (0) [ 172.170839][T21761] loop1: detected capacity change from 0 to 512 [ 172.176924][T21765] bpf_get_probe_write_proto: 4 callbacks suppressed [ 172.176952][T21765] syz.2.3119[21765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.205485][T21765] syz.2.3119[21765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.233598][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.258880][T21761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.273629][T18608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.275706][T21761] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.301466][T21695] chnl_net:caif_netlink_parms(): no params data found [ 172.304314][T21761] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.3118: corrupted inode contents [ 172.344924][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.352753][T21761] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.3118: mark_inode_dirty error [ 172.369520][T21761] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.3118: corrupted inode contents [ 172.415812][T21695] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.423260][T21695] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.433972][T21695] bridge_slave_0: entered allmulticast mode [ 172.434587][T18200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.460669][T21695] bridge_slave_0: entered promiscuous mode [ 172.478792][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.506340][T21695] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.513558][T21695] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.525892][T21695] bridge_slave_1: entered allmulticast mode [ 172.532735][T21695] bridge_slave_1: entered promiscuous mode [ 172.539051][T21925] syz.1.3130[21925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.539138][T21925] syz.1.3130[21925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.576207][T21695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.606592][ T56] bridge_slave_1: left allmulticast mode [ 172.612409][ T56] bridge_slave_1: left promiscuous mode [ 172.618242][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.626597][T21959] program syz.4.3131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.636809][ T56] bridge_slave_0: left allmulticast mode [ 172.642660][ T56] bridge_slave_0: left promiscuous mode [ 172.648580][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.702398][T21973] loop1: detected capacity change from 0 to 1024 [ 172.721038][T21973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.869659][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.893313][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.913697][ T56] bond0 (unregistering): Released all slaves [ 172.923891][ T56] bond1 (unregistering): Released all slaves [ 172.940145][T21695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.945511][T21987] loop0: detected capacity change from 0 to 512 [ 172.957392][T21987] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 173.008666][T21695] team0: Port device team_slave_0 added [ 173.023610][T21695] team0: Port device team_slave_1 added [ 173.030024][T22009] netlink: 'syz.0.3141': attribute type 10 has an invalid length. [ 173.042021][T22009] veth0_macvtap: left promiscuous mode [ 173.052185][T18200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.052829][T22009] veth0_macvtap: entered promiscuous mode [ 173.071648][T22009] team0: Device macvtap0 failed to register rx_handler [ 173.085560][T22009] veth0_macvtap: left promiscuous mode [ 173.126678][ T56] hsr_slave_0: left promiscuous mode [ 173.149214][ T56] hsr_slave_1: left promiscuous mode [ 173.158385][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.165872][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.187788][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.195265][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.206503][ T56] veth1_macvtap: left promiscuous mode [ 173.212116][ T56] veth0_macvtap: left promiscuous mode [ 173.217910][ T56] veth1_vlan: left promiscuous mode [ 173.223211][ T56] veth0_vlan: left promiscuous mode [ 173.245732][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3151'. [ 173.303140][T22084] loop1: detected capacity change from 0 to 2048 [ 173.307963][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.316947][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.324502][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.332030][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.339558][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.346974][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.354518][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.362011][T22084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.374265][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.381777][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.389368][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.396764][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.404260][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.411767][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.419335][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.425016][T22091] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 173.426756][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.426763][T22091] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.437836][T22091] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 173.442620][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.451379][T22091] EXT4-fs (loop1): This should not happen!! Data will be lost [ 173.451379][T22091] [ 173.451397][T22091] EXT4-fs (loop1): Total free blocks count 0 [ 173.451412][T22091] EXT4-fs (loop1): Free/Dirty block details [ 173.451424][T22091] EXT4-fs (loop1): free_blocks=2415919104 [ 173.463899][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.471396][T22091] EXT4-fs (loop1): dirty_blocks=32 [ 173.481088][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.487014][T22091] EXT4-fs (loop1): Block reservation details [ 173.492959][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.498659][T22091] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 173.538210][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.546058][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.553911][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.561544][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.569108][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.576512][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.583931][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.591450][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.598874][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.606313][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.613758][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.621248][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.628768][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.636286][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.643705][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.651104][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.658593][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 173.666661][ T3339] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 173.680877][T22084] loop1: detected capacity change from 2048 to 2047 [ 173.720837][T18200] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /125/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 173.728341][T22099] loop2: detected capacity change from 0 to 512 [ 173.765482][ T7395] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 173.783496][ T56] team0 (unregistering): Port device team_slave_1 removed [ 173.795323][T22099] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #15: comm syz.2.3158: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 173.795487][ T56] team0 (unregistering): Port device team_slave_0 removed [ 173.841470][T22099] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.3158: couldn't read orphan inode 15 (err -117) [ 173.858112][T22106] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 173.863528][T22099] EXT4-fs (loop2): mounted filesystem ffffff7f-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.878876][T22099] ext4 filesystem being mounted at /162/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.890175][T21695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.897176][T21695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.923166][T21695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.935154][T21695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.942281][T21695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.968309][T21695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.996153][T11147] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 174.003981][T11147] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 174.016416][T11147] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 174.024557][T11147] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.036628][T22080] geneve0: entered promiscuous