last executing test programs: 25.969249946s ago: executing program 4 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r2) 25.91419002s ago: executing program 4 (id=503): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 25.79374243s ago: executing program 4 (id=504): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') 25.717989846s ago: executing program 4 (id=506): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 25.415518059s ago: executing program 4 (id=507): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 24.674507388s ago: executing program 4 (id=518): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 24.674133508s ago: executing program 32 (id=518): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 18.103848065s ago: executing program 2 (id=723): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4507}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 17.921754309s ago: executing program 2 (id=724): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000680)='.\x00', 0x0) 17.896259311s ago: executing program 3 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 17.832101077s ago: executing program 2 (id=727): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) 17.831366977s ago: executing program 3 (id=728): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba78", 0xf, 0x11, 0x0, 0x0) 17.830286337s ago: executing program 2 (id=731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x40000000007) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 17.817937348s ago: executing program 3 (id=732): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresgid(0x0, 0x0, 0x0) 17.700864757s ago: executing program 3 (id=735): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000020850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='workqueue_activate_work\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 17.700076727s ago: executing program 2 (id=736): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17.66496421s ago: executing program 3 (id=737): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) 17.384936841s ago: executing program 3 (id=739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5e4, &(0x7f0000000600)="$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") 17.384724602s ago: executing program 33 (id=739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5e4, &(0x7f0000000600)="$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") 17.380115502s ago: executing program 2 (id=741): r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) close(r0) 17.378882692s ago: executing program 34 (id=741): r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) close(r0) 1.137234501s ago: executing program 1 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) 1.069561546s ago: executing program 1 (id=1227): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 744.726242ms ago: executing program 7 (id=1241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r1}) 696.305105ms ago: executing program 1 (id=1244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 683.735606ms ago: executing program 7 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x4, 0x7, 0x1, 0x8, 0x8}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) 625.179281ms ago: executing program 1 (id=1248): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 624.828381ms ago: executing program 7 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, 0x0) 503.539701ms ago: executing program 7 (id=1253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 401.325799ms ago: executing program 7 (id=1256): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 400.632558ms ago: executing program 0 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 360.411422ms ago: executing program 1 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$inet(0x2, 0x80000, 0xc37) 358.783182ms ago: executing program 0 (id=1259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 357.284622ms ago: executing program 6 (id=1260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000200)=0x32) close(r1) 270.765259ms ago: executing program 6 (id=1261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x204c000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 270.322859ms ago: executing program 0 (id=1262): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 269.926719ms ago: executing program 0 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 225.650412ms ago: executing program 6 (id=1265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x20840}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 225.195202ms ago: executing program 5 (id=1267): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)) 196.745925ms ago: executing program 0 (id=1268): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 196.119975ms ago: executing program 5 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 171.259457ms ago: executing program 6 (id=1270): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1200, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) 161.658877ms ago: executing program 5 (id=1271): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 141.588009ms ago: executing program 1 (id=1272): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='cpu~=0||!') 120.830381ms ago: executing program 5 (id=1273): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000000), 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 90.443683ms ago: executing program 0 (id=1274): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 62.715455ms ago: executing program 6 (id=1275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r0}) 46.934416ms ago: executing program 5 (id=1276): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 815.34µs ago: executing program 7 (id=1277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xffff, 0x1, [0x6]}, 0xa) 414.57µs ago: executing program 6 (id=1278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 5 (id=1279): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a"], 0xfc}}, 0x0) kernel console output (not intermixed with test programs): ge0: port 2(bridge_slave_1) entered disabled state [ 25.631511][ T3310] bridge_slave_1: entered allmulticast mode [ 25.637993][ T3310] bridge_slave_1: entered promiscuous mode [ 25.649657][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.656715][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.682999][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.706859][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.714050][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.740167][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.751362][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.758425][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.784361][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.801140][ T3305] team0: Port device team_slave_0 added [ 25.808800][ T3302] hsr_slave_0: entered promiscuous mode [ 25.814920][ T3302] hsr_slave_1: entered promiscuous mode [ 25.825568][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.832866][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.859032][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.874859][ T3305] team0: Port device team_slave_1 added [ 25.887156][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.902884][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.910117][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.936444][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.948263][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.984288][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.991376][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.017573][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.037625][ T3310] team0: Port device team_slave_0 added [ 26.044167][ T3310] team0: Port device team_slave_1 added [ 26.078710][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.085700][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.111877][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.124934][ T3301] hsr_slave_0: entered promiscuous mode [ 26.131092][ T3301] hsr_slave_1: entered promiscuous mode [ 26.137178][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 26.143108][ T3301] Cannot create hsr debugfs directory [ 26.150997][ T3307] hsr_slave_0: entered promiscuous mode [ 26.157182][ T3307] hsr_slave_1: entered promiscuous mode [ 26.163123][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 26.168897][ T3307] Cannot create hsr debugfs directory [ 26.177497][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.184603][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.210932][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.256990][ T3305] hsr_slave_0: entered promiscuous mode [ 26.263017][ T3305] hsr_slave_1: entered promiscuous mode [ 26.268824][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 26.274545][ T3305] Cannot create hsr debugfs directory [ 26.301724][ T3310] hsr_slave_0: entered promiscuous mode [ 26.307718][ T3310] hsr_slave_1: entered promiscuous mode [ 26.313507][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 26.319565][ T3310] Cannot create hsr debugfs directory [ 26.467133][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.475665][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.498935][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.508100][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.521804][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.531588][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.541141][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.553189][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.581975][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.594588][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.608451][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.617629][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.635183][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.643995][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.652900][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.666423][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.701811][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.711007][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.719799][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.735548][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.763126][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.771800][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.793903][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.806712][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.815211][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.822421][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.831100][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.838414][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.863348][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.870465][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.891333][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.898491][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.915754][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.936841][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.957922][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.972173][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.990539][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.997662][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.006337][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.013463][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.037019][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.057655][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.068175][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.087201][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.104956][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.113444][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.120960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.141458][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.149923][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.162239][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.180353][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.187504][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.206221][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.213361][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.222880][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.229921][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.264816][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.384046][ T3307] veth0_vlan: entered promiscuous mode [ 27.407410][ T3307] veth1_vlan: entered promiscuous mode [ 27.432104][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.457046][ T3301] veth0_vlan: entered promiscuous mode [ 27.464472][ T3307] veth0_macvtap: entered promiscuous mode [ 27.473320][ T3302] veth0_vlan: entered promiscuous mode [ 27.481027][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.489973][ T3307] veth1_macvtap: entered promiscuous mode [ 27.504082][ T3302] veth1_vlan: entered promiscuous mode [ 27.520224][ T3301] veth1_vlan: entered promiscuous mode [ 27.531331][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.547393][ T3302] veth0_macvtap: entered promiscuous mode [ 27.561713][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.572939][ T3301] veth0_macvtap: entered promiscuous mode [ 27.583475][ T3302] veth1_macvtap: entered promiscuous mode [ 27.596484][ T1787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.606090][ T3301] veth1_macvtap: entered promiscuous mode [ 27.619117][ T1787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.641546][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.659904][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.668168][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 27.668182][ T29] audit: type=1400 audit(1756367763.909:81): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.SogVqf/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.677564][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.707041][ T1787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.716851][ T1787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.727092][ T29] audit: type=1400 audit(1756367763.939:82): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.749325][ T29] audit: type=1400 audit(1756367763.939:83): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.SogVqf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.775012][ T29] audit: type=1400 audit(1756367763.939:84): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.796745][ T29] audit: type=1400 audit(1756367763.939:85): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.SogVqf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.823695][ T29] audit: type=1400 audit(1756367763.939:86): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.SogVqf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.852236][ T29] audit: type=1400 audit(1756367763.939:87): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.871971][ T29] audit: type=1400 audit(1756367763.959:88): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.894822][ T29] audit: type=1400 