last executing test programs: 28.637822138s ago: executing program 0 (id=141): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000a00), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r4, 0x6a98047402e98331, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) 28.590925939s ago: executing program 0 (id=142): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000001180)="15", 0x1}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 27.717773726s ago: executing program 0 (id=155): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27.693875176s ago: executing program 0 (id=156): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") 27.598218868s ago: executing program 0 (id=158): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000640)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 27.373035473s ago: executing program 0 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 27.372873912s ago: executing program 32 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 11.512450938s ago: executing program 4 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)=';', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) 11.245363213s ago: executing program 4 (id=509): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 11.193646374s ago: executing program 4 (id=511): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 11.122288785s ago: executing program 4 (id=513): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}]}, 0x3, 0x570, &(0x7f0000000c00)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$incfs_size(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x2) 10.939872599s ago: executing program 4 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 10.803886382s ago: executing program 4 (id=523): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 10.787127232s ago: executing program 33 (id=523): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 2.513597131s ago: executing program 1 (id=679): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x942b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='.\x00', r2}, 0x18) 2.449714913s ago: executing program 1 (id=682): socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 1.913826903s ago: executing program 5 (id=697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close(0xffffffffffffffff) syz_usbip_server_init(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 1.58002406s ago: executing program 1 (id=702): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000240)}, 0x2f) r1 = syz_io_uring_setup(0x53ec, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x30, 0x0, 0x1ee, 0x2, 0x0, 0x7ff, 0x0, 0x1, {0x1}}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) 1.462269751s ago: executing program 6 (id=707): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000980)='2', 0x51, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pwrite64(r1, &(0x7f0000000880)='u', 0x1, 0x83) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 1.399142043s ago: executing program 1 (id=708): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.308066664s ago: executing program 5 (id=710): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r2, 0x0, 0xffffffbf) read$watch_queue(r2, 0x0, 0x0) 1.305518094s ago: executing program 1 (id=711): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.0080935s ago: executing program 2 (id=716): socket$netlink(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb, 0x170, &(0x7f0000000780)="$eJzs2z+LE0EYB+B3Tdy70+ZqsViwsQpqZanICeKCoqTQSuG0uZMDr1mt8ims/YKCpErlSLIh0ZAQgmY3XJ6nyQs/knkn7B9mYN7d/nR2enH58eLlMA6zLLqPoohfWRzHtehEbRAAwFUySil+ppTSwSCOvkdKqe2OAIBtG+XTwvsfAPbG2vX/w5YaAwC2xv4/AOyf12/ePn9clieviuIw4seg6lf9+rPOnz4rT+4VE8fzbw2rqt+Z5ffrvPg7vx43pvmDpXked+/U+Th78qJcyG/G6fanDwAAAHuhV8wsXd/3eqvyuvpjf2Bh/d6NW93GpgEAbODyy9ez9+fnHz43UBxNRsyaHXSz4lsLf8vOFp3YiTYUa4vxJfu/f7nNpxLQhPlN33YnAAAAAAAAAAAAAADAKv94VCiPiCVRRL7uZMFB41MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmd8BAAD//27zPto=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 924.154012ms ago: executing program 2 (id=717): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 919.145752ms ago: executing program 3 (id=718): r0 = getpid() openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101602) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 883.541813ms ago: executing program 2 (id=719): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000240)}, 0x2f) r1 = syz_io_uring_setup(0x53ec, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x30, 0x0, 0x1ee, 0x2, 0x0, 0x7ff, 0x0, 0x1, {0x1}}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) 808.149464ms ago: executing program 3 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x30, 0x0, 0x1ee, 0x2, 0x0, 0x7ff, 0x0, 0x1, {0x1}}) io_uring_enter(r2, 0x46bc, 0x3, 0x20, 0x0, 0x0) 576.108209ms ago: executing program 3 (id=721): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) 575.633509ms ago: executing program 2 (id=722): getdents64(0xffffffffffffffff, 0x0, 0x2e) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) msgget$private(0x0, 0xfffffffffffffffd) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$sg(&(0x7f0000000180), 0xb21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r0, &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0xff7c, 0x2) 569.138688ms ago: executing program 6 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x30bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f2, 0x4, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x400007fd, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x20000000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 490.99897ms ago: executing program 6 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 490.55464ms ago: executing program 2 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 472.210701ms ago: executing program 2 (id=726): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) 471.904681ms ago: executing program 6 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x2}, 0x50) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 439.288041ms ago: executing program 5 (id=728): socket$netlink(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646f74732c646f74732c6e6f636173652c646f74732c636865636b3d72656c617865642c646f74732c6e6f646f74732c646f74732c0032884758edd2e7a17e3c116a014262927783807ed4e210440ddebdf7d64a629cc9e873202c6d1e1d7dbabad279cb290d8a6c81b9ee715a035afdc5af3e15b932174f56cf4f009847fbc0e187d20fe47e50595251e835b306e05bc51afba211073e289eb499be4d726e3efbbeb1eb175e92b262c4ee4cee83e529784e53c874b73bb376876e2f3b2e667330e12c337d3a8b8cacccd9d86bc4c2f3b8971a79fb8f69af7b1d19592bf6a7186f7d4322045a99eaa207c407ab52aeadaaf1d089c278fccfb2138f"], 0xb, 0x170, &(0x7f0000000780)="$eJzs2z+LE0EYB+B3Tdy70+ZqsViwsQpqZanICeKCoqTQSuG0uZMDr1mt8ims/YKCpErlSLIh0ZAQgmY3XJ6nyQs/knkn7B9mYN7d/nR2enH58eLlMA6zLLqPoohfWRzHtehEbRAAwFUySil+ppTSwSCOvkdKqe2OAIBtG+XTwvsfAPbG2vX/w5YaAwC2xv4/AOyf12/ePn9clieviuIw4seg6lf9+rPOnz4rT+4VE8fzbw2rqt+Z5ffrvPg7vx43pvmDpXked+/U+Th78qJcyG/G6fanDwAAAHuhV8wsXd/3eqvyuvpjf2Bh/d6NW93GpgEAbODyy9ez9+fnHz43UBxNRsyaHXSz4lsLf8vOFp3YiTYUa4vxJfu/f7nNpxLQhPlN33YnAAAAAAAAAAAAAADAKv94VCiPiCVRRL7uZMFB41MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmd8BAAD//27zPto=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 439.167231ms ago: executing program 3 (id=729): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)) r4 = getpid() r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000100)={r1, r3}) 340.093664ms ago: executing program 1 (id=730): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) listen(r0, 0xfffffeff) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x544}], 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8c", 0x1}], 0x1}, 0x4000) 305.809894ms ago: executing program 3 (id=731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000240)}, 0x2f) r1 = syz_io_uring_setup(0x53ec, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x30, 0x0, 0x1ee, 0x2, 0x0, 0x7ff, 0x0, 0x1, {0x1}}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) 279.426544ms ago: executing program 6 (id=732): syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085510000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 246.734625ms ago: executing program 5 (id=733): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x4, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 229.411625ms ago: executing program 5 (id=734): getdents64(0xffffffffffffffff, 0x0, 0x2e) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) msgget$private(0x0, 0xfffffffffffffffd) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$sg(&(0x7f0000000180), 0xb21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r0, &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0xff7c, 0x2) 165.315297ms ago: executing program 5 (id=735): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(0x0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7fffeffd) 470.92µs ago: executing program 6 (id=736): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 3 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000000)=0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): rocess permissive=1 [ 18.562035][ T29] audit: type=1400 audit(1757934586.171:61): avc: denied { siginh } for pid=3179 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 26.163892][ T29] audit: type=1400 audit(1757934593.811:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.164749][ T3291] cgroup: Unknown subsys name 'net' [ 26.188703][ T29] audit: type=1400 audit(1757934593.811:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.218469][ T29] audit: type=1400 audit(1757934593.841:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.349309][ T3291] cgroup: Unknown subsys name 'cpuset' [ 26.355963][ T3291] cgroup: Unknown subsys name 'rlimit' [ 26.504132][ T29] audit: type=1400 audit(1757934594.151:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.529474][ T29] audit: type=1400 audit(1757934594.151:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.551292][ T29] audit: type=1400 audit(1757934594.151:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.551889][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.571900][ T29] audit: type=1400 audit(1757934594.151:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.600898][ T29] audit: type=1400 audit(1757934594.161:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.626235][ T29] audit: type=1400 audit(1757934594.161:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.646605][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.650352][ T29] audit: type=1400 audit(1757934594.231:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.794538][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.887504][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.905881][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.913212][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.921043][ T3303] bridge_slave_0: entered allmulticast mode [ 27.927632][ T3303] bridge_slave_0: entered promiscuous mode [ 27.939678][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.959162][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.966429][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.973781][ T3303] bridge_slave_1: entered allmulticast mode [ 27.980753][ T3303] bridge_slave_1: entered promiscuous mode [ 27.996718][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.036332][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.055394][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.082907][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.092356][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.099627][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.107024][ T3309] bridge_slave_0: entered allmulticast mode [ 28.113392][ T3309] bridge_slave_0: entered promiscuous mode [ 28.122963][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.130229][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.137520][ T3309] bridge_slave_1: entered allmulticast mode [ 28.143937][ T3309] bridge_slave_1: entered promiscuous mode [ 28.181923][ T3303] team0: Port device team_slave_0 added [ 28.204510][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.211736][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.219035][ T3307] bridge_slave_0: entered allmulticast mode [ 28.225796][ T3307] bridge_slave_0: entered promiscuous mode [ 28.232894][ T3303] team0: Port device team_slave_1 added [ 28.242462][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.256849][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.264265][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.272070][ T3307] bridge_slave_1: entered allmulticast mode [ 28.278972][ T3307] bridge_slave_1: entered promiscuous mode [ 28.292061][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.306132][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.313544][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.321383][ T3301] bridge_slave_0: entered allmulticast mode [ 28.327723][ T3301] bridge_slave_0: entered promiscuous mode [ 28.356891][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.364189][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.371481][ T3301] bridge_slave_1: entered allmulticast mode [ 28.378018][ T3301] bridge_slave_1: entered promiscuous mode [ 28.390251][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.400094][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.407045][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.433079][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.451268][ T3309] team0: Port device team_slave_0 added [ 28.457409][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.465318][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.472956][ T3308] bridge_slave_0: entered allmulticast mode [ 28.479828][ T3308] bridge_slave_0: entered promiscuous mode [ 28.491756][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.501854][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.511555][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.518567][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.545468][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.561342][ T3309] team0: Port device team_slave_1 added [ 28.567875][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.575253][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.582966][ T3308] bridge_slave_1: entered allmulticast mode [ 28.589751][ T3308] bridge_slave_1: entered promiscuous mode [ 28.602602][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.650883][ T3307] team0: Port device team_slave_0 added [ 28.662370][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.671445][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.699497][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.712999][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.725155][ T3307] team0: Port device team_slave_1 added [ 28.732006][ T3301] team0: Port device team_slave_0 added [ 28.743555][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.751393][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.786740][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.802145][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.816895][ T3301] team0: Port device team_slave_1 added [ 28.824747][ T3303] hsr_slave_0: entered promiscuous mode [ 28.831142][ T3303] hsr_slave_1: entered promiscuous mode [ 28.885667][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.893247][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.923640][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.945095][ T3309] hsr_slave_0: entered promiscuous mode [ 28.951958][ T3309] hsr_slave_1: entered promiscuous mode [ 28.959724][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.965749][ T3309] Cannot create hsr debugfs directory [ 28.972968][ T3308] team0: Port device team_slave_0 added [ 28.979468][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.986892][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.014259][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.026026][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.033041][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.060035][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.071509][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.078659][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.105916][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.121787][ T3308] team0: Port device team_slave_1 added [ 29.164807][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.171955][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.198825][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.211852][ T3307] hsr_slave_0: entered promiscuous mode [ 29.218051][ T3307] hsr_slave_1: entered promiscuous mode [ 29.224568][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 29.230574][ T3307] Cannot create hsr debugfs directory [ 29.248677][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.256519][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.284995][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.334175][ T3301] hsr_slave_0: entered promiscuous mode [ 29.340943][ T3301] hsr_slave_1: entered promiscuous mode [ 29.347176][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 29.353187][ T3301] Cannot create hsr debugfs directory [ 29.415340][ T3308] hsr_slave_0: entered promiscuous mode [ 29.421824][ T3308] hsr_slave_1: entered promiscuous mode [ 29.428196][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 29.434267][ T3308] Cannot create hsr debugfs directory [ 29.545030][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.563472][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.577937][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.599365][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.618460][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.636198][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.645795][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.659701][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.679599][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.703592][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.717261][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.727097][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.745581][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.755425][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.767287][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.777098][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.820477][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.833511][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.843464][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.860862][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.876655][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.895647][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.914409][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.923503][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.930744][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.949791][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.956958][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.982473][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.997103][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.005172][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.014878][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.022583][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.036447][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.052592][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.081829][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.104022][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.112206][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.122295][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.129656][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.142038][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.152707][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.170498][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.180209][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.190067][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.198240][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.227055][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.237812][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.265289][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.301789][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.326878][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.338285][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.346612][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.365408][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.373567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.390523][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.431817][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.442632][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.542342][ T3303] veth0_vlan: entered promiscuous mode [ 30.560612][ T3303] veth1_vlan: entered promiscuous mode [ 30.583580][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.600990][ T3309] veth0_vlan: entered promiscuous mode [ 30.619695][ T3301] veth0_vlan: entered promiscuous mode [ 30.631877][ T3303] veth0_macvtap: entered promiscuous mode [ 30.639913][ T3309] veth1_vlan: entered promiscuous mode [ 30.654374][ T3301] veth1_vlan: entered promiscuous mode [ 30.675524][ T3303] veth1_macvtap: entered promiscuous mode [ 30.701877][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.718248][ T3301] veth0_macvtap: entered promiscuous mode [ 30.735385][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.748331][ T3301] veth1_macvtap: entered promiscuous mode [ 30.767408][ T3308] veth0_vlan: entered promiscuous mode [ 30.774502][ T3307] veth0_vlan: entered promiscuous mode [ 30.785758][ T3309] veth0_macvtap: entered promiscuous mode [ 30.793089][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.802671][ T54] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.813468][ T3308] veth1_vlan: entered promiscuous mode [ 30.821209][ T3309] veth1_macvtap: entered promiscuous mode [ 30.829421][ T3307] veth1_vlan: entered promiscuous mode [ 30.836102][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.850420][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.863449][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.885599][ T3307] veth0_macvtap: entered promiscuous mode [ 30.894077][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.912662][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.925098][ T3307] veth1_macvtap: entered promiscuous mode [ 30.934872][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.939534][ T3308] veth0_macvtap: entered promiscuous mode [ 30.958278][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.968536][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.979237][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.996625][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.006393][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.023875][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.034194][ T3308] veth1_macvtap: entered promiscuous mode [ 31.062456][ T2857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.073181][ T2857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.089445][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.100620][ T2857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.120800][ T3474] loop3: detected capacity change from 0 to 1024 [ 31.121858][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.144810][ T2857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.148695][ T3474] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.164253][ T3474] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.166718][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.191911][ T3474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.208117][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 31.208132][ T29] audit: type=1400 audit(1757934598.851:99): avc: denied { mount } for pid=3473 comm="syz.3.6" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.240498][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.255828][ T3474] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 31.262591][ T29] audit: type=1400 audit(1757934598.911:100): avc: denied { create } for pid=3473 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.283446][ T2857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.289210][ T29] audit: type=1400 audit(1757934598.911:101): avc: denied { ioctl } for pid=3473 comm="syz.3.6" path="socket:[4010]" dev="sockfs" ino=4010 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.323804][ T29] audit: type=1400 audit(1757934598.971:102): avc: denied { create } for pid=3473 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.338587][ T2857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.345974][ T29] audit: type=1400 audit(1757934598.971:103): avc: denied { write } for pid=3473 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.395078][ T3485] loop1: detected capacity change from 0 to 512 [ 31.404404][ T2857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.415228][ T2857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.433979][ T2857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.444062][ T2857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.453759][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.478260][ T2857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.490369][ T3485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.503816][ T3485] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.514653][ T29] audit: type=1326 audit(1757934599.141:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc500eceba9 code=0x7ffc0000 [ 31.538802][ T29] audit: type=1326 audit(1757934599.141:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc500eceba9 code=0x7ffc0000 [ 31.563365][ T29] audit: type=1326 audit(1757934599.141:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc500eceba9 code=0x7ffc0000 [ 31.588008][ T29] audit: type=1400 audit(1757934599.151:107): avc: denied { open } for pid=3489 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.592113][ T3495] loop3: detected capacity change from 0 to 512 [ 31.608168][ T29] audit: type=1400 audit(1757934599.151:108): avc: denied { kernel } for pid=3489 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.638276][ T3485] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.660406][ T3485] EXT4-fs (loop1): 1 truncate cleaned up [ 31.667084][ T3485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.697088][ T3495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.735412][ T3495] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.779781][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.793950][ T3493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.820414][ T3509] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 31.838125][ C1] hrtimer: interrupt took 28904 ns [ 31.861219][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.898236][ T3509] team0: Port device dummy0 added [ 31.914301][ T3493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.926094][ T3515] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13'. [ 31.957290][ T3519] loop1: detected capacity change from 0 to 512 [ 32.009408][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.023675][ T3523] loop0: detected capacity change from 0 to 2048 [ 32.048706][ T3519] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.079178][ T3509] syz.3.10 (3509) used greatest stack depth: 9864 bytes left [ 32.124988][ T3537] loop3: detected capacity change from 0 to 512 [ 32.165298][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.195907][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.196146][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 32.225048][ T3537] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.234431][ T3548] team1: entered promiscuous mode [ 32.245346][ T3548] team1: entered allmulticast mode [ 32.265967][ T3551] process 'syz.4.25' launched './file1' with NULL argv: empty string added [ 32.272402][ T3548] Zero length message leads to an empty skb [ 32.310675][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.343957][ T3557] netlink: 'syz.4.28': attribute type 4 has an invalid length. [ 32.392289][ T3560] loop0: detected capacity change from 0 to 512 [ 32.452596][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.499834][ T3560] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.522532][ T3573] capability: warning: `syz.2.33' uses 32-bit capabilities (legacy support in use) [ 32.571042][ T3560] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.27: Failed to acquire dquot type 0 [ 32.660397][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.774072][ T3587] loop0: detected capacity change from 0 to 512 [ 32.797264][ T3587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.925491][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.224972][ T3603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.401670][ T3614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.532511][ T3603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.595742][ T3628] capability: warning: `syz.2.54' uses deprecated v2 capabilities in a way that may be insecure [ 33.619888][ T3603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.646381][ T3630] netlink: 96 bytes leftover after parsing attributes in process `syz.0.55'. [ 33.731909][ T3603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.808309][ T3421] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.822349][ T3650] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 33.830580][ T3650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.64'. [ 33.841998][ T3421] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.852652][ T3421] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.863004][ T3421] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.054273][ T3614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.116172][ T3614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.199982][ T3680] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 34.243128][ T3614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.272864][ T3681] vlan2: entered allmulticast mode [ 34.278623][ T3681] macvlan1: entered allmulticast mode [ 34.284820][ T3681] veth1_vlan: entered allmulticast mode [ 34.300886][ T3685] openvswitch: netlink: Message has 6 unknown bytes. [ 34.328842][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 34.345320][ T3687] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 34.361773][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.374191][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.386601][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.401053][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.511874][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 34.523275][ T3700] netlink: 236 bytes leftover after parsing attributes in process `syz.4.87'. [ 34.604037][ T3710] netlink: 'syz.4.90': attribute type 21 has an invalid length. [ 34.611811][ T3710] netlink: 156 bytes leftover after parsing attributes in process `syz.4.90'. [ 34.632329][ T3712] loop0: detected capacity change from 0 to 512 [ 34.647237][ T3712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.681087][ T3712] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.701600][ T3712] EXT4-fs (loop0): 1 truncate cleaned up [ 34.711226][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.753361][ T3721] loop4: detected capacity change from 0 to 1024 [ 34.760745][ T3721] ======================================================= [ 34.760745][ T3721] WARNING: The mand mount option has been deprecated and [ 34.760745][ T3721] and is ignored by this kernel. Remove the mand [ 34.760745][ T3721] option from the mount to silence this warning. [ 34.760745][ T3721] ======================================================= [ 34.819282][ T3721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.891438][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.909948][ T3729] loop1: detected capacity change from 0 to 256 [ 35.005894][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 35.020808][ T3733] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 35.030680][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.135832][ T3746] loop1: detected capacity change from 0 to 1024 [ 35.151769][ T3746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.167328][ T3747] syzkaller0: entered promiscuous mode [ 35.173219][ T3747] syzkaller0: entered allmulticast mode [ 35.223631][ T3750] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.104: Allocating blocks 497-513 which overlap fs metadata [ 35.242270][ T3750] EXT4-fs (loop1): pa ffff88810769f0e0: logic 256, phys. 385, len 8 [ 35.251168][ T3750] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 35.269245][ T3750] syz.1.104 (3750) used greatest stack depth: 9792 bytes left [ 35.302455][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.351984][ T3759] netlink: 'syz.2.108': attribute type 4 has an invalid length. [ 35.444914][ T3770] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 35.456905][ T3770] team0: Port device dummy0 added [ 35.467313][ T3770] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 35.476348][ T3770] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 35.489520][ T3770] team0: Failed to send options change via netlink (err -105) [ 35.499415][ T3770] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 35.510550][ T3770] team0: Port device dummy0 removed [ 35.521010][ T3770] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.564910][ T3774] loop2: detected capacity change from 0 to 512 [ 35.572731][ T3774] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.601219][ T3774] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.620100][ T3774] EXT4-fs (loop2): 1 truncate cleaned up [ 35.627687][ T3774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.645658][ T3779] loop1: detected capacity change from 0 to 512 [ 35.656826][ T3779] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.682704][ T3779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 35.691613][ T3779] System zones: 0-2, 18-18, 34-34 [ 35.697877][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.711859][ T3779] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.746626][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.870409][ T3786] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 35.879055][ T3786] vhci_hcd: invalid port number 96 [ 35.884580][ T3786] vhci_hcd: default hub control req: 0017 vfffc i0060 l0 [ 35.942130][ T3788] wg2: entered promiscuous mode [ 35.947492][ T3788] wg2: entered allmulticast mode [ 36.020636][ T3792] binfmt_misc: register: failed to install interpreter file ./file2 [ 36.035866][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.055605][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.216447][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 36.216460][ T29] audit: type=1400 audit(1757934603.861:381): avc: denied { allowed } for pid=3795 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.251608][ T29] audit: type=1400 audit(1757934603.891:382): avc: denied { create } for pid=3795 comm="syz.0.124" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.274608][ T29] audit: type=1400 audit(1757934603.891:383): avc: denied { map } for pid=3795 comm="syz.0.124" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.300364][ T29] audit: type=1400 audit(1757934603.891:384): avc: denied { read write } for pid=3795 comm="syz.0.124" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.329071][ T29] audit: type=1400 audit(1757934603.901:385): avc: denied { read } for pid=3795 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.351460][ T29] audit: type=1400 audit(1757934604.001:386): avc: denied { write } for pid=3795 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.475958][ T29] audit: type=1400 audit(1757934604.121:387): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.477070][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.576172][ T29] audit: type=1326 audit(1757934604.221:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd184eba9 code=0x7ffc0000 [ 36.602400][ T29] audit: type=1326 audit(1757934604.231:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fecd184eba9 code=0x7ffc0000 [ 36.628224][ T29] audit: type=1400 audit(1757934604.231:390): avc: denied { open } for pid=3804 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.711731][ T3809] loop1: detected capacity change from 0 to 1024 [ 36.729582][ T3809] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 36.741349][ T3809] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 36.752252][ T3809] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 36.764900][ T3809] EXT4-fs (loop1): invalid journal inode [ 36.772301][ T3809] EXT4-fs (loop1): can't get journal size [ 36.807745][ T3809] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.130: blocks 2-2 from inode overlap system zone [ 36.828537][ T3809] EXT4-fs (loop1): failed to initialize system zone (-117) [ 36.838280][ T3809] EXT4-fs (loop1): mount failed [ 37.063362][ T3829] loop2: detected capacity change from 0 to 2048 [ 37.105040][ T3829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.236829][ T3836] netlink: 'syz.2.137': attribute type 10 has an invalid length. [ 37.303859][ T3836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.352501][ T3836] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 37.520312][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.761685][ T3851] veth1_to_bond: entered allmulticast mode [ 37.769281][ T3851] veth1_to_bond: left allmulticast mode [ 37.792404][ T3854] __nla_validate_parse: 2 callbacks suppressed [ 37.792415][ T3854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 37.926146][ T3862] loop1: detected capacity change from 0 to 512 [ 38.225312][ T3874] loop0: detected capacity change from 0 to 512 [ 38.233085][ T3874] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.243088][ T3874] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 38.252151][ T3874] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 38.262927][ T3874] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 38.271277][ T3874] System zones: 0-2, 18-18, 34-35 [ 38.277212][ T3874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.312053][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.445724][ T3900] syzkaller1: entered promiscuous mode [ 38.451388][ T3900] syzkaller1: entered allmulticast mode [ 38.492076][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.547875][ T3913] netlink: 64 bytes leftover after parsing attributes in process `syz.1.163'. [ 38.576534][ T3917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'. [ 38.609031][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.633551][ T3922] loop4: detected capacity change from 0 to 512 [ 38.653166][ T3922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.672603][ T3922] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.688264][ T3922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.690085][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.753970][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.791199][ T3939] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 38.799510][ T3939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.169'. [ 38.826040][ T3939] batman_adv: batadv0: Adding interface: veth1_vlan [ 38.833191][ T3939] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.861376][ T3939] batman_adv: batadv0: Interface activated: veth1_vlan [ 38.883147][ T3945] loop1: detected capacity change from 0 to 1024 [ 38.919709][ T3914] chnl_net:caif_netlink_parms(): no params data found [ 38.940440][ T3945] EXT4-fs: Ignoring removed orlov option [ 38.990270][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.010375][ T48] bridge_slave_1: left allmulticast mode [ 39.016241][ T48] bridge_slave_1: left promiscuous mode [ 39.022282][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.036954][ T3945] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.059453][ T3945] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.171: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.075018][ T48] bridge_slave_0: left allmulticast mode [ 39.081015][ T48] bridge_slave_0: left promiscuous mode [ 39.082294][ T3945] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 39.086900][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.100157][ T3945] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.100157][ T3945] [ 39.123853][ T3945] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.171: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.143497][ T3945] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 39.156058][ T3945] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.156058][ T3945] [ 39.172832][ T3961] loop3: detected capacity change from 0 to 1024 [ 39.196346][ T3961] EXT4-fs: Ignoring removed oldalloc option [ 39.198754][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.202493][ T3961] EXT4-fs: Ignoring removed bh option [ 39.254826][ T3961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.313148][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.341168][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.370399][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.383712][ T48] bond0 (unregistering): Released all slaves [ 39.456827][ T3980] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 39.477247][ T3982] bond0: (slave dummy0): Releasing backup interface [ 39.491451][ T3982] bridge_slave_0: left allmulticast mode [ 39.497210][ T3982] bridge_slave_0: left promiscuous mode [ 39.503859][ T3982] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.522876][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 39.538490][ T3982] bridge_slave_1: left allmulticast mode [ 39.544358][ T3982] bridge_slave_1: left promiscuous mode [ 39.550325][ T3982] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.570693][ T3982] bond0: (slave bond_slave_0): Releasing backup interface [ 39.585656][ T3982] bond0: (slave bond_slave_1): Releasing backup interface [ 39.593436][ T3983] syz.3.179 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.633251][ T3982] team0: Port device team_slave_0 removed [ 39.644034][ T3982] team0: Port device team_slave_1 removed [ 39.662618][ T3982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.670683][ T3982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.719369][ T3982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.727169][ T3982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.804334][ T48] hsr_slave_0: left promiscuous mode [ 39.823400][ T48] hsr_slave_1: left promiscuous mode [ 39.844081][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.851887][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.886606][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.894519][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.926724][ T48] veth1_macvtap: left promiscuous mode [ 39.938656][ T48] veth0_macvtap: left promiscuous mode [ 39.954324][ T48] veth1_vlan: left allmulticast mode [ 39.961354][ T48] veth1_vlan: left promiscuous mode [ 39.967053][ T48] veth0_vlan: left promiscuous mode [ 40.161934][ T48] team0 (unregistering): Port device team_slave_1 removed [ 40.188559][ T48] team0 (unregistering): Port device team_slave_0 removed [ 40.280701][ T3914] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.288136][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.305286][ T3914] bridge_slave_0: entered allmulticast mode [ 40.314067][ T3914] bridge_slave_0: entered promiscuous mode [ 40.326747][ T4026] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.361858][ T4029] atomic_op ffff88811a035d28 conn xmit_atomic 0000000000000000 [ 40.393572][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 40.410392][ T3914] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.417983][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.432444][ T3914] bridge_slave_1: entered allmulticast mode [ 40.440614][ T3914] bridge_slave_1: entered promiscuous mode [ 40.452398][ T4026] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.501575][ T3914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.517195][ T3914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.530980][ T4026] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.572810][ T3914] team0: Port device team_slave_0 added [ 40.590028][ T3914] team0: Port device team_slave_1 added [ 40.657630][ T4026] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.714992][ T3914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.722038][ T3914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.748849][ T3914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.771067][ T3914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.779096][ T3914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.809842][ T3914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.895024][ T4060] loop4: detected capacity change from 0 to 2048 [ 40.915022][ T3421] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.925984][ T3914] hsr_slave_0: entered promiscuous mode [ 40.935111][ T3914] hsr_slave_1: entered promiscuous mode [ 40.947077][ T3914] debugfs: 'hsr0' already exists in 'hsr' [ 40.953813][ T3914] Cannot create hsr debugfs directory [ 40.960656][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.977024][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.986754][ T4060] loop4: unable to read partition table [ 40.995334][ T4060] loop4: partition table beyond EOD, truncated [ 41.005575][ T4060] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 41.049131][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 41.059817][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.065995][ T2993] loop4: unable to read partition table [ 41.080307][ T2993] loop4: partition table beyond EOD, truncated [ 41.112625][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 41.145486][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 41.172937][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 41.234705][ T3914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.257252][ T3914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.284984][ T3914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.308169][ T3914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.322918][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 41.322932][ T29] audit: type=1400 audit(1757934608.971:632): avc: denied { mounton } for pid=4088 comm="syz.2.209" path="/proc/130/task" dev="proc" ino=7526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 41.394047][ T29] audit: type=1400 audit(1757934608.971:633): avc: denied { mount } for pid=4088 comm="syz.2.209" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.567814][ T3914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.582755][ T29] audit: type=1400 audit(1757934609.231:634): avc: denied { name_connect } for pid=4119 comm="syz.3.213" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 41.635576][ T3914] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.664515][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.674632][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.696542][ T29] audit: type=1400 audit(1757934609.341:635): avc: denied { cpu } for pid=4128 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.720256][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.727546][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.764121][ T3914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.789526][ T29] audit: type=1326 audit(1757934609.421:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6ec5eba9 code=0x7ffc0000 [ 41.815907][ T29] audit: type=1326 audit(1757934609.421:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6ec5eba9 code=0x7ffc0000 [ 41.840651][ T29] audit: type=1326 audit(1757934609.421:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe6ec5eba9 code=0x7ffc0000 [ 41.864214][ T29] audit: type=1326 audit(1757934609.421:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6ec5eba9 code=0x7ffc0000 [ 41.887811][ T29] audit: type=1326 audit(1757934609.421:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe6ec5eba9 code=0x7ffc0000 [ 41.897584][ T3914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.911250][ T29] audit: type=1326 audit(1757934609.421:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4130 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6ec5eba9 code=0x7ffc0000 [ 42.042380][ T4164] netlink: 'syz.3.220': attribute type 10 has an invalid length. [ 42.051138][ T4164] dummy0: entered promiscuous mode [ 42.065544][ T4164] team0: Port device dummy0 removed [ 42.098701][ T3914] veth0_vlan: entered promiscuous mode [ 42.109546][ T3914] veth1_vlan: entered promiscuous mode [ 42.142575][ T3914] veth0_macvtap: entered promiscuous mode [ 42.152189][ T3914] veth1_macvtap: entered promiscuous mode [ 42.166085][ T3914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.179722][ T3914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.193781][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.213510][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.229477][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.257585][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.353949][ T4179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.591881][ T4204] loop5: detected capacity change from 0 to 512 [ 42.602026][ T4204] ext4: Unknown parameter 'dont_measure' [ 42.639103][ T4204] loop9: detected capacity change from 0 to 7 [ 42.655939][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.674040][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.682689][ T3292] loop9: unable to read partition table [ 42.690883][ T4204] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.700599][ T4204] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.710274][ T4204] loop9: unable to read partition table [ 42.718960][ T4204] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 42.718960][ T4204] ) failed (rc=-5) [ 42.736386][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.745817][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.754662][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.776059][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.791277][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.879134][ T4226] __nla_validate_parse: 3 callbacks suppressed [ 42.879150][ T4226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 42.896419][ T4226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 42.910668][ T4226] bridge0: port 1(macsec1) entered blocking state [ 42.915124][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.244'. [ 42.917865][ T4226] bridge0: port 1(macsec1) entered disabled state [ 42.927334][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.244'. [ 42.938089][ T4226] macsec1: entered allmulticast mode [ 42.949935][ T4226] macsec1: left allmulticast mode [ 43.009837][ T4234] loop3: detected capacity change from 0 to 128 [ 43.024498][ T4234] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.067409][ T4234] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.131336][ T4247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.339349][ T4265] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.356835][ T4265] FAT-fs (loop5): unable to read boot sector [ 43.489098][ T4281] loop2: detected capacity change from 0 to 512 [ 43.502730][ T4280] loop3: detected capacity change from 0 to 2048 [ 43.520435][ T4281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.544206][ T4281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.585268][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.586930][ T4289] netlink: 'syz.5.268': attribute type 30 has an invalid length. [ 43.606009][ T3948] Alternate GPT is invalid, using primary GPT. [ 43.614659][ T3948] loop3: p1 p2 p3 [ 43.635753][ T4280] Alternate GPT is invalid, using primary GPT. [ 43.643614][ T4280] loop3: p1 p2 p3 [ 43.686129][ T4291] 9pnet: p9_errstr2errno: server reported unknown error [ 43.808277][ T10] IPVS: starting estimator thread 0... [ 43.898429][ T4302] IPVS: using max 2400 ests per chain, 120000 per kthread [ 43.999621][ T4314] loop5: detected capacity change from 0 to 764 [ 44.017237][ T4314] Symlink component flag not implemented [ 44.025394][ T4314] Symlink component flag not implemented (129) [ 44.042285][ T4314] rock: directory entry would overflow storage [ 44.050636][ T4314] rock: sig=0x4f50, size=4, remaining=3 [ 44.057017][ T4314] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 44.183464][ T4326] ref_ctr_offset mismatch. inode: 0x5a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 44.770118][ T4349] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 44.793859][ T4349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.838004][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 44.874081][ T4349] bond1 (unregistering): Released all slaves [ 45.109014][ T4365] Driver unsupported XDP return value 0 on prog (id 252) dev N/A, expect packet loss! [ 45.328896][ T4379] loop2: detected capacity change from 0 to 512 [ 45.350608][ T4379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.378726][ T4379] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.443973][ T4386] tipc: Started in network mode [ 45.449354][ T4386] tipc: Node identity aa40481433, cluster identity 4711 [ 45.457809][ T4386] tipc: Enabled bearer , priority 0 [ 45.467331][ T4386] tipc: Disabling bearer [ 45.497863][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.526499][ T4392] loop2: detected capacity change from 0 to 764 [ 45.548334][ T4392] Symlink component flag not implemented [ 45.555358][ T4392] Symlink component flag not implemented (129) [ 45.562885][ T4392] rock: directory entry would overflow storage [ 45.570174][ T4392] rock: sig=0x4f50, size=4, remaining=3 [ 45.575951][ T4392] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 45.671723][ T4404] loop1: detected capacity change from 0 to 512 [ 45.703347][ T4404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.718169][ T4404] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.756267][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.762337][ T4411] bridge_slave_0: left allmulticast mode [ 45.771859][ T4411] bridge_slave_0: left promiscuous mode [ 45.777717][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.796740][ T4411] bridge_slave_1: left allmulticast mode [ 45.803328][ T4411] bridge_slave_1: left promiscuous mode [ 45.809331][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.842417][ T4411] bond0: (slave bond_slave_0): Releasing backup interface [ 45.889919][ T4411] bond0: (slave bond_slave_1): Releasing backup interface [ 45.922062][ T4411] team0: Port device team_slave_0 removed [ 46.013256][ T4411] team0: Port device team_slave_1 removed [ 46.029991][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.038743][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.066575][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.074839][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.195780][ T4428] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 46.221376][ T4428] bond1: entered promiscuous mode [ 46.227444][ T4428] bond1: entered allmulticast mode [ 46.239385][ T4428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.270511][ T4433] netlink: 168 bytes leftover after parsing attributes in process `syz.4.321'. [ 46.279918][ T4433] tipc: Started in network mode [ 46.284952][ T4433] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 46.294465][ T4433] tipc: Enabling of bearer rejected, failed to enable media [ 46.310416][ T4428] ip6gretap1: entered promiscuous mode [ 46.318999][ T4428] ip6gretap1: entered allmulticast mode [ 46.338580][ T320] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 46.364988][ T4428] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 46.400143][ T4442] netlink: 'syz.3.326': attribute type 30 has an invalid length. [ 46.458862][ T41] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 46.635489][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 46.635505][ T29] audit: type=1326 audit(1757934614.281:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 46.666208][ T29] audit: type=1326 audit(1757934614.281:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 46.689903][ T29] audit: type=1326 audit(1757934614.281:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 46.714406][ T29] audit: type=1326 audit(1757934614.281:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 46.738473][ T29] audit: type=1326 audit(1757934614.281:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 46.763494][ T29] audit: type=1326 audit(1757934614.281:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 46.787750][ T29] audit: type=1326 audit(1757934614.281:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 46.812188][ T29] audit: type=1326 audit(1757934614.281:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 46.874934][ T4463] loop1: detected capacity change from 0 to 2048 [ 46.900695][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 46.908984][ T3292] Alternate GPT is invalid, using primary GPT. [ 46.917117][ T3292] loop1: p1 p2 p3 [ 46.929760][ T4463] Alternate GPT is invalid, using primary GPT. [ 46.936613][ T4463] loop1: p1 p2 p3 [ 47.198410][ T29] audit: type=1400 audit(1757934614.841:812): avc: denied { write } for pid=4482 comm="syz.5.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.268804][ T4488] loop5: detected capacity change from 0 to 512 [ 47.304366][ T4491] geneve2: entered promiscuous mode [ 47.309797][ T4491] geneve2: entered allmulticast mode [ 47.315960][ T4488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.332483][ T4488] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.412684][ T29] audit: type=1326 audit(1757934615.061:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd184eba9 code=0x7ffc0000 [ 47.456371][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 47.461093][ T3914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.479549][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 47.546856][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.349'. [ 47.556630][ T4505] netlink: 'syz.5.349': attribute type 30 has an invalid length. [ 47.648037][ T4515] loop3: detected capacity change from 0 to 2048 [ 47.663041][ T41] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.673032][ T2857] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.685050][ T4515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.698419][ T4513] loop2: detected capacity change from 0 to 8192 [ 47.711926][ T3421] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.739790][ T3421] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.857317][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.957937][ T4539] loop2: detected capacity change from 0 to 2048 [ 47.959674][ T4542] netlink: 'syz.5.369': attribute type 83 has an invalid length. [ 48.123727][ T4554] loop4: detected capacity change from 0 to 2048 [ 48.157909][ T4536] uprobe: syz.3.364:4536 failed to unregister, leaking uprobe [ 48.168273][ T4554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.210914][ T3292] loop2: unable to read partition table [ 48.221744][ T3292] loop2: partition table beyond EOD, truncated [ 48.276290][ T4539] loop2: unable to read partition table [ 48.282769][ T4539] loop2: partition table beyond EOD, truncated [ 48.289286][ T4539] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 48.363666][ T3307] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 48.365782][ T2993] loop2: unable to read partition table [ 48.401365][ T2993] loop2: partition table beyond EOD, truncated [ 48.417068][ T3307] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 48.438167][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.479868][ T4576] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 48.519878][ T4576] hsr_slave_0: left promiscuous mode [ 48.529303][ T4576] hsr_slave_1: left promiscuous mode [ 48.619718][ T4582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 48.862391][ T4596] SELinux: failed to load policy [ 49.044440][ T4608] loop1: detected capacity change from 0 to 2048 [ 49.111524][ T4608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.118227][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.398'. [ 49.175406][ T3309] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 49.196199][ T4230] IPVS: starting estimator thread 0... [ 49.236772][ T3309] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 49.267138][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.289366][ T4627] IPVS: using max 2784 ests per chain, 139200 per kthread [ 49.313321][ T4645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 49.320133][ T4645] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.327908][ T4645] vhci_hcd vhci_hcd.0: Device attached [ 49.353908][ T4643] loop1: detected capacity change from 0 to 128 [ 49.366080][ T4650] loop5: detected capacity change from 0 to 512 [ 49.382438][ T4645] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 49.389085][ T4645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.396964][ T4645] vhci_hcd vhci_hcd.0: Device attached [ 49.428111][ T4650] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.437218][ T4650] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 49.448002][ T4650] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 49.457438][ T4650] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 49.468409][ T4650] System zones: 0-2, 18-18, 34-34 [ 49.474542][ T4650] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.410: iget: bad i_size value: 360287970189639680 [ 49.492983][ T4650] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.410: couldn't read orphan inode 15 (err -117) [ 49.508401][ T4230] vhci_hcd: vhci_device speed not set [ 49.511807][ T4650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.549996][ T4662] loop2: detected capacity change from 0 to 2048 [ 49.568416][ T4230] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 49.571284][ T4668] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 49.584067][ T4668] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.591627][ T4668] vhci_hcd vhci_hcd.0: Device attached [ 49.617808][ T4673] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.622145][ T4675] loop1: detected capacity change from 0 to 512 [ 49.633157][ T4645] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 49.633178][ T4645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.633219][ T4645] vhci_hcd vhci_hcd.0: Device attached [ 49.653676][ T4676] vhci_hcd: connection closed [ 49.655170][ T12] vhci_hcd: stop threads [ 49.657661][ T4646] vhci_hcd: connection reset by peer [ 49.660813][ T12] vhci_hcd: release socket [ 49.660826][ T12] vhci_hcd: disconnect device [ 49.661714][ T4669] vhci_hcd: connection closed [ 49.665861][ T4652] vhci_hcd: connection closed [ 49.686912][ T4675] EXT4-fs: Ignoring removed nobh option [ 49.699429][ T4650] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 3: comm syz.5.410: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 49.719683][ T12] vhci_hcd: stop threads [ 49.724226][ T12] vhci_hcd: release socket [ 49.729018][ T12] vhci_hcd: disconnect device [ 49.739311][ T4662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.762174][ T12] vhci_hcd: stop threads [ 49.767075][ T12] vhci_hcd: release socket [ 49.771863][ T12] vhci_hcd: disconnect device [ 49.777520][ T4675] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.778023][ T3914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.792174][ T12] vhci_hcd: stop threads [ 49.803667][ T12] vhci_hcd: release socket [ 49.808418][ T12] vhci_hcd: disconnect device [ 49.818231][ T4675] EXT4-fs (loop1): 1 truncate cleaned up [ 49.826458][ T4675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.857123][ T3308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 49.862669][ T4685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.876073][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.881567][ T4685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.928102][ T3308] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 49.945006][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.120840][ T4707] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 50.233460][ T4714] ref_ctr_offset mismatch. inode: 0x253 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 50.392166][ T4717] loop2: detected capacity change from 0 to 2048 [ 50.759299][ T4717] Alternate GPT is invalid, using primary GPT. [ 50.766205][ T4717] loop2: p1 p2 p3 [ 50.963218][ T4738] tipc: Enabled bearer , priority 0 [ 50.990826][ T4738] tipc: Disabling bearer [ 51.182219][ T4765] loop3: detected capacity change from 0 to 1024 [ 51.233645][ T4765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.277856][ T4765] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.443: Allocating blocks 385-513 which overlap fs metadata [ 51.326186][ T4765] EXT4-fs (loop3): pa ffff88810769f1c0: logic 16, phys. 129, len 24 [ 51.339190][ T4765] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 51.431822][ T4765] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 51.445143][ T4765] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.445143][ T4765] [ 51.455400][ T4765] EXT4-fs (loop3): Total free blocks count 0 [ 51.461682][ T4765] EXT4-fs (loop3): Free/Dirty block details [ 51.467978][ T4765] EXT4-fs (loop3): free_blocks=128 [ 51.473302][ T4765] EXT4-fs (loop3): dirty_blocks=0 [ 51.478681][ T4765] EXT4-fs (loop3): Block reservation details [ 51.484944][ T4765] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 51.614711][ T4765] syz.3.443 (4765) used greatest stack depth: 9128 bytes left [ 51.639524][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 51.639541][ T29] audit: type=1326 audit(1757934619.291:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecd184eba9 code=0x7ffc0000 [ 51.672869][ T4773] loop2: detected capacity change from 0 to 256 [ 51.719907][ T29] audit: type=1326 audit(1757934619.321:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd184eba9 code=0x7ffc0000 [ 51.747104][ T29] audit: type=1326 audit(1757934619.321:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd184eba9 code=0x7ffc0000 [ 51.776537][ T29] audit: type=1326 audit(1757934619.321:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fecd184eba9 code=0x7ffc0000 [ 51.800877][ T29] audit: type=1326 audit(1757934619.321:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fecd184ebe3 code=0x7ffc0000 [ 51.826081][ T29] audit: type=1326 audit(1757934619.321:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecd184d65f code=0x7ffc0000 [ 51.851079][ T29] audit: type=1326 audit(1757934619.321:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fecd184ec37 code=0x7ffc0000 [ 51.876852][ T29] audit: type=1326 audit(1757934619.321:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fecd184d510 code=0x7ffc0000 [ 51.901515][ T29] audit: type=1326 audit(1757934619.321:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fecd184e7ab code=0x7ffc0000 [ 51.926532][ T29] audit: type=1326 audit(1757934619.351:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fecd184d80a code=0x7ffc0000 [ 52.024088][ T4776] delete_channel: no stack [ 52.122620][ T4789] loop3: detected capacity change from 0 to 1024 [ 52.164858][ T4789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.240520][ T4789] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.453: Allocating blocks 449-513 which overlap fs metadata [ 52.324764][ T4788] EXT4-fs (loop3): pa ffff88810769f230: logic 48, phys. 177, len 21 [ 52.334140][ T4788] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 52.371313][ T4804] loop2: detected capacity change from 0 to 128 [ 52.415162][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.603836][ T4804] syz.2.458: attempt to access beyond end of device [ 52.603836][ T4804] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 52.619484][ T4804] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 52.694187][ T4817] loop2: detected capacity change from 0 to 512 [ 52.703219][ T4817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.717793][ T4817] EXT4-fs (loop2): 1 truncate cleaned up [ 52.724310][ T4817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.738032][ T4817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.777935][ T4820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.789805][ T4820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.798550][ T4822] loop2: detected capacity change from 0 to 128 [ 52.809489][ T4822] syz.2.465: attempt to access beyond end of device [ 52.809489][ T4822] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 52.824365][ T4822] syz.2.465: attempt to access beyond end of device [ 52.824365][ T4822] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 52.840461][ T4822] syz.2.465: attempt to access beyond end of device [ 52.840461][ T4822] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 52.854971][ T4822] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 52.864639][ T4822] syz.2.465: attempt to access beyond end of device [ 52.864639][ T4822] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 52.879790][ T4822] syz.2.465: attempt to access beyond end of device [ 52.879790][ T4822] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 52.894683][ T4822] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 52.904137][ T4822] syz.2.465: attempt to access beyond end of device [ 52.904137][ T4822] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 52.918274][ T4822] syz.2.465: attempt to access beyond end of device [ 52.918274][ T4822] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 52.931957][ T4822] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 52.943939][ T4822] syz.2.465: attempt to access beyond end of device [ 52.943939][ T4822] loop2: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 52.959923][ T4822] syz.2.465: attempt to access beyond end of device [ 52.959923][ T4822] loop2: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 52.974692][ T4822] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 52.985504][ T4822] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 52.997331][ T4822] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 53.007760][ T4822] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 53.019120][ T4822] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 53.034724][ T4822] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 53.152779][ T4831] hub 6-0:1.0: USB hub found [ 53.157986][ T4831] hub 6-0:1.0: 8 ports detected [ 53.193166][ T4833] pim6reg1: entered promiscuous mode [ 53.199563][ T4833] pim6reg1: entered allmulticast mode [ 53.277957][ T4838] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.289434][ T4838] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.336026][ T4838] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.347184][ T4838] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.405840][ T4850] loop2: detected capacity change from 0 to 128 [ 53.413934][ T4850] EXT4-fs: Ignoring removed nobh option [ 53.424094][ T4838] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.435362][ T4838] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.467010][ T4850] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.482675][ T4850] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.553895][ T4838] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.554773][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.565661][ T4838] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.589917][ T4859] loop3: detected capacity change from 0 to 512 [ 53.604022][ T4859] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.618273][ T4859] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.480: EA inode hash validation failed [ 53.634892][ T4859] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.650625][ T4859] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.480: corrupted inode contents [ 53.654955][ T41] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.673673][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.684580][ T4859] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.480: mark_inode_dirty error [ 53.703722][ T4871] mmap: syz.2.483 (4871) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.704200][ T41] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.717388][ T4859] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.480: corrupted inode contents [ 53.725636][ T41] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.749885][ T4859] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.480: mark_inode_dirty error [ 53.750137][ T41] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.771461][ T41] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.782213][ T41] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.790689][ T41] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.797267][ T4859] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.480: mark inode dirty (error -117) [ 53.819663][ T4859] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 53.829087][ T4859] EXT4-fs (loop3): 1 orphan inode deleted [ 53.835282][ T4859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.884231][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.485'. [ 53.904374][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.914408][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.485'. [ 54.204597][ T4897] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.283125][ T4891] loop2: detected capacity change from 0 to 512 [ 54.311166][ T4891] EXT4-fs (loop2): too many log groups per flexible block group [ 54.319578][ T4891] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 54.334604][ T4891] EXT4-fs (loop2): mount failed [ 54.363551][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.499'. [ 54.405092][ T4915] loop4: detected capacity change from 0 to 512 [ 54.439594][ T4915] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.467932][ T4915] EXT4-fs (loop4): 1 truncate cleaned up [ 54.497393][ T4915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.524750][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 54.547644][ T4924] loop2: detected capacity change from 0 to 8192 [ 54.604611][ T4230] usb 7-1: enqueue for inactive port 0 [ 54.622855][ T4230] usb 7-1: enqueue for inactive port 0 [ 54.669098][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.708526][ T4230] vhci_hcd: vhci_device speed not set [ 54.791098][ T4942] loop4: detected capacity change from 0 to 1024 [ 54.814929][ T4942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.908506][ T4942] loop4: detected capacity change from 1024 to 64 [ 54.926990][ T3307] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /83/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 54.971931][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.103111][ T3421] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.152864][ T3421] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.188001][ T4974] loop5: detected capacity change from 0 to 1024 [ 55.196534][ T3421] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.210060][ T4974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.239937][ T3421] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.279863][ T3914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.327803][ T3421] bridge_slave_1: left allmulticast mode [ 55.334681][ T3421] bridge_slave_1: left promiscuous mode [ 55.341521][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.350695][ T3421] bridge_slave_0: left allmulticast mode [ 55.356575][ T3421] bridge_slave_0: left promiscuous mode [ 55.362338][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.457873][ T4990] loop5: detected capacity change from 0 to 2048 [ 55.491314][ T3421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.498993][ T4990] Alternate GPT is invalid, using primary GPT. [ 55.506239][ T4990] loop5: p1 p2 p3 [ 55.511581][ T3421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.535937][ T3421] bond0 (unregistering): Released all slaves [ 55.603298][ T3421] tipc: Left network mode [ 55.603467][ T4970] chnl_net:caif_netlink_parms(): no params data found [ 55.637593][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.645277][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.653539][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.661200][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.668047][ T5004] loop1: detected capacity change from 0 to 512 [ 55.675364][ T3421] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 55.682585][ T3421] batman_adv: batadv0: Removing interface: veth1_vlan [ 55.684239][ T5004] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.703093][ T3421] veth1_macvtap: left