mode [ 174.108860][T21695] hsr_slave_0: entered promiscuous mode [ 174.127649][T21695] hsr_slave_1: entered promiscuous mode [ 174.134022][T21695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.144861][T21695] Cannot create hsr debugfs directory [ 174.240255][T16397] EXT4-fs (loop2): unmounting filesystem ffffff7f-0000-0000-0000-000000000000. [ 174.422804][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.471312][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.500281][T22245] bridge0: port 3(syz_tun) entered blocking state [ 174.506823][T22245] bridge0: port 3(syz_tun) entered disabled state [ 174.527486][T22245] syz_tun: entered allmulticast mode [ 174.533447][T22245] syz_tun: entered promiscuous mode [ 174.549464][T22245] bridge0: port 3(syz_tun) entered blocking state [ 174.556061][T22245] bridge0: port 3(syz_tun) entered forwarding state [ 174.568810][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.616931][T21695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.643238][T22280] syz.0.3184[22280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.643415][T22280] syz.0.3184[22280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.701080][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.725523][T22239] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 174.768248][T21695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.784119][T22240] gre0 speed is unknown, defaulting to 1000 [ 174.784869][T22287] loop2: detected capacity change from 0 to 256 [ 174.790523][T21695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.813809][T22287] FAT-fs (loop2): Directory bread(block 64) failed [ 174.827675][T22287] FAT-fs (loop2): Directory bread(block 65) failed [ 174.839589][T21695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.850021][T22287] FAT-fs (loop2): Directory bread(block 66) failed [ 174.866930][T22287] FAT-fs (loop2): Directory bread(block 67) failed [ 174.874016][T22287] FAT-fs (loop2): Directory bread(block 68) failed [ 174.896643][T22287] FAT-fs (loop2): Directory bread(block 69) failed [ 174.910785][T22287] FAT-fs (loop2): Directory bread(block 70) failed [ 174.934938][T22287] FAT-fs (loop2): Directory bread(block 71) failed [ 174.942042][ T56] bridge_slave_1: left allmulticast mode [ 174.948177][ T56] bridge_slave_1: left promiscuous mode [ 174.953624][T22287] FAT-fs (loop2): Directory bread(block 72) failed [ 174.953937][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.972361][T22287] FAT-fs (loop2): Directory bread(block 73) failed [ 174.982446][ T56] bridge_slave_0: left allmulticast mode [ 174.988495][ T56] bridge_slave_0: left promiscuous mode [ 174.994216][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.033781][T22324] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3190'. [ 175.061130][T22326] loop4: detected capacity change from 0 to 764 [ 175.085564][T22326] Symlink component flag not implemented [ 175.091324][T22326] Symlink component flag not implemented [ 175.100081][T22326] Symlink component flag not implemented (129) [ 175.106269][T22326] Symlink component flag not implemented (6) [ 175.162956][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.186310][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.202035][ T56] bond0 (unregistering): Released all slaves [ 175.224989][T22338] loop4: detected capacity change from 0 to 512 [ 175.244172][T22338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.282011][T22328] bond_slave_0: entered promiscuous mode [ 175.287791][T22328] bond_slave_1: entered promiscuous mode [ 175.304601][T22328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.324585][T22328] bond_slave_0: left promiscuous mode [ 175.330052][T22328] bond_slave_1: left promiscuous mode [ 175.376845][T22338] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 175.384952][T22338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1802c01c, mo2=0002] [ 175.396783][T22338] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 175.406509][T22338] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 175.442198][T22338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.480845][T21695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.500333][ T56] hsr_slave_0: left promiscuous mode [ 175.509736][ T56] hsr_slave_1: left promiscuous mode [ 175.516052][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.523638][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.557868][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.565505][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.579618][ T56] veth1_macvtap: left promiscuous mode [ 175.585138][ T56] veth0_macvtap: left promiscuous mode [ 175.590765][ T56] veth1_vlan: left promiscuous mode [ 175.596167][ T56] veth0_vlan: left promiscuous mode [ 175.605198][T22338] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 175.605444][T22431] SELinux: policydb version 1446001614 does not match my version range 15-33 [ 175.625037][T22338] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 175.628933][T22431] SELinux: failed to load policy [ 175.686582][T21291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.736891][T22249] coredump: 287(syz.0.3182): written to core: VMAs: 29, size 74350592; core: 62153390 bytes, pos 74358784 [ 175.894062][ T56] team0 (unregistering): Port device team_slave_1 removed [ 175.916167][ T56] team0 (unregistering): Port device team_slave_0 removed [ 175.958454][T22457] loop2: detected capacity change from 0 to 512 [ 175.990046][T22240] chnl_net:caif_netlink_parms(): no params data found [ 176.001205][T22457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.016301][T21695] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.017249][T22457] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.041397][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.048514][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.082919][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.090074][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.110926][T22457] Process accounting resumed [ 176.127829][T22457] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 176.181929][T16397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.222499][T22505] netlink: 'syz.4.3217': attribute type 4 has an invalid length. [ 176.241277][T22240] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.248601][T22240] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.255904][T22240] bridge_slave_0: entered allmulticast mode [ 176.263058][T22240] bridge_slave_0: entered promiscuous mode [ 176.270388][T22505] netlink: 'syz.4.3217': attribute type 4 has an invalid length. [ 176.283274][T22240] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.290545][T22240] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.299565][T22240] bridge_slave_1: entered allmulticast mode [ 176.306183][T22240] bridge_slave_1: entered promiscuous mode [ 176.326929][T21695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.337449][T21695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.386690][T22240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.406814][T22240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.450722][T22240] team0: Port device team_slave_0 added [ 176.464451][T22240] team0: Port device team_slave_1 added [ 176.489043][T22240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.496074][T22240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.522264][T22240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.536998][T22240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.544102][T22240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.570141][T22240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.599935][T22240] hsr_slave_0: entered promiscuous mode [ 176.606034][T22240] hsr_slave_1: entered promiscuous mode [ 176.614184][T21695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.737240][T21695] veth0_vlan: entered promiscuous mode [ 176.746488][T21695] veth1_vlan: entered promiscuous mode [ 176.782195][T21695] veth0_macvtap: entered promiscuous mode [ 176.790774][T21695] veth1_macvtap: entered promiscuous mode [ 