audit(1756367763.959:89): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="gadgetfs" ino=4570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.920752][ T1787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.930451][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.934589][ T3305] veth0_vlan: entered promiscuous mode [ 27.954571][ T3310] veth0_vlan: entered promiscuous mode [ 27.971835][ T29] audit: type=1400 audit(1756367764.199:90): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.001437][ T1787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.012656][ T3305] veth1_vlan: entered promiscuous mode [ 28.032452][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.045232][ T1787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.061070][ T3305] veth0_macvtap: entered promiscuous mode [ 28.085246][ T1787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.104646][ T3305] veth1_macvtap: entered promiscuous mode [ 28.115954][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.125493][ T3310] veth1_vlan: entered promiscuous mode [ 28.137557][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.162479][ T3478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 28.174748][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.191609][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.201509][ T3310] veth0_macvtap: entered promiscuous mode [ 28.215921][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.233346][ T3310] veth1_macvtap: entered promiscuous mode [ 28.244204][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 28.245903][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.252182][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 28.263920][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 28.285391][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.305922][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.307601][ T3409] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 28.315234][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.347986][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.360672][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.392930][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.420659][ T3487] fido_id[3487]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 28.441075][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.480525][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.538160][ T3500] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.550781][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.573237][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.667412][ T3515] syz.3.19 (3515) used greatest stack depth: 9520 bytes left [ 28.678481][ T3518] Zero length message leads to an empty skb [ 28.710806][ T3526] netlink: 'syz.2.25': attribute type 1 has an invalid length. [ 28.718831][ T3526] netlink: 224 bytes leftover after parsing attributes in process `syz.2.25'. [ 28.786440][ T3536] loop4: detected capacity change from 0 to 512 [ 28.811764][ T3536] ======================================================= [ 28.811764][ T3536] WARNING: The mand mount option has been deprecated and [ 28.811764][ T3536] and is ignored by this kernel. Remove the mand [ 28.811764][ T3536] option from the mount to silence this warning. [ 28.811764][ T3536] ======================================================= [ 28.913612][ T3536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.929233][ T3536] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.963685][ T3536] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.28: corrupted inode contents [ 28.993665][ T3536] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.28: mark_inode_dirty error [ 29.015071][ T3536] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.28: corrupted inode contents [ 29.059968][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.108855][ T3568] process 'syz.4.41' launched '/dev/fd/3' with NULL argv: empty string added [ 29.190948][ T3578] pim6reg: entered allmulticast mode [ 29.200596][ T3578] pim6reg: left allmulticast mode [ 29.227205][ T3580] loop0: detected capacity change from 0 to 128 [ 29.239381][ T3580] syz.0.46: attempt to access beyond end of device [ 29.239381][ T3580] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 29.541227][ T3609] SELinux: failed to load policy [ 29.562463][ T3612] netlink: 'syz.2.61': attribute type 3 has an invalid length. [ 29.671880][ T3623] 9pnet: p9_errstr2errno: server reported unknown error Ȫjn [ 29.671880][ T3623] 2$tO*mտ*Džj`c?ڊ#t>r) [ 30.009195][ T3655] loop1: detected capacity change from 0 to 512 [ 30.042149][ T3655] journal_path: Non-blockdev passed as './bus' [ 30.048638][ T3655] EXT4-fs: error: could not find journal device path [ 30.110759][ T3667] SELinux: Context system_u:object_r:getty_exec_t:s0 is not valid (left unmapped). [ 30.499064][ T3734] veth1_to_bridge: entered promiscuous mode [ 30.512169][ T3734] veth1_to_bridge: left promiscuous mode [ 30.767440][ T3761] loop4: detected capacity change from 0 to 2048 [ 30.772336][ T3726] Set syz1 is full, maxelem 65536 reached [ 30.784824][ T3761] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.843888][ T3761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.885606][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.940167][ T3778] loop4: detected capacity change from 0 to 1024 [ 30.962839][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.012037][ T3788] SELinux: failed to load policy [ 31.296692][ T3778] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 31.397248][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.458587][ T3854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 31.467504][ T3854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.121'. [ 31.476733][ T3854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 31.505926][ T3860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 31.515013][ T3860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 31.527819][ T3854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.121'. [ 31.536768][ T3854] netlink: 'syz.4.121': attribute type 6 has an invalid length. [ 31.560813][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 31.707089][ T3895] loop1: detected capacity change from 0 to 1024 [ 31.733583][ T3895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.797639][ T3904] rdma_op ffff88811a2bf580 conn xmit_rdma 0000000000000000 [ 31.823609][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.012560][ T3933] mmap: syz.1.144 (3933) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.306887][ T3973] loop2: detected capacity change from 0 to 512 [ 32.315255][ T3973] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.328402][ T3973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.342528][ T3973] EXT4-fs (loop2): 1 truncate cleaned up [ 32.348927][ T3973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.381208][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.590292][ T4010] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 32.599607][ T4010] FAT-fs (loop1): unable to read boot sector [ 32.686730][ T4017] loop0: detected capacity change from 0 to 512 [ 32.694028][ T4017] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.715261][ T4017] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.728625][ T4017] EXT4-fs (loop0): 1 truncate cleaned up [ 32.734458][ T4017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.752075][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 32.752106][ T29] audit: type=1400 audit(1756367768.989:353): avc: denied { read write } for pid=4016 comm="syz.0.173" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.781181][ T29] audit: type=1400 audit(1756367768.989:354): avc: denied { open } for pid=4016 