promiscuous mode [ 55.709016][ T3421] veth0_macvtap: left promiscuous mode [ 55.716357][ T5004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.717308][ T3421] veth1_vlan: left promiscuous mode [ 55.729468][ T5004] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.734362][ T3421] veth0_vlan: left promiscuous mode [ 55.782350][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.823352][ T3421] team0 (unregistering): Port device team_slave_1 removed [ 55.833456][ T3421] team0 (unregistering): Port device team_slave_0 removed [ 55.910999][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.918728][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.926629][ T4970] bridge_slave_0: entered allmulticast mode [ 55.934333][ T4970] bridge_slave_0: entered promiscuous mode [ 55.950953][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.958866][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.973173][ T4970] bridge_slave_1: entered allmulticast mode [ 55.980446][ T4970] bridge_slave_1: entered promiscuous mode [ 55.993289][ T5023] netlink: 5 bytes leftover after parsing attributes in process `syz.3.538'. [ 56.020296][ T5023] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 56.029008][ T5023] 0ªî{X¹¦: entered allmulticast mode [ 56.035395][ T5023] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 56.055721][ T4970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.078584][ T4970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.106455][ T4970] team0: Port device team_slave_0 added [ 56.113677][ T4970] team0: Port device team_slave_1 added [ 56.138040][ T4970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.145299][ T4970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.171701][ T4970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.183205][ T4970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.190201][ T4970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.216687][ T4970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.233532][ T3421] IPVS: stop unused estimator thread 0... [ 56.247811][ T5033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5033 comm=syz.2.541 [ 56.284448][ T4970] hsr_slave_0: entered promiscuous mode [ 56.285961][ T5036] loop1: detected capacity change from 0 to 512 [ 56.297436][ T4970] hsr_slave_1: entered promiscuous mode [ 56.306659][ T4970] debugfs: 'hsr0' already exists in 'hsr' [ 56.312581][ T4970] Cannot create hsr debugfs directory [ 56.340123][ T5037] tipc: Started in network mode [ 56.345273][ T5037] tipc: Node identity 46fcf77bce9b, cluster identity 4711 [ 56.352704][ T5037] tipc: Enabled bearer , priority 0 [ 56.390111][ T5037] tipc: Disabling bearer [ 56.403572][ T5046] loop3: detected capacity change from 0 to 164 [ 56.425397][ T5044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.446873][ T5048] loop3: detected capacity change from 0 to 1024 [ 56.454561][ T5048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.474742][ T5048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.574835][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.582182][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.640592][ T5054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.667121][ T5054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.720654][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.794051][ T5060] netlink: 'syz.5.551': attribute type 10 has an invalid length. [ 56.825222][ T5044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.854700][ T41] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.865955][ T5060] ipvlan0: entered allmulticast mode [ 56.871974][ T5060] veth0_vlan: entered allmulticast mode [ 56.879664][ T5060] team0: Device ipvlan0 failed to register rx_handler [ 56.913872][ T5079] geneve2: entered promiscuous mode [ 56.920002][ T5079] geneve2: entered allmulticast mode [ 56.945826][ T5044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.969243][ T41] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.980470][ T4970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.994819][ T41] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.004906][ T4970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.024616][ T5044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.056177][ T5092] netlink: 28 bytes leftover after parsing attributes in process `syz.5.559'. [ 57.066752][ T41] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.099439][ T4970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.111357][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 57.111373][ T29] audit: type=1400 audit(1757934624.761:1318): avc: denied { setopt } for pid=5095 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.111413][ T5096] openvswitch: netlink: Message has 6 unknown bytes. [ 57.149412][ T4970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.162885][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.562'. [ 57.172761][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.562'. [ 57.205067][ T29] audit: type=1326 audit(1757934624.851:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.229557][ T29] audit: type=1326 audit(1757934624.851:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.249321][ T5106] tipc: Started in network mode [ 57.253546][ T29] audit: type=1326 audit(1757934624.851:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.258599][ T5106] tipc: Node identity ac14140f, cluster identity 4711 [ 57.283441][ T29] audit: type=1326 audit(1757934624.851:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.315933][ T29] audit: type=1326 audit(1757934624.851:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.316332][ T5106] tipc: New replicast peer: 255.255.255.83 [ 57.341631][ T29] audit: type=1326 audit(1757934624.851:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.341658][ T29] audit: type=1326 audit(1757934624.851:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.341680][ T29] audit: type=1326 audit(1757934624.851:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.348327][ T5106] tipc: Enabled bearer , priority 10 [ 57.372419][ T29] audit: type=1326 audit(1757934624.851:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e50f7eba9 code=0x7ffc0000 [ 57.396443][ T54] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.464888][ T5110] loop3: detected capacity change from 0 to 512 [ 57.482100][ T5110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.482220][ T54] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.503146][ T54] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.537331][ T54] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.555252][ T5117] loop5: detected capacity change from 0 to 512 [ 57.567610][ T5110] EXT4-fs (loop3): 1 truncate cleaned up [ 57.574177][ T4970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.582582][ T5110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.602258][ T4970] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.618681][ T5117] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.620654][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.636368][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.645467][ T5117] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 57.660959][ T5117] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.675611][ T5117] EXT4-fs (loop5): 1 truncate cleaned up [ 57.681846][ T5117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.698398][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.705573][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.721472][ T4970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.731994][ T4970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.806763][ T4970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.939265][ T4970] veth0_vlan: entered promiscuous mode [ 57.949158][ T4970] veth1_vlan: entered promiscuous mode [ 57.970015][ T4970] veth0_macvtap: entered promiscuous mode [ 57.988953][ T4970] veth1_macvtap: entered promiscuous mode [ 58.001826][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.026531][ T3914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.040861][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.080256][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.093226][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.103555][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.127447][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.284523][ T5158] syzkaller0: entered allmulticast mode [ 58.291067][ T5158] syzkaller0: entered promiscuous mode [ 58.311788][ T5158] syzkaller0 (unregistering): left allmulticast mode [ 58.320013][ T5158] syzkaller0 (unregistering): left promiscuous mode [ 58.331647][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.379895][ T5162] loop6: detected capacity change from 0 to 128 [ 58.389620][ T5162] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 58.397899][ T5162] FAT-fs (loop6): Filesystem has been set read-only [ 58.405386][ T5162] bio_check_eod: 22 callbacks suppressed [ 58.405397][ T5162] syz.6.578: attempt to access beyond end of device [ 58.405397][ T5162] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 58.427053][ T5162] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 58.436008][ T5162] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 58.449049][ T5162] syz.6.578: attempt to access beyond end of device [ 58.449049][ T5162] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.468521][ T3378] tipc: Node number set to 2886997007 [ 59.118482][ T5213] loop2: detected capacity change from 0 to 2048 [ 59.133258][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.171953][ T5213] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.951471][ T5243] loop1: detected capacity change from 0 to 512 [ 59.960721][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.972649][ T5243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.993334][ T5247] loop2: detected capacity change from 0 to 512 [ 60.001018][ T5243] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.017838][ T5243] EXT4-fs (loop1): 1 truncate cleaned up [ 60.024471][ T5243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.032401][ T5247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.052604][ T5247] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.053894][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.072302][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.113724][ T5245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.124110][ T5245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.150063][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.168602][ T2857] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.193006][ T2857] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.217132][ T2857] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.230985][ T2857] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.247557][ T5257] netlink: 76 bytes leftover after parsing attributes in process `syz.5.614'. [ 60.434067][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.515679][ T5270] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 60.523615][ T5270] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.531838][ T5270] vhci_hcd vhci_hcd.0: Device attached [ 60.554947][ T5270] netlink: 100 bytes leftover after parsing attributes in process `syz.3.620'. [ 60.573253][ T5279] netlink: 332 bytes leftover after parsing attributes in process `syz.5.622'. [ 60.584227][ T5272] vhci_hcd: connection closed [ 60.584571][ T54] vhci_hcd: stop threads [ 60.595915][ T54] vhci_hcd: release socket [ 60.600644][ T54] vhci_hcd: disconnect device [ 60.625281][ T5283] ref_ctr increment failed for inode: 0x1bc offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810bcb33c0 [ 60.637141][ T5283] ref_ctr increment failed for inode: 0x1bc offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810bcb33c0 [ 60.650444][ T5282] uprobe: syz.5.625:5282 failed to unregister, leaking uprobe [ 60.788930][ T5282] uprobe: syz.5.625:5282 failed to unregister, leaking uprobe [ 60.826939][ T5286] loop1: detected capacity change from 0 to 128 [ 60.993084][ T5300] netlink: 'syz.6.632': attribute type 10 has an invalid length. [ 61.062167][ T5308] loop2: detected capacity change from 0 to 128 [ 61.457979][ T5331] loop3: detected capacity change from 0 to 1024 [ 61.489847][ T5331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.503011][ T5331] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.529784][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.548589][ T5339] loop3: detected capacity change from 0 to 1024 [ 61.555799][ T5339] EXT4-fs: Ignoring removed orlov option [ 61.572054][ T5339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.584770][ T5339] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.602002][ T5345] loop2: detected capacity change from 0 to 128 [ 61.614092][ T5339] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.629192][ T5345] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 61.654320][ T5339] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 61.659349][ T5349] loop5: detected capacity change from 0 to 512 [ 61.667938][ T5339] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.667938][ T5339] [ 61.676626][ T5345] FAT-fs (loop2): FAT read failed (blocknr 128) [ 61.686247][ T5349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.702670][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.719414][ T5349] EXT4-fs (loop5): 1 truncate cleaned up [ 61.728023][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.765590][ T5355] loop2: detected capacity change from 0 to 2048 [ 61.772831][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.790381][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.808542][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.826475][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.865940][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.883840][ T5350] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.950606][ T5363] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.966182][ T5363] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 61.979807][ T5363] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.979807][ T5363] [ 61.990217][ T5363] EXT4-fs (loop2): Total free blocks count 0 [ 61.997306][ T5363] EXT4-fs (loop2): Free/Dirty block details [ 62.003744][ T5363] EXT4-fs (loop2): free_blocks=2415919104 [ 62.009750][ T5363] EXT4-fs (loop2): dirty_blocks=2080 [ 62.016274][ T5363] EXT4-fs (loop2): Block reservation details [ 62.023450][ T5363] EXT4-fs (loop2): i_reserved_data_blocks=130 [ 62.030189][ T5338] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.643: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.185348][ T48] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 62.197894][ T48] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.197894][ T48] [ 62.221766][ T5370] syzkaller0: entered promiscuous mode [ 62.227299][ T5370] syzkaller0: entered allmulticast mode [ 62.422947][ T5377] pim6reg1: entered promiscuous mode [ 62.429139][ T5377] pim6reg1: entered allmulticast mode [ 62.485637][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 62.485650][ T29] audit: type=1326 audit(1757934630.131:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.568517][ T29] audit: type=1326 audit(1757934630.171:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.593009][ T29] audit: type=1326 audit(1757934630.171:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.617145][ T29] audit: type=1326 audit(1757934630.171:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.642222][ T29] audit: type=1326 audit(1757934630.171:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.667030][ T29] audit: type=1326 audit(1757934630.171:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.691530][ T29] audit: type=1326 audit(1757934630.171:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.716575][ T29] audit: type=1326 audit(1757934630.171:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.741458][ T29] audit: type=1326 audit(1757934630.171:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.766204][ T29] audit: type=1326 audit(1757934630.171:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baaa7eba9 code=0x7ffc0000 [ 62.815556][ T5385] pim6reg1: entered promiscuous mode [ 62.821294][ T5385] pim6reg1: entered allmulticast mode [ 62.928017][ T5396] loop3: detected capacity change from 0 to 512 [ 62.972104][ T5396] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.136586][ T5415] ref_ctr increment failed for inode: 0x359 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811f7c2280 [ 63.148852][ T5415] ref_ctr increment failed for inode: 0x359 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811f7c2280 [ 63.179900][ T5414] uprobe: syz.1.671:5414 failed to unregister, leaking uprobe [ 63.252317][ T5414] uprobe: syz.1.671:5414 failed to unregister, leaking uprobe [ 63.335705][ T5434] loop5: detected capacity change from 0 to 2048 [ 63.472731][ T5447] syzkaller0: entered allmulticast mode [ 63.481936][ T5447] syzkaller0 (unregistering): left allmulticast mode [ 63.491594][ T5438] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.512019][ T5438] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1728 with error 28 [ 63.535088][ T5438] EXT4-fs (loop5): This should not happen!! Data will be lost [ 63.535088][ T5438] [ 63.546977][ T5438] EXT4-fs (loop5): Total free blocks count 0 [ 63.557179][ T5438] EXT4-fs (loop5): Free/Dirty block details [ 63.563694][ T5438] EXT4-fs (loop5): free_blocks=2415919104 [ 63.573069][ T5438] EXT4-fs (loop5): dirty_blocks=1744 [ 63.578914][ T5438] EXT4-fs (loop5): Block reservation details [ 63.586976][ T5438] EXT4-fs (loop5): i_reserved_data_blocks=109 [ 63.670211][ T5453] loop3: detected capacity change from 0 to 128 [ 63.734161][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 63.747721][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 63.747721][ T12] [ 63.747944][ T5459] loop3: detected capacity change from 0 to 8192 [ 63.813456][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 63.823687][ T5468] netlink: 'syz.3.690': attribute type 30 has an invalid length. [ 63.840896][ T41] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.853051][ T41] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.862932][ T41] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.873799][ T41] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.926504][ T5478] ref_ctr increment failed for inode: 0x374 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811f7c2280 [ 63.941228][ T5478] ref_ctr increment failed for inode: 0x374 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811f7c2280 [ 63.956221][ T5477] uprobe: syz.2.696:5477 failed to unregister, leaking uprobe [ 64.000671][ T5481] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 64.007539][ T5481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.015337][ T5481] vhci_hcd vhci_hcd.0: Device attached [ 64.029849][ T5481] netlink: 100 bytes leftover after parsing attributes in process `syz.5.697'. [ 64.042393][ T5477] uprobe: syz.2.696:5477 failed to unregister, leaking uprobe [ 64.051877][ T5482] vhci_hcd: connection closed [ 64.052057][ T54] vhci_hcd: stop threads [ 64.062605][ T54] vhci_hcd: release socket [ 64.067293][ T54] vhci_hcd: disconnect device [ 64.228720][ T5486] loop2: detected capacity change from 0 to 1024 [ 64.249813][ T5486] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.344116][ T5491] loop6: detected capacity change from 0 to 128 [ 64.381025][ T5497] pim6reg1: entered promiscuous mode [ 64.387112][ T5497] pim6reg1: entered allmulticast mode [ 64.456164][ T5505] loop6: detected capacity change from 0 to 1024 [ 64.464054][ T5505] EXT4-fs: Ignoring removed orlov option [ 64.467244][ T5503] netlink: 'syz.3.706': attribute type 10 has an invalid length. [ 64.509631][ T5505] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.530600][ T5505] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.547586][ T5505] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 64.562639][ T5505] EXT4-fs (loop6): This should not happen!! Data will be lost [ 64.562639][ T5505] [ 64.577739][ T5505] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.601985][ T5505] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.623676][ T5505] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.640511][ T5504] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.656948][ T5504] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.659119][ T5516] syzkaller0: entered promiscuous mode [ 64.674527][ T5504] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.677968][ T5516] syzkaller0: entered allmulticast mode [ 64.695191][ T5519] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.707: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.699186][ T5505] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.727959][ T5505] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.934326][ T5529] loop2: detected capacity change from 0 to 128 [ 65.469407][ T5554] bridge_slave_0: left allmulticast mode [ 65.475707][ T5554] bridge_slave_0: left promiscuous mode [ 65.482406][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.493829][ T5554] bridge_slave_1: left allmulticast mode [ 65.500159][ T5554] bridge_slave_1: left promiscuous mode [ 65.506612][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.528407][ T5554] bond0: (slave bond_slave_0): Releasing backup interface [ 65.537584][ T5554] bond0: (slave bond_slave_1): Releasing backup interface [ 65.553574][ T5554] team0: Port device team_slave_0 removed [ 65.561194][ T5554] team0: Port device team_slave_1 removed [ 65.573580][ T5558] loop5: detected capacity change from 0 to 128 [ 65.581500][ T5554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.589762][ T5554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.646747][ T5565] loop6: detected capacity change from 0 to 2048 [ 65.770199][ T5572] loop5: detected capacity change from 0 to 512 [ 65.788291][ T5572] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.824913][ T5572] EXT4-fs (loop5): 1 truncate cleaned up [ 65.835877][ T5565] loop6: unable to read partition table [ 65.843069][ T5565] loop6: partition table beyond EOD, truncated [ 65.849733][ T5565] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 66.304848][ T5575] ================================================================== [ 66.313349][ T5575] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 66.320951][ T5575] [ 66.323472][ T5575] write to 0xffff88810061d844 of 4 bytes by task 5572 on cpu 0: [ 66.331276][ T5575] xas_set_mark+0x12b/0x140 [ 66.335888][ T5575] __folio_start_writeback+0x1dd/0x440 [ 66.341529][ T5575] ext4_bio_write_folio+0x5ad/0x9f0 [ 66.347092][ T5575] mpage_process_page_bufs+0x4a1/0x620 [ 66.352681][ T5575] mpage_prepare_extent_to_map+0x786/0xc00 [ 66.358515][ T5575] ext4_do_writepages+0xa05/0x2750 [ 66.364131][ T5575] ext4_writepages+0x176/0x300 [ 66.369460][ T5575] do_writepages+0x1c6/0x310 [ 66.374207][ T5575] file_write_and_wait_range+0x156/0x2c0 [ 66.379954][ T5575] generic_buffers_fsync_noflush+0x45/0x120 [ 66.386113][ T5575] ext4_sync_file+0x1ab/0x690 [ 66.391050][ T5575] vfs_fsync_range+0x10d/0x130 [ 66.395837][ T5575] ext4_buffered_write_iter+0x34f/0x3c0 [ 66.401493][ T5575] ext4_file_write_iter+0xdbf/0xf00 [ 66.407012][ T5575] iter_file_splice_write+0x663/0xa60 [ 66.412491][ T5575] direct_splice_actor+0x153/0x2a0 [ 66.417791][ T5575] splice_direct_to_actor+0x30f/0x680 [ 66.423616][ T5575] do_splice_direct+0xda/0x150 [ 66.428483][ T5575] do_sendfile+0x380/0x650 [ 66.433463][ T5575] __x64_sys_sendfile64+0x105/0x150 [ 66.438690][ T5575] x64_sys_call+0x2bb0/0x2ff0 [ 66.443457][ T5575] do_syscall_64+0xd2/0x200 [ 66.447973][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.453960][ T5575] [ 66.456469][ T5575] read to 0xffff88810061d844 of 4 bytes by task 5575 on cpu 1: [ 66.464331][ T5575] xas_find_marked+0x5dc/0x620 [ 66.469205][ T5575] find_get_entry+0x5d/0x380 [ 66.474009][ T5575] filemap_get_folios_tag+0x92/0x210 [ 66.479332][ T5575] mpage_prepare_extent_to_map+0x320/0xc00 [ 66.485513][ T5575] ext4_do_writepages+0xa05/0x2750 [ 66.490643][ T5575] ext4_writepages+0x176/0x300 [ 66.495513][ T5575] do_writepages+0x1c6/0x310 [ 66.500205][ T5575] file_write_and_wait_range+0x156/0x2c0 [ 66.505952][ T5575] generic_buffers_fsync_noflush+0x45/0x120 [ 66.511950][ T5575] ext4_sync_file+0x1ab/0x690 [ 66.516632][ T5575] vfs_fsync_range+0x10d/0x130 [ 66.521668][ T5575] ext4_buffered_write_iter+0x34f/0x3c0 [ 66.527510][ T5575] ext4_file_write_iter+0xdbf/0xf00 [ 66.533083][ T5575] iter_file_splice_write+0x663/0xa60 [ 66.538981][ T5575] direct_splice_actor+0x153/0x2a0 [ 66.544446][ T5575] splice_direct_to_actor+0x30f/0x680 [ 66.549926][ T5575] do_splice_direct+0xda/0x150 [ 66.554692][ T5575] do_sendfile+0x380/0x650 [ 66.559137][ T5575] __x64_sys_sendfile64+0x105/0x150 [ 66.564578][ T5575] x64_sys_call+0x2bb0/0x2ff0 [ 66.569567][ T5575] do_syscall_64+0xd2/0x200 [ 66.574216][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.580345][ T5575] [ 66.582966][ T5575] value changed: 0x0a000021 -> 0x04000021 [ 66.589151][ T5575] [ 66.591691][ T5575] Reported by Kernel Concurrency Sanitizer on: [ 66.597882][ T5575] CPU: 1 UID: 0 PID: 5575 Comm: syz.5.735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.607882][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.618071][ T5575] ================================================================== [ 66.729968][ T5575] syz.5.735 (5575) used greatest stack depth: 9080 bytes left [ 66.739719][ T3914] EXT4-fs unmount: 14 callbacks suppressed [ 66.739729][ T3914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.