176.805604][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.816213][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.826094][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.836605][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.846555][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.856999][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.867170][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.877607][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.887467][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.897952][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.907976][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.918500][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.929584][T21695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.941240][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.951889][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.961817][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.972299][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.982232][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.992822][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.002703][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.013249][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.023105][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.033722][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.043766][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.054220][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.064111][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.074606][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.085426][T21695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.098504][T21695] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.107396][T21695] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.116115][T21695] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.124930][T21695] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.138694][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'. [ 177.147923][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 177.147940][ T29] audit: type=1326 audit(1726938430.158:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22744 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 177.177685][ T29] audit: type=1326 audit(1726938430.158:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22744 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 177.201248][ T29] audit: type=1326 audit(1726938430.158:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22744 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 177.224752][ T29] audit: type=1326 audit(1726938430.168:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22744 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 177.309237][T22760] loop7: detected capacity change from 0 to 16384 [ 177.397233][T22240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.410443][T22775] loop0: detected capacity change from 0 to 1024 [ 177.426718][T22240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.454630][T22240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.472284][T22775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.491027][T22790] netdevsim netdevsim2 netdevsim2: Unsupported IPsec algorithm [ 177.492799][T22240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.507725][T22781] loop7: detected capacity change from 16384 to 16383 [ 177.558710][T18608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.581351][T22795] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 177.581351][T22795] program syz.4.3242 not setting count and/or reply_len properly [ 177.605162][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.612722][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.620435][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.627143][T22784] Invalid logical block size (65472) [ 177.627945][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.636682][T22240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.640668][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.654866][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.662402][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.666912][T22240] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.670306][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.684534][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.687916][T22800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.692555][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.704829][ T29] audit: type=1400 audit(1726938430.708:4899): avc: denied { ioctl } for pid=22799 comm="syz.2.3244" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.708713][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.742110][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.749582][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.751612][T22240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.757143][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.757171][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.767528][T22240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.774909][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.788525][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.792720][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.800087][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.807383][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.829504][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.836989][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.844463][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.852068][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.859517][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.864325][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.867001][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.874137][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.881517][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.896180][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.903799][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.911308][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.918871][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.926378][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.933925][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.941383][ T24] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 177.961080][T22800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.961645][ T29] audit: type=1400 audit(1726938430.968:4900): avc: denied { ioctl } for pid=22802 comm="syz.4.3245" path="socket:[45275]" dev="sockfs" ino=45275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.042121][ T24] hid-generic 0000:04AD:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.056903][T22240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.151184][T22826] loop0: detected capacity change from 0 to 256 [ 178.160644][T22826] msdos: Unknown parameter 'fowner>00000000000000000000' [ 178.165024][T22240] veth0_vlan: entered promiscuous mode [ 178.201418][T22240] veth1_vlan: entered promiscuous mode [ 178.216817][ T29] audit: type=1326 audit(1726938431.228:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22836 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987ebdef9 code=0x7ffc0000 [ 178.228071][T22240] veth0_macvtap: entered promiscuous mode [ 178.251724][T22837] sd 0:0:1:0: device reset [ 178.253416][T22240] veth1_macvtap: entered promiscuous mode [ 178.257132][ T29] audit: type=1326 audit(1726938431.268:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22836 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc987ebdef9 code=0x7ffc0000 [ 178.268822][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.285636][ T29] audit: type=1326 audit(1726938431.268:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22836 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987ebdef9 code=0x7ffc0000 [ 178.296065][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.296088][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.296106][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.296121][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.319661][ T29] audit: type=1326 audit(1726938431.268:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22836 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987ebdef9 code=0x7ffc0000 [ 178.329430][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.329455][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.405020][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.415001][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.425572][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.435585][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.446250][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.456149][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.466812][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.490631][T22240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.514832][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.525475][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.535583][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.546045][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.555919][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.566373][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.576258][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.587207][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.597198][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.607854][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.617695][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.628180][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.638250][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.648755][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.658722][T22240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.669302][T22240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.681284][T22240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.699056][T22240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.707927][T22240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.716812][T22240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.725602][T22240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.964403][T22899] dvmrp5: entered allmulticast mode [ 178.971907][T22902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22902 comm=syz.1.3279 [ 178.990346][T22899] dvmrp5: left allmulticast mode [ 179.149547][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 179.225819][T22941] loop2: detected capacity change from 0 to 164 [ 179.247895][T22939] loop3: detected capacity change from 0 to 1024 [ 179.256803][T22941] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 179.268315][T22941] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 179.278034][T22939] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 179.288526][T22941] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 179.306326][T22939] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 179.324994][T22939] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #32: comm syz.3.3295: iget: special inode unallocated [ 179.338396][T22939] EXT4-fs (loop3): no journal found [ 179.343640][T22939] EXT4-fs (loop3): can't get journal size [ 179.371769][T22939] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.3295: iget: special inode unallocated [ 179.397224][T22939] EXT4-fs (loop3): failed to initialize system zone (-117) [ 179.404500][T22939] EXT4-fs (loop3): mount failed [ 179.465239][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'. [ 179.485653][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'. [ 181.523621][T23003] syz.3.3319[23003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.523689][T23003] syz.3.3319[23003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.561480][T23017] loop7: detected capacity change from 0 to 16384 [ 181.591129][T23019] loop4: detected capacity change from 0 to 512 [ 181.697495][T23034] sd 0:0:1:0: device reset [ 181.721181][T23019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.734453][T23019] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.746630][T23027] loop7: detected capacity change from 16384 to 16383 [ 181.755027][T23019] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.810650][T23048] netlink: 'syz.4.3335': attribute type 3 has an invalid length. [ 181.827320][T23033] Invalid logical block size (65472) [ 181.836461][T23050] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 182.013077][T23067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.013734][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.029231][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.037459][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.045373][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.053546][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.061269][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.069231][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.076919][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.084624][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.092758][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.100502][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.108229][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.116068][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.123771][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.131463][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.139328][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.147018][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.148825][T23067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.154709][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.170167][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.177867][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.185523][ T3421] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 182.195123][ T3421] hid-generic 0000:1000000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 182.239438][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 182.239475][ T29] audit: type=1326 audit(1726938435.258:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.3.3345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc987ebdef9 code=0x0 [ 182.486068][T23083] loop2: detected capacity change from 0 to 512 [ 182.509414][T23083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.522075][T23083] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.533008][T23083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.575697][T23091] loop1: detected capacity change from 0 to 512 [ 182.594328][T23095] loop2: detected capacity change from 0 to 1024 [ 182.600550][T23091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.613289][T23091] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.630659][T23091] Process accounting resumed [ 182.636591][T23095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.652065][T23101] loop7: detected capacity change from 0 to 16384 [ 182.659105][T23091] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 182.701420][T22240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.712827][T16397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.810613][ T7395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.813858][T23115] loop2: detected capacity change from 0 to 1024 [ 182.826006][T23115] EXT4-fs: Ignoring removed orlov option [ 182.832170][T23115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.833241][ T7395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.850457][T23102] loop7: detected capacity change from 16384 to 16383 [ 182.857976][ T7395] bond0 (unregistering): (slave team0): Releasing backup interface [ 182.878552][T23115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.898467][ T7395] bond0 (unregistering): Released all slaves [ 182.910234][ T29] audit: type=1400 audit(1726938435.928:4972): avc: denied { execute } for pid=23114 comm="syz.2.3353" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.932932][ T29] audit: type=1400 audit(1726938435.928:4973): avc: denied { execute_no_trans } for pid=23114 comm="syz.2.3353" path="/207/file1/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.969114][T16397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.003721][T23107] Invalid logical block size (65472) [ 183.062513][T23137] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 183.070647][ T29] audit: type=1400 audit(1726938436.078:4974): avc: denied { shutdown } for pid=23138 comm="syz.1.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.092166][ T29] audit: type=1400 audit(1726938436.078:4975): avc: denied { name_connect } for pid=23138 comm="syz.1.3363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 183.125898][T23143] loop2: detected capacity change from 0 to 128 [ 183.135868][ T7395] hsr_slave_0: left promiscuous mode [ 183.157416][ T7395] hsr_slave_1: left promiscuous mode [ 183.174692][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.182253][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.184030][T16397] VFS: Lookup of '. ' in vfat loop2 would have caused loop [ 183.199624][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.206564][T16397] VFS: Lookup of '. ' in vfat loop2 would have caused loop [ 183.207189][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.228715][ T29] audit: type=1400 audit(1726938436.248:4976): avc: denied { connect } for pid=23146 comm="syz.4.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.299011][ T7395] veth1_macvtap: left promiscuous mode [ 183.304658][ T7395] veth0_macvtap: left promiscuous mode [ 183.311050][ T7395] veth1_vlan: left promiscuous mode [ 183.316384][ T7395] veth0_vlan: left promiscuous mode [ 183.404348][T23168] loop0: detected capacity change from 0 to 512 [ 183.411376][T23168] EXT4-fs: Ignoring removed oldalloc option [ 183.417521][T23168] EXT4-fs: Ignoring removed nobh option [ 183.423755][T23168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.454951][T23168] EXT4-fs (loop0): too many log groups per flexible block group [ 183.462723][T23168] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 183.473909][ T7395] team0 (unregistering): Port device team_slave_1 removed [ 183.485403][T23168] EXT4-fs (loop0): mount failed [ 183.490960][ T7395] team0 (unregistering): Port device team_slave_0 removed [ 183.613933][T23184] loop1: detected capacity change from 0 to 512 [ 183.617102][ T29] audit: type=1326 audit(1726938436.628:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23183 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18896bdef9 code=0x7ffc0000 [ 183.644119][ T29] audit: type=1326 audit(1726938436.628:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23183 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f18896bdef9 code=0x7ffc0000 [ 183.668119][ T29] audit: type=1326 audit(1726938436.628:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23183 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18896bdf33 code=0x7ffc0000 [ 183.691696][ T29] audit: type=1326 audit(1726938436.628:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23183 comm="syz.1.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18896bc9df code=0x7ffc0000 [ 183.729587][T23184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.749593][T23184] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.763855][T23196] loop0: detected capacity change from 0 to 512 [ 183.802969][T22240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.850279][T23196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.876456][T23206] loop4: detected capacity change from 0 to 128 [ 183.876665][T23196] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.894976][T23206] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.930124][T23206] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.941130][T23196] Process accounting resumed [ 183.994614][T23196] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 184.012580][T21291] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.064552][T18608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.075176][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 184.086378][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 184.097008][ T7395] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.109048][T23209] loop3: detected capacity change from 0 to 8192 [ 184.130329][T23235] syz.0.3393[23235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.130446][T23235] syz.0.3393[23235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.133287][T23210] gre0 speed is unknown, defaulting to 1000 [ 184.176134][T23209] loop3: p1 p2 p3 [ 184.180421][T23209] loop3: p1 size 3523149824 extends beyond EOD, truncated [ 184.188980][T23209] loop3: p2 size 117440512 extends beyond EOD, truncated [ 184.197129][T23209] loop3: p3 start 4294901760 is beyond EOD, truncated [ 184.210542][ T7395] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.215863][T23248] loop4: detected capacity change from 0 to 128 [ 184.273717][ T7395] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.326313][ T7395] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.348196][T23210] chnl_net:caif_netlink_parms(): no params data found [ 184.371231][T23279] loop3: detected capacity change from 0 to 164 [ 184.371976][T23384] syz.1.3403[23384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.379184][T23384] syz.1.3403[23384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.398084][T23279] Unable to read rock-ridge attributes [ 184.426192][T23279] Unable to read rock-ridge attributes [ 184.465865][T23210] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.473044][T23210] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.498531][T23210] bridge_slave_0: entered allmulticast mode [ 184.505128][T23210] bridge_slave_0: entered promiscuous mode [ 184.512274][T23422] loop1: detected capacity change from 0 to 512 [ 184.536844][ T7395] bridge_slave_1: left allmulticast mode [ 184.542564][ T7395] bridge_slave_1: left promiscuous mode [ 184.545527][T23422] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.3406: casefold flag without casefold feature [ 184.548268][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.571045][ T7395] bridge_slave_0: left allmulticast mode [ 184.576858][ T7395] bridge_slave_0: left promiscuous mode [ 184.582768][T23422] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.3406: couldn't read orphan inode 15 (err -117) [ 184.582959][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.607518][T23422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.672060][T23422] Process accounting resumed [ 184.692765][T23448] loop0: detected capacity change from 0 to 128 [ 184.701003][T22240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.771899][ T7395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.784490][ T7395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.798846][ T7395] bond0 (unregistering): Released all slaves [ 184.809530][T23210] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.816710][T23210] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.824403][T23210] bridge_slave_1: entered allmulticast mode [ 184.837601][T23210] bridge_slave_1: entered promiscuous mode [ 184.843788][T23466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3417'. [ 184.859846][T23446] netlink: 'syz.3.3408': attribute type 10 has an invalid length. [ 184.871718][T23446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.902446][T23210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.945484][T23210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.982141][ T7395] hsr_slave_0: left promiscuous mode [ 184.990098][ T7395] hsr_slave_1: left promiscuous mode [ 184.991092][ T3342] hid-generic 0000:0000:0000.000D: unknown main item tag 0x7 [ 185.003046][ T3342] hid-generic 0000:0000:0000.000D: ignoring exceeding usage max [ 185.014667][ T3342] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 185.022261][ T3342] hid-generic 0000:0000:0000.000D: unknown main item tag 0x6 [ 185.022430][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.029688][ T3342] hid-generic 0000:0000:0000.000D: unknown main item tag 0xd [ 185.030449][ T3342] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 185.037264][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.063338][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.070877][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.080853][ T7395] veth1_macvtap: left promiscuous mode [ 185.086585][ T7395] veth0_macvtap: left promiscuous mode [ 185.092428][ T7395] veth1_vlan: left promiscuous mode [ 185.097780][ T7395] veth0_vlan: left promiscuous mode [ 185.128317][T23549] tmpfs: Bad value for 'mpol' [ 185.166724][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 185.204056][T23554] loop4: detected capacity change from 0 to 1024 [ 185.211963][T23554] EXT4-fs: Ignoring removed oldalloc option [ 185.218983][T23554] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 185.219537][ T7395] team0 (unregistering): Port device team_slave_1 removed [ 185.242373][ T7395] team0 (unregistering): Port device team_slave_0 removed [ 185.252593][T23554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.293194][T23210] team0: Port device team_slave_0 added [ 185.303093][T23210] team0: Port device team_slave_1 added [ 185.317949][T21291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.338752][T23210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.345818][T23210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.350733][T23593] syz.4.3431[23593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.371805][T23210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.373132][T23210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.391804][T23593] syz.4.3431[23593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.393787][T23210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.438243][T23210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.480920][T23210] hsr_slave_0: entered promiscuous mode [ 185.487233][T23210] hsr_slave_1: entered promiscuous mode [ 185.493268][T23210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.504261][T23210] Cannot create hsr debugfs directory [ 185.532821][T23605] loop3: detected capacity change from 0 to 512 [ 185.550848][T23605] EXT4-fs (loop3): 1 truncate cleaned up [ 185.564917][T23605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.583178][T23666] tls_set_device_offload: netdev not found [ 185.609135][T21695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.657958][ T3342] IPVS: starting estimator thread 0... [ 185.747872][T23702] IPVS: using max 2304 ests per chain, 115200 per kthread [ 185.751599][T23718] syz.4.3442[23718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.755187][T23718] syz.4.3442[23718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.776080][T23718] bridge0: port 3(vlan2) entered blocking state [ 185.793913][T23718] bridge0: port 3(vlan2) entered disabled state [ 185.800462][T23718] vlan2: entered allmulticast mode [ 185.806108][T23718] vlan2: left allmulticast mode [ 185.850386][ T3421] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 185.858307][ T3421] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 185.872855][T23735] netlink: 'syz.0.3447': attribute type 30 has an invalid length. [ 185.874977][ T3421] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x3 [ 185.881018][T23735] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 185.897646][T23735] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 185.898935][ T3421] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 185.932970][T23210] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.943207][T23210] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.955992][T23210] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.957203][T23758] netlink: zone id is out of range [ 185.967916][T23758] netlink: zone id is out of range [ 185.973122][T23758] netlink: zone id is out of range [ 185.981601][T23759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'. [ 185.990846][T23759] netlink: 'syz.0.3447': attribute type 30 has an invalid length. [ 185.997759][T23761] 9pnet: p9_errstr2errno: server reported unknown error œæçæÎsÅ‚Ün02ÖÌü䧑̼§6þ [ 186.011235][T23210] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.078905][T23210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.092272][T23210] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.105207][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.112422][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.128353][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.135557][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.235744][T23210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.269348][T23790] loop1: detected capacity change from 0 to 512 [ 186.280260][T23790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.293238][T23790] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.315139][T23790] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 186.343407][T22240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.357140][T23210] veth0_vlan: entered promiscuous mode [ 186.372120][T23802] bridge0: port 3(vlan2) entered blocking state [ 186.378667][T23802] bridge0: port 3(vlan2) entered disabled state [ 186.385474][T23802] vlan2: entered allmulticast mode [ 186.391564][T23802] vlan2: left allmulticast mode [ 186.399859][T23210] veth1_vlan: entered promiscuous mode [ 186.421645][T23210] veth0_macvtap: entered promiscuous mode [ 186.430961][T23210] veth1_macvtap: entered promiscuous mode [ 186.447933][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.458525][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.468542][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.479504][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.489535][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.500103][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.510229][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.520908][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.530857][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.541357][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.551370][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.561888][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.573807][T23210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.586847][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.597673][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.607611][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.618117][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.628115][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.638683][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.648602][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.659030][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.668894][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.679486][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.689358][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.699893][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.709749][T23210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.720960][T23210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.747920][T23210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.770846][T23210] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.779697][T23210] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.788645][T23210] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.797472][T23210] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.940120][T23836] loop3: detected capacity change from 0 to 256 [ 186.963028][T23836] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.973755][T23843] loop4: detected capacity change from 0 to 128 [ 186.989811][T23843] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.007652][T23843] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.043349][T23838] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 187.065945][T21291] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.068637][T23853] loop2: detected capacity change from 0 to 512 [ 187.099263][T23853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.116931][T23853] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.131113][T23853] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.3473: corrupted inode contents [ 187.143643][T23861] program syz.0.3475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.166336][T23853] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.3473: mark_inode_dirty error [ 187.188360][T23853] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.3473: corrupted inode contents [ 187.218566][T23210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.259259][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 187.259278][ T29] audit: type=1326 audit(1726938440.268:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23879 comm="syz.4.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 187.272476][T23882] netlink: 'syz.2.3480': attribute type 10 has an invalid length. [ 187.289080][ T29] audit: type=1326 audit(1726938440.278:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23879 comm="syz.4.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 187.289117][ T29] audit: type=1326 audit(1726938440.278:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23879 comm="syz.4.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 187.344207][ T29] audit: type=1326 audit(1726938440.278:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23879 comm="syz.4.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 187.367659][ T29] audit: type=1326 audit(1726938440.278:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23879 comm="syz.4.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 187.391202][ T29] audit: type=1326 audit(1726938440.278:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23879 comm="syz.4.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 187.414583][ T29] audit: type=1326 audit(1726938440.278:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23879 comm="syz.4.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 187.438140][ T29] audit: type=1326 audit(1726938440.278:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23879 comm="syz.4.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed3e8def9 code=0x7ffc0000 [ 187.462841][T23882] veth0_macvtap: left promiscuous mode [ 187.469780][ T29] audit: type=1400 audit(1726938440.488:5097): avc: denied { write } for pid=23876 comm="syz.3.3482" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.499242][T23882] veth0_macvtap: entered promiscuous mode [ 187.506011][T23882] team0: Device macvtap0 failed to register rx_handler [ 187.515724][ T29] audit: type=1400 audit(1726938440.488:5098): avc: denied { nlmsg_write } for pid=23884 comm="syz.4.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 187.540248][T23882] veth0_macvtap: left promiscuous mode [ 187.902045][T23926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3498'. [ 187.903448][T23925] netlink: 'syz.3.3501': attribute type 10 has an invalid length. [ 187.919540][T23925] veth0_macvtap: left promiscuous mode [ 187.928669][T23925] veth0_macvtap: entered promiscuous mode [ 187.935630][T23925] team0: Device macvtap0 failed to register rx_handler [ 187.942958][T23925] veth0_macvtap: left promiscuous mode [ 187.975079][T23929] loop3: detected capacity change from 0 to 512 [ 187.983943][T23929] EXT4-fs: Ignoring removed orlov option [ 187.990091][T23929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.003438][T23929] EXT4-fs (loop3): 1 orphan inode deleted [ 188.009282][T23929] EXT4-fs (loop3): 1 truncate cleaned up [ 188.015564][T23929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.035323][T23929] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 188.058772][T21695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.266000][T23980] smc: net device lo applied user defined pnetid SYZ1 [ 188.273574][T23980] smc: net device lo erased user defined pnetid SYZ1 [ 188.295121][T23982] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3509'. [ 188.333548][T23986] loop3: detected capacity change from 0 to 512 [ 188.340664][T23986] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 188.481040][T24004] vhci_hcd: invalid port number 255 [ 188.486382][T24004] vhci_hcd: invalid port number 255 [ 188.714095][T24028] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.721673][T24028] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.729466][T24028] bridge0: entered allmulticast mode [ 188.742519][T24028] bridge0: port 2(bridge_slave_1) entered listening state [ 188.755758][T24028] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.762942][T24028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.770522][T24028] bridge0: entered promiscuous mode [ 188.823375][T24039] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 189.048483][T24058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3542'. [ 189.057756][T24058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3542'. [ 189.120792][T24068] bond_slave_0: entered promiscuous mode [ 189.126525][T24068] bond_slave_1: entered promiscuous mode [ 189.135062][T24068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.146825][T24068] bond_slave_0: left promiscuous mode [ 189.152300][T24068] bond_slave_1: left promiscuous mode [ 189.180516][T24074] bridge0: port 3(vlan2) entered blocking state [ 189.186871][T24074] bridge0: port 3(vlan2) entered disabled state [ 189.193491][T24074] vlan2: entered allmulticast mode [ 189.201222][T24074] vlan2: left allmulticast mode [ 189.228214][T24091] SELinux: policydb version 1446001614 does not match my version range 15-33 [ 189.237523][T24091] SELinux: failed to load policy [ 189.298887][T24105] bpf_get_probe_write_proto: 2 callbacks suppressed [ 189.298905][T24105] syz.2.3560[24105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.305856][T24105] syz.2.3560[24105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.343504][T24112] Cannot find set identified by id 0 to match [ 189.368068][T24108] bridge0: port 3(syz_tun) entered blocking state [ 189.374617][T24108] bridge0: port 3(syz_tun) entered disabled state [ 189.400154][T24108] syz_tun: entered allmulticast mode [ 189.413453][T24108] syz_tun: entered promiscuous mode [ 189.426866][T24108] bridge0: port 3(syz_tun) entered blocking state [ 189.433532][T24108] bridge0: port 3(syz_tun) entered forwarding state [ 189.438497][T24120] loop3: detected capacity change from 0 to 2048 [ 189.469637][T24120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.470964][T24124] bond_slave_0: entered promiscuous mode [ 189.487577][T24124] bond_slave_1: entered promiscuous mode [ 189.505207][T24124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.516230][T24128] SELinux: policydb version 1446001614 does not match my version range 15-33 [ 189.529205][T24124] bond_slave_0: left promiscuous mode [ 189.534647][T24124] bond_slave_1: left promiscuous mode [ 189.540255][T24120] loop3: detected capacity change from 2048 to 2047 [ 189.548863][T24120] EXT4-fs error (device loop3): ext4_xattr_ibody_get:653: inode #15: comm syz.3.3566: corrupted in-inode xattr: bad magic number in in-inode xattr [ 189.571432][T24128] SELinux: failed to load policy [ 189.603185][T24120] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:69: inode #15: comm syz.3.3566: corrupt xattr in inline inode [ 189.633495][T24120] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3566: corrupted in-inode xattr: bad magic number in in-inode xattr [ 189.661867][T24137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3571'. [ 189.686681][T24120] EXT4-fs error (device loop3): ext4_ind_map_blocks:604: inode #15: comm syz.3.3566: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 189.716486][T24120] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 189.728980][T24120] EXT4-fs (loop3): This should not happen!! Data will be lost [ 189.728980][T24120] [ 189.756043][T24142] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3574'. [ 189.771667][T21695] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /81/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 189.835055][ T7421] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 189.862148][ T7421] EXT4-fs error (device loop3): ext4_map_blocks:705: inode #15: block 1803188595: comm kworker/u8:16: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 189.893630][ T7421] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 189.906038][ T7421] EXT4-fs (loop3): This should not happen!! Data will be lost [ 189.906038][ T7421] [ 189.920606][T24148] loop1: detected capacity change from 0 to 512 [ 189.928136][ T36] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm kworker/u8:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 189.948026][T24148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.960420][T21695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.967612][T24148] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3577: bg 0: block 264: padding at end of block bitmap is not set [ 189.986869][T24148] EXT4-fs (loop1): Remounting filesystem read-only [ 189.993813][T24148] EXT4-fs (loop1): 1 truncate cleaned up [ 189.995798][T24159] 9pnet_fd: Insufficient options for proto=fd [ 190.000037][T24148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.018017][T24148] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 190.025418][T24148] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.079931][T24167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.094139][T24152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.104752][T24167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.104756][T24152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.171306][T24109] coredump: 132(syz.1.3562): written to core: VMAs: 29, size 74350592; core: 62145198 bytes, pos 74358784 [ 190.221911][T24187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 190.231040][T24187] netlink: 'syz.0.3587': attribute type 13 has an invalid length. [ 190.310171][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 190.359592][T24192] gre0 speed is unknown, defaulting to 1000 [ 190.473358][T24192] chnl_net:caif_netlink_parms(): no params data found [ 190.511570][T24192] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.518835][T24192] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.526106][T24192] bridge_slave_0: entered allmulticast mode [ 190.532814][T24192] bridge_slave_0: entered promiscuous mode [ 190.539923][T24192] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.546972][T24192] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.554189][T24192] bridge_slave_1: entered allmulticast mode [ 190.560836][T24192] bridge_slave_1: entered promiscuous mode [ 190.580247][T24192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.591070][T24192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.612186][T24192] team0: Port device team_slave_0 added [ 190.619057][T24192] team0: Port device team_slave_1 added [ 190.643051][T24192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.650101][T24192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.676123][T24192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.708310][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3602'. [ 190.719403][T24192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.726569][T24192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.752592][T24192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.793294][T24437] loop2: detected capacity change from 0 to 512 [ 190.801331][T24437] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 190.811563][T24456] Cannot find set identified by id 0 to match [ 190.826391][T24192] hsr_slave_0: entered promiscuous mode [ 190.835731][T24437] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 190.844610][T24192] hsr_slave_1: entered promiscuous mode [ 190.850762][T24437] System zones: 1-12 [ 190.855436][T24192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.855745][T24437] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.863173][T24192] Cannot create hsr debugfs directory [ 190.871699][T24437] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.3595: Inode bitmap for bg 0 marked uninitialized [ 190.890535][T24437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.891060][T24437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.911694][T24476] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.911882][T24476] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.912045][T24476] bridge0: entered allmulticast mode [ 190.914585][T24489] bridge0: port 2(bridge_slave_1) entered listening state [ 190.956797][T24476] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.963931][T24476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.971512][T24476] bridge0: entered promiscuous mode [ 190.972934][T24437] loop2: detected capacity change from 0 to 512 [ 191.000794][T24437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.010102][T24437] EXT4-fs (loop2): orphan cleanup on readonly fs [ 191.010643][T24437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3595: bg 0: block 248: padding at end of block bitmap is not set [ 191.010815][T24437] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.3595: Failed to acquire dquot type 1 [ 191.011338][T24437] EXT4-fs (loop2): 1 truncate cleaned up [ 191.011906][T24437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.012393][T24437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.103332][T24535] loop2: detected capacity change from 0 to 2048 [ 191.117248][ T36] ================================================================== [ 191.125378][ T36] BUG: KCSAN: data-race in alloc_pid / copy_process [ 191.131980][ T36] [ 191.134312][ T36] read-write to 0xffffffff8665d878 of 4 bytes by task 7421 on cpu 0: [ 191.142382][ T36] alloc_pid+0x542/0x6f0 [ 191.146638][ T36] copy_process+0xfdf/0x1f70 [ 191.151238][ T36] kernel_clone+0x167/0x5e0 [ 191.155750][ T36] user_mode_thread+0x7d/0xb0 [ 191.160437][ T36] call_usermodehelper_exec_work+0x41/0x150 [ 191.166350][ T36] process_scheduled_works+0x483/0x9a0 [ 191.171834][ T36] worker_thread+0x51d/0x6f0 [ 191.176424][ T36] kthread+0x1d1/0x210 [ 191.180515][ T36] ret_from_fork+0x4b/0x60 [ 191.184998][ T36] ret_from_fork_asm+0x1a/0x30 [ 191.189772][ T36] [ 191.192096][ T36] read to 0xffffffff8665d878 of 4 bytes by task 36 on cpu 1: [ 191.199463][ T36] copy_process+0x15ca/0x1f70 [ 191.204149][ T36] kernel_clone+0x167/0x5e0 [ 191.208661][ T36] user_mode_thread+0x7d/0xb0 [ 191.213363][ T36] call_usermodehelper_exec_work+0x41/0x150 [ 191.219295][ T36] process_scheduled_works+0x483/0x9a0 [ 191.224788][ T36] worker_thread+0x51d/0x6f0 [ 191.229395][ T36] kthread+0x1d1/0x210 [ 191.233471][ T36] ret_from_fork+0x4b/0x60 [ 191.237893][ T36] ret_from_fork_asm+0x1a/0x30 [ 191.242665][ T36] [ 191.244986][ T36] value changed: 0x800000db -> 0x800000dc [ 191.250699][ T36] [ 191.253107][ T36] Reported by Kernel Concurrency Sanitizer on: [ 191.259270][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.11.0-syzkaller-07983-g7856a565416e #0 [ 191.271082][ T36] Tainted: [W]=WARN [ 191.274892][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 191.284961][ T36] Workqueue: events_unbound call_usermodehelper_exec_work [ 191.292100][ T36] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 191.311641][T24192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.330405][T24544] loop0: detected capacity change from 0 to 512 [ 191.372021][T24544] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 191.378065][T24535] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 191.381873][T24544] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 191.394599][T24544] EXT4-fs: failed to create workqueue [ 191.409586][T24544] EXT4-fs (loop0): mount failed [ 191.416419][T24192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.459809][ T7421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.483351][T24544] bridge0: port 3(syz_tun) entered disabled state [ 191.505355][T24544] syz_tun (unregistering): left allmulticast mode [ 191.511937][T24544] syz_tun (unregistering): left promiscuous mode [ 191.518396][T24544] bridge0: port 3(syz_tun) entered disabled state [ 191.536439][T24192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.552616][T24477] bridge0: port 3(syz_tun) entered disabled state [ 191.569546][T24477] syz_tun (unregistering): left allmulticast mode [ 191.576077][T24477] syz_tun (unregistering): left promiscuous mode [ 191.582608][T24477] bridge0: port 3(syz_tun) entered disabled state [ 191.594778][ T7421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.661318][T24192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.691382][ T7421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.792908][ T7421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.871464][ T7421] bridge_slave_1: left promiscuous mode [ 191.877320][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.885608][ T7421] bridge_slave_0: left allmulticast mode [ 191.891468][ T7421] bridge_slave_0: left promiscuous mode [ 191.897262][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.010599][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.021442][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.032839][ T7421] bond0 (unregistering): Released all slaves [ 192.105663][ T7421] hsr_slave_0: left promiscuous mode [ 192.112552][ T7421] hsr_slave_1: left promiscuous mode [ 192.118418][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.125856][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.133580][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.141198][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.151479][ T7421] veth1_macvtap: left promiscuous mode [ 192.157058][ T7421] veth0_macvtap: left promiscuous mode [ 192.162621][ T7421] veth1_vlan: left promiscuous mode [ 192.167899][ T7421] veth0_vlan: left promiscuous mode [ 192.261377][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 192.272980][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 192.633526][ T7421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.691870][ T7421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.760163][ T7421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.830892][ T7421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.915245][ T7421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.961009][ T7421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.010970][ T7421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.071242][ T7421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.141305][ T7421] bridge_slave_1: left promiscuous mode [ 193.147218][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.154949][ T7421] bridge_slave_0: left allmulticast mode [ 193.160733][ T7421] bridge_slave_0: left promiscuous mode [ 193.166688][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.175022][ T7421] bridge_slave_1: left allmulticast mode [ 193.180718][ T7421] bridge_slave_1: left promiscuous mode [ 193.186449][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.194120][ T7421] bridge_slave_0: left allmulticast mode [ 193.199826][ T7421] bridge_slave_0: left promiscuous mode [ 193.205489][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.213735][ T7421] bridge_slave_1: left allmulticast mode [ 193.219469][ T7421] bridge_slave_1: left promiscuous mode [ 193.225139][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.233350][ T7421] bridge_slave_0: left allmulticast mode [ 193.239199][ T7421] bridge_slave_0: left promiscuous mode [ 193.244835][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.253182][ T7421] bridge_slave_1: left allmulticast mode [ 193.258872][ T7421] bridge_slave_1: left promiscuous mode [ 193.264509][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.272420][ T7421] bridge_slave_0: left allmulticast mode [ 193.278115][ T7421] bridge_slave_0: left promiscuous mode [ 193.283791][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.729860][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.740776][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.751293][ T7421] bond0 (unregistering): Released all slaves [ 193.760499][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.771242][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.781483][ T7421] bond0 (unregistering): Released all slaves [ 193.791492][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.802545][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.813114][ T7421] bond0 (unregistering): Released all slaves [ 193.822819][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.833407][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.844136][ T7421] bond0 (unregistering): Released all slaves [ 193.963335][ T7421] hsr_slave_0: left promiscuous mode [ 193.969053][ T7421] hsr_slave_1: left promiscuous mode [ 193.975247][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.982875][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.990452][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.997930][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.007809][ T7421] hsr_slave_0: left promiscuous mode [ 194.013776][ T7421] hsr_slave_1: left promiscuous mode [ 194.019711][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.027322][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.036648][ T7421] hsr_slave_0: left promiscuous mode [ 194.042554][ T7421] hsr_slave_1: left promiscuous mode [ 194.048396][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.055838][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.063541][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.071060][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.080712][ T7421] hsr_slave_0: left promiscuous mode [ 194.086645][ T7421] hsr_slave_1: left promiscuous mode [ 194.092548][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.100074][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.108449][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.115985][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.129746][ T7421] veth1_macvtap: left promiscuous mode [ 194.135323][ T7421] veth1_vlan: left promiscuous mode [ 194.140692][ T7421] veth0_vlan: left promiscuous mode [ 194.146564][ T7421] veth1_macvtap: left promiscuous mode [ 194.152166][ T7421] veth1_vlan: left promiscuous mode [ 194.157427][ T7421] veth0_vlan: left promiscuous mode [ 194.163345][ T7421] veth1_macvtap: left promiscuous mode [ 194.168866][ T7421] veth0_macvtap: left promiscuous mode [ 194.174428][ T7421] veth1_vlan: left promiscuous mode [ 194.179692][ T7421] veth0_vlan: left promiscuous mode [ 194.380532][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 194.391948][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 194.466914][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 194.477737][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 194.551578][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 194.562190][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 194.638744][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 194.649741][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 195.546753][ T7421] IPVS: stop unused estimator thread 0...