comm="syz.0.173" path="/35/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.821384][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.835550][ T29] audit: type=1326 audit(1756367769.069:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e19ebe9 code=0x7ffc0000 [ 32.889724][ T29] audit: type=1326 audit(1756367769.069:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e19ebe9 code=0x7ffc0000 [ 32.913018][ T29] audit: type=1326 audit(1756367769.099:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe45e19ebe9 code=0x7ffc0000 [ 32.936736][ T29] audit: type=1326 audit(1756367769.099:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e19ebe9 code=0x7ffc0000 [ 32.960695][ T29] audit: type=1326 audit(1756367769.099:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e19ebe9 code=0x7ffc0000 [ 32.984659][ T29] audit: type=1326 audit(1756367769.099:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe45e19ebe9 code=0x7ffc0000 [ 33.008246][ T29] audit: type=1326 audit(1756367769.099:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e19ebe9 code=0x7ffc0000 [ 33.031772][ T29] audit: type=1326 audit(1756367769.099:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e19ebe9 code=0x7ffc0000 [ 33.242933][ T4043] vlan2: entered promiscuous mode [ 33.248263][ T4043] bridge0: entered promiscuous mode [ 33.526863][ T4071] loop3: detected capacity change from 0 to 512 [ 33.638735][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.668429][ T4071] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.720032][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.817668][ T4092] SELinux: failed to load policy [ 33.864531][ T4095] loop0: detected capacity change from 0 to 1024 [ 33.879800][ T4095] EXT4-fs: Ignoring removed orlov option [ 33.885633][ T4095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.910288][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.934314][ T4108] loop1: detected capacity change from 0 to 2048 [ 33.962853][ T4108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.022132][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.040568][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.135273][ T4130] loop0: detected capacity change from 0 to 512 [ 34.161965][ T4132] loop1: detected capacity change from 0 to 1024 [ 34.180803][ T4130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.206699][ T4130] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.227434][ T4132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.287624][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.297639][ T4138] loop3: detected capacity change from 0 to 512 [ 34.324003][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.335287][ T4138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.349436][ T4138] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.371780][ T4138] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.224: corrupted inode contents [ 34.398933][ T4138] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.224: mark_inode_dirty error [ 34.416399][ T4138] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.224: corrupted inode contents [ 34.452045][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.648447][ T4173] loop1: detected capacity change from 0 to 512 [ 34.661215][ T4173] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 34.753836][ T4179] can0: slcan on ttyS3. [ 34.839696][ T4188] can0 (unregistered): slcan off ttyS3. [ 34.857397][ T4179] can0: slcan on ttyS3. [ 34.875417][ T4201] __nla_validate_parse: 1 callbacks suppressed [ 34.875437][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 35.065820][ T4224] syz.1.251 uses obsolete (PF_INET,SOCK_PACKET) [ 35.088007][ T4178] can0 (unregistered): slcan off ttyS3. [ 35.140847][ T4234] netlink: 'syz.2.254': attribute type 9 has an invalid length. [ 35.148726][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 35.174647][ T3440] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.175311][ T4234] netlink: 'syz.2.254': attribute type 9 has an invalid length. [ 35.189641][ T3440] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.191434][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 35.208114][ T3440] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.232461][ T4237] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 35.252268][ T3440] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.404415][ T4252] loop4: detected capacity change from 0 to 512 [ 35.470399][ T4252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.498863][ T4252] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.503749][ T4259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 35.582528][ T4252] syz.4.260 (4252) used greatest stack depth: 9232 bytes left [ 35.632134][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.813666][ T4282] loop2: detected capacity change from 0 to 2048 [ 35.852354][ T4292] 9pnet_fd: Insufficient options for proto=fd [ 35.859996][ T4282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.884396][ T4282] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.913242][ T4299] netlink: 'syz.4.279': attribute type 10 has an invalid length. [ 35.934610][ T4299] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.947301][ T4282] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.274: reserved inode found cleared - inode=1 [ 35.978008][ T4305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 35.987434][ T4305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 36.127234][ T4320] Illegal XDP return value 4294967294 on prog (id 232) dev N/A, expect packet loss! [ 36.297706][ T4335] netlink: 'syz.4.296': attribute type 6 has an invalid length. [ 36.406571][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.459591][ T4353] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 36.459591][ T4353] program syz.3.305 not setting count and/or reply_len properly [ 36.733583][ T4389] netlink: 96 bytes leftover after parsing attributes in process `syz.3.322'. [ 36.959382][ T4421] syzkaller1: entered promiscuous mode [ 36.965234][ T4421] syzkaller1: entered allmulticast mode [ 37.310796][ T4445] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 37.476172][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.483774][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.491396][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.503798][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.511425][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.518959][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.526586][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.534051][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.541630][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.549172][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.562198][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 37.614664][ T4469] loop1: detected capacity change from 0 to 512 [ 37.643202][ T4470] fido_id[4470]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.657638][ T4469] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.675047][ T4469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.726810][ T4469] EXT4-fs (loop1): 1 truncate cleaned up [ 37.758557][ T4469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.782365][ T4481] loop2: detected capacity change from 0 to 128 [ 37.822815][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 37.822832][ T29] audit: type=1400 audit(1756367774.059:690): avc: denied { mount } for pid=4468 comm="+}[@" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.872553][ T4481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 37.880771][ T4483] loop0: detected capacity change from 0 to 2048 [ 37.880822][ T4481] System zones: 1-3, 19-19, 35-36 [ 37.887641][ T29] audit: type=1400 audit(1756367774.089:691): avc: denied { create } for pid=4484 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.911825][ T29] audit: type=1400 audit(1756367774.089:692): avc: denied { tracepoint } for pid=4484 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.931635][ T29] audit: type=1400 audit(1756367774.109:693): avc: denied { add_name } for pid=4468 comm="+}[@" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.931864][ T4481] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 37.952137][ T29] audit: type=1400 audit(1756367774.109:694): avc: denied { create } for pid=4468 comm="+}[@" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.984364][ T29] audit: type=1400 audit(1756367774.109:695): avc: denied { read write } for pid=4468 comm="+}[@" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.006556][ T29] audit: type=1400 audit(1756367774.109:696): avc: denied { open } for pid=4468 comm="+}[@" path="/88/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.007563][ T4469] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm +}[@: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 38.036444][ T29] audit: type=1326 audit(1756367774.219:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8669bebe9 code=0x7ffc0000 [ 38.070896][ T4481] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.103274][ T29] audit: type=1326 audit(1756367774.219:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8669bebe9 code=0x7ffc0000 [ 38.126653][ T29] audit: type=1326 audit(1756367774.219:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa8669bebe9 code=0x7ffc0000 [ 38.159745][ T4483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.201406][ T4483] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.227802][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.237560][ T4483] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.363: reserved inode found cleared - inode=1 [ 38.250534][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.788354][ T4547] tmpfs: Bad value for 'mpol' [ 38.878853][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.914353][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.395'. [ 39.059580][ T4579] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 39.096771][ T4581] serio: Serial port ptm0 [ 39.099493][ T4579] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 39.162818][ T4588] loop3: detected capacity change from 0 to 128 [ 39.189581][ T4588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 39.201483][ T4588] System zones: 1-3, 19-19, 35-36 [ 39.212873][ T4588] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 39.246014][ T4596] loop1: detected capacity change from 0 to 512 [ 39.259316][ T4588] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.259707][ T4596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.376252][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.385854][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.437081][ T4610] syz.1.416 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.448576][ T4607] loop3: detected capacity change from 0 to 512 [ 39.471156][ T4607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.499885][ T4607] EXT4-fs (loop3): 1 truncate cleaned up [ 39.510837][ T4607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.650447][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.724743][ T4637] loop1: detected capacity change from 0 to 128 [ 39.759498][ T4637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 39.768318][ T4637] System zones: 1-3, 19-19, 35-36 [ 39.784762][ T4637] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 39.821125][ T4637] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.899858][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz1 [ 39.923009][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.947160][ T4650] fido_id[4650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.163682][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 40.205763][ T4679] __nla_validate_parse: 3 callbacks suppressed [ 40.205781][ T4679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 40.221188][ T4679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 40.297731][ T4692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.306723][ T4692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.651097][ T1102] IPVS: starting estimator thread 0... [ 40.759071][ T4714] IPVS: using max 2928 ests per chain, 146400 per kthread [ 40.867215][ T4720] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 41.117301][ T4729] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 41.127089][ T4729] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 41.136226][ T4729] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 41.170049][ T4729] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 41.203214][ T4740] loop3: detected capacity change from 0 to 1024 [ 41.247647][ T4740] EXT4-fs: Ignoring removed orlov option [ 41.254708][ T4740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.312988][ T4740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.367307][ T4754] atomic_op ffff88811a2dc128 conn xmit_atomic 0000000000000000 [ 41.536459][ T4764] loop2: detected capacity change from 0 to 512 [ 41.547134][ T4764] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 41.573027][ T4768] loop1: detected capacity change from 0 to 512 [ 41.593379][ T4768] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.627816][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.650313][ T4768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.693348][ T4768] EXT4-fs (loop1): 1 truncate cleaned up [ 41.699771][ T4776] loop3: detected capacity change from 0 to 512 [ 41.699813][ T4768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.717022][ T4776] ext4: Unknown parameter 'nouser_xattr' [ 41.830249][ T4795] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 41.848020][ T4795] veth0_vlan: entered allmulticast mode [ 41.880191][ T4795] veth0_vlan: left promiscuous mode [ 41.890509][ T4795] veth0_vlan: entered promiscuous mode [ 41.902313][ T4801] loop2: detected capacity change from 0 to 1024 [ 41.913913][ T4795] team0: Device veth0_vlan failed to register rx_handler [ 41.915659][ T4801] EXT4-fs: Ignoring removed orlov option [ 41.926886][ T4801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.981365][ T4801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.160340][ T4823] loop4: detected capacity change from 0 to 1024 [ 42.221132][ T4823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.255479][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.285434][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.327256][ T4838] loop4: detected capacity change from 0 to 512 [ 42.355584][ T4838] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.374802][ T4838] EXT4-fs (loop4): invalid journal inode [ 42.380981][ T4838] EXT4-fs (loop4): can't get journal size [ 42.415090][ T4838] EXT4-fs (loop4): 1 truncate cleaned up [ 42.421311][ T4838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.477910][ T4838] loop4: detected capacity change from 512 to 0 [ 42.485194][ C1] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 42.495214][ T4838] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.506: reading directory lblock 0 [ 42.507172][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 42.516905][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 42.526567][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 42.536393][ T4838] EXT4-fs (loop4): I/O error while writing superblock [ 42.565534][ C1] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 42.577132][ T3302] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 42.603078][ C0] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 42.612750][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 42.622290][ T3302] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 42.649382][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 42.659196][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 42.660224][ T4856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.668710][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 42.669213][ T3302] EXT4-fs (loop4): I/O error while writing superblock [ 42.678123][ T4856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.685510][ T3302] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 42.715105][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.734996][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 42.744642][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 42.754195][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 42.762838][ T3302] EXT4-fs (loop4): I/O error while writing superblock [ 42.769720][ T3302] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 42.784857][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 42.793676][ T3302] EXT4-fs (loop4): I/O error while writing superblock [ 42.814766][ T2658] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:6: unable to read itable block [ 42.831417][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 42.840095][ T2658] EXT4-fs (loop4): I/O error while writing superblock [ 42.871986][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.888294][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 42.896801][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 42.896816][ T29] audit: type=1400 audit(1756367779.129:924): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.928187][ T29] audit: type=1400 audit(1756367779.129:925): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.953137][ T29] audit: type=1400 audit(1756367779.129:926): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.982467][ T3302] EXT4-fs (loop4): I/O error while writing superblock [ 42.996697][ T29] audit: type=1400 audit(1756367779.169:927): avc: denied { module_request } for pid=4797 comm="syz.3.500" kmod="crypto-cbc(cast5)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 43.019010][ T29] audit: type=1400 audit(1756367779.229:928): avc: denied { prog_load } for pid=4879 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 43.038217][ T29] audit: type=1400 audit(1756367779.229:929): avc: denied { bpf } for pid=4879 comm="syz.1.513" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.059000][ T29] audit: type=1400 audit(1756367779.229:930): avc: denied { perfmon } for pid=4879 comm="syz.1.513" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.079806][ T29] audit: type=1400 audit(1756367779.229:931): avc: denied { prog_run } for pid=4879 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 43.101575][ T29] audit: type=1400 audit(1756367779.229:932): avc: denied { map_create } for pid=4885 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 43.120959][ T29] audit: type=1400 audit(1756367779.229:933): avc: denied { map_read map_write } for pid=4885 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 43.286869][ T2658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.302684][ T4912] SELinux: Context system_u:object_r:setrans_exec_t:s0 is not valid (left unmapped). [ 43.351134][ T2658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.440942][ T2658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.510840][ T2658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.620534][ T2658] bridge_slave_1: left allmulticast mode [ 43.626238][ T2658] bridge_slave_1: left promiscuous mode [ 43.632069][ T2658] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.919515][ T2658] bridge_slave_0: left allmulticast mode [ 43.925224][ T2658] bridge_slave_0: left promiscuous mode [ 43.931021][ T2658] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.064723][ T4995] loop0: detected capacity change from 0 to 164 [ 44.078366][ T4995] rock: directory entry would overflow storage [ 44.084707][ T4995] rock: sig=0x66, size=4, remaining=3 [ 44.100449][ T2658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.118752][ T2658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.135961][ T2658] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 44.147536][ T2658] bond0 (unregistering): Released all slaves [ 44.208261][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 44.223689][ T2658] hsr_slave_0: left promiscuous mode [ 44.242885][ T2658] hsr_slave_1: left promiscuous mode [ 44.262018][ T2658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.269601][ T2658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.297463][ T2658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.304770][ T5004] loop0: detected capacity change from 0 to 164 [ 44.304954][ T2658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.323615][ T5004] Unable to read rock-ridge attributes [ 44.342317][ T5004] Unable to read rock-ridge attributes [ 44.350689][ T2658] veth1_macvtap: left promiscuous mode [ 44.356394][ T2658] veth0_macvtap: left promiscuous mode [ 44.362229][ T5004] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 44.382513][ T2658] veth1_vlan: left promiscuous mode [ 44.444267][ T5019] IPv4: Oversized IP packet from 127.202.26.0 [ 44.550273][ T2658] team0 (unregistering): Port device team_slave_1 removed [ 44.580467][ T2658] team0 (unregistering): Port device team_slave_0 removed [ 44.663604][ T5042] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 44.663614][ T5034] IPVS: stopping master sync thread 5042 ... [ 44.787573][ T4928] chnl_net:caif_netlink_parms(): no params data found [ 44.853419][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.860720][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.865770][ T65] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 44.868144][ T4928] bridge_slave_0: entered allmulticast mode [ 44.887985][ T4928] bridge_slave_0: entered promiscuous mode [ 44.895046][ T4928] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.902927][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.910471][ T4928] bridge_slave_1: entered allmulticast mode [ 44.917010][ T4928] bridge_slave_1: entered promiscuous mode [ 44.945245][ T5073] loop2: detected capacity change from 0 to 512 [ 44.960366][ T4928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.974941][ T4928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.990423][ T5073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.006549][ T4928] team0: Port device team_slave_0 added [ 45.023885][ T4928] team0: Port device team_slave_1 added [ 45.029300][ T5073] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.061026][ T4928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.068176][ T4928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.094649][ T4928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.105809][ T4928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.112822][ T4928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.138937][ T4928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.169798][ T3380] hid_parser_main: 46 callbacks suppressed [ 45.169818][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.183580][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.191107][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.198612][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.206060][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.213654][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.221475][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.228933][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.236430][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.243885][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.252815][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.256197][ T3380] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz1 [ 45.275197][ T4928] hsr_slave_0: entered promiscuous mode [ 45.288252][ T4928] hsr_slave_1: entered promiscuous mode [ 45.303297][ T5082] fido_id[5082]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.441983][ T5096] netlink: 'syz.2.555': attribute type 13 has an invalid length. [ 45.460796][ T5096] gretap0: refused to change device tx_queue_len [ 45.471303][ T5096] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.640777][ T4928] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.673086][ T4928] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.694099][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 45.703090][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 45.733437][ T4928] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.754238][ T4928] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.842840][ T4928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.874766][ T4928] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.897179][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.904293][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.925305][ T2658] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.932424][ T2658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.951857][ T4928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.962557][ T4928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.054772][ T5174] loop3: detected capacity change from 0 to 512 [ 46.062801][ T4928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.075043][ T5174] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.090253][ T5174] EXT4-fs (loop3): 1 truncate cleaned up [ 46.096703][ T5174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.110453][ T5174] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.214427][ T4928] veth0_vlan: entered promiscuous mode [ 46.222154][ T4928] veth1_vlan: entered promiscuous mode [ 46.239270][ T4928] veth0_macvtap: entered promiscuous mode [ 46.254689][ T4928] veth1_macvtap: entered promiscuous mode [ 46.272949][ T4928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.289544][ T4928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.305817][ T3440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.317636][ T3440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.327057][ T3440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.336781][ T3440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.457484][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.591'. [ 46.729371][ T5248] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 47.064151][ T5312] loop3: detected capacity change from 0 to 1024 [ 47.130162][ T5319] loop5: detected capacity change from 0 to 512 [ 47.131716][ T5320] loop1: detected capacity change from 0 to 512 [ 47.142263][ T5319] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.150996][ T5319] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.163078][ T5319] EXT4-fs (loop5): 1 truncate cleaned up [ 47.169759][ T5319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.191292][ T5320] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.210824][ T5320] EXT4-fs (loop1): mount failed [ 47.292603][ C1] hrtimer: interrupt took 39514 ns [ 47.413572][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 47.422576][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 47.580720][ T5358] loop3: detected capacity change from 0 to 2048 [ 47.630150][ T5358] loop3: p1 < > p4 [ 47.634908][ T5362] loop1: detected capacity change from 0 to 512 [ 47.643253][ T5358] loop3: p4 size 8388608 extends beyond EOD, truncated [ 47.656902][ T5362] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.679265][ T2993] loop3: p1 < > p4 [ 47.685887][ T5362] EXT4-fs (loop1): 1 truncate cleaned up [ 47.692277][ T5362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.697498][ T2993] loop3: p4 size 8388608 extends beyond EOD, truncated [ 47.732543][ T5362] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.776126][ T5368] loop0: detected capacity change from 0 to 1024 [ 47.784170][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 47.800375][ T5368] EXT4-fs: Ignoring removed orlov option [ 47.806184][ T5368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.867772][ T5368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.899217][ T4658] udevd[4658]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 47.911355][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 47.933794][ T5379] loop1: detected capacity change from 0 to 128 [ 47.983724][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 48.003911][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.014069][ T5379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 48.028647][ T5379] System zones: 1-3, 19-19, 35-36 [ 48.044385][ T5379] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 48.060754][ T5379] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.102890][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 48.102907][ T29] audit: type=1400 audit(1756367784.339:1159): avc: denied { append } for pid=5378 comm="syz.1.651" path="/155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.162875][ T29] audit: type=1400 audit(1756367784.399:1160): avc: denied { ioctl } for pid=5378 comm="syz.1.651" path="/155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop1" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.213994][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.262738][ T5394] loop3: detected capacity change from 0 to 1024 [ 48.301429][ T5390] loop0: detected capacity change from 0 to 8192 [ 48.317650][ T5394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.317782][ T4928] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.339193][ T5394] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.348500][ T5390] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.352773][ T29] audit: type=1400 audit(1756367784.589:1161): avc: denied { read write } for pid=5393 comm="syz.3.659" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.383360][ T29] audit: type=1400 audit(1756367784.589:1162): avc: denied { open } for pid=5393 comm="syz.3.659" path="/125/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.406598][ T29] audit: type=1400 audit(1756367784.609:1163): avc: denied { map } for pid=5393 comm="syz.3.659" path="/125/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.430861][ T29] audit: type=1400 audit(1756367784.669:1164): avc: denied { mount } for pid=5389 comm="syz.0.655" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.467594][ T5394] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.659: lblock 1 mapped to illegal pblock 1 (length 3) [ 48.468806][ T29] audit: type=1400 audit(1756367784.699:1165): avc: denied { remove_name } for pid=5393 comm="syz.3.659" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.504974][ T29] audit: type=1400 audit(1756367784.699:1166): avc: denied { rename } for pid=5393 comm="syz.3.659" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.527265][ T29] audit: type=1400 audit(1756367784.699:1167): avc: denied { unlink } for pid=5393 comm="syz.3.659" name="file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.542388][ T5394] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 48.562680][ T5394] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.562680][ T5394] [ 48.578292][ T5394] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 48.590516][ T29] audit: type=1400 audit(1756367784.819:1168): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.690704][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 48.703167][ T41] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.703167][ T41] [ 48.713161][ T41] EXT4-fs (loop3): Total free blocks count 0 [ 48.719434][ T41] EXT4-fs (loop3): Free/Dirty block details [ 48.725526][ T41] EXT4-fs (loop3): free_blocks=4293918720 [ 48.731383][ T41] EXT4-fs (loop3): dirty_blocks=16 [ 48.736588][ T41] EXT4-fs (loop3): Block reservation details [ 49.106752][ T5447] SELinux: failed to load policy [ 49.159615][ T5454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.681'. [ 49.200744][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 49.217990][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 49.299611][ T5475] loop2: detected capacity change from 0 to 128 [ 49.322600][ T5475] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 49.347334][ T5475] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 49.465543][ T5498] netlink: 'syz.0.697': attribute type 18 has an invalid length. [ 49.486948][ T5498] vxlan0: entered promiscuous mode [ 49.493887][ T31] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.508985][ T31] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.518143][ T5500] loop1: detected capacity change from 0 to 512 [ 49.529046][ T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.533343][ T5500] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.548299][ T31] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.770685][ T5526] random: crng reseeded on system resumption [ 49.788115][ T5526] Restarting kernel threads ... [ 49.796782][ T5526] Done restarting kernel threads. [ 50.222967][ T5558] loop2: detected capacity change from 0 to 8192 [ 50.231480][ T5558] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.328626][ T5570] SELinux: failed to load policy [ 50.343506][ T5577] loop3: detected capacity change from 0 to 1024 [ 50.367692][ T5577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.387119][ T5577] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 50.562304][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.620486][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.660205][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.709905][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.778712][ T65] bridge_slave_1: left allmulticast mode [ 50.784429][ T65] bridge_slave_1: left promiscuous mode [ 50.790175][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.798208][ T65] bridge_slave_0: left allmulticast mode [ 50.803837][ T65] bridge_slave_0: left promiscuous mode [ 50.809499][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.879569][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.889519][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.899191][ T65] bond0 (unregistering): Released all slaves [ 50.941179][ T65] hsr_slave_0: left promiscuous mode [ 50.946920][ T65] hsr_slave_1: left promiscuous mode [ 50.952775][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.960209][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.967719][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.975183][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.985475][ T65] veth1_macvtap: left promiscuous mode [ 50.991124][ T65] veth0_macvtap: left promiscuous mode [ 50.996703][ T65] veth1_vlan: left promiscuous mode [ 51.002035][ T65] veth0_vlan: left promiscuous mode [ 51.056798][ T65] team0 (unregistering): Port device team_slave_1 removed [ 51.066464][ T65] team0 (unregistering): Port device team_slave_0 removed [ 51.370881][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.381197][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.411108][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.421431][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.460574][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.470940][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.520163][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.530536][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.610272][ T65] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.651053][ T65] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.684718][ T65] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.719435][ T5605] chnl_net:caif_netlink_parms(): no params data found [ 51.742036][ T65] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.762254][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.769339][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.776507][ T5605] bridge_slave_0: entered allmulticast mode [ 51.783551][ T5605] bridge_slave_0: entered promiscuous mode [ 51.790271][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.797285][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.804604][ T5605] bridge_slave_1: entered allmulticast mode [ 51.811543][ T5605] bridge_slave_1: entered promiscuous mode [ 51.828284][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.838889][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.863908][ T5605] team0: Port device team_slave_0 added [ 51.873006][ T5605] team0: Port device team_slave_1 added [ 51.892584][ T65] bridge_slave_1: left allmulticast mode [ 51.898343][ T65] bridge_slave_1: left promiscuous mode [ 51.904091][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.912123][ T65] bridge_slave_0: left allmulticast mode [ 51.917924][ T65] bridge_slave_0: left promiscuous mode [ 51.923754][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.932062][ T65] bridge_slave_1: left allmulticast mode [ 51.937713][ T65] bridge_slave_1: left promiscuous mode [ 51.943408][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.951060][ T65] bridge_slave_0: left allmulticast mode [ 51.956694][ T65] bridge_slave_0: left promiscuous mode [ 51.962574][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.041858][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.051970][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.061619][ T65] bond0 (unregistering): Released all slaves [ 52.110859][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.120451][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.130209][ T65] bond0 (unregistering): Released all slaves [ 52.138156][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.145311][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.171677][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.184832][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.191932][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.218193][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.235022][ T65] hsr_slave_0: left promiscuous mode [ 52.240885][ T65] hsr_slave_1: left promiscuous mode [ 52.246593][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.254074][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.293778][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.301269][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.342195][ T65] hsr_slave_0: left promiscuous mode [ 52.349261][ T65] hsr_slave_1: left promiscuous mode [ 52.354975][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.362654][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.371227][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.378733][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.392353][ T65] veth1_macvtap: left promiscuous mode [ 52.397892][ T65] veth0_macvtap: left promiscuous mode [ 52.403484][ T65] veth1_vlan: left promiscuous mode [ 52.409793][ T65] veth0_vlan: left promiscuous mode [ 52.415863][ T65] veth1_macvtap: left promiscuous mode [ 52.421720][ T65] veth0_macvtap: left promiscuous mode [ 52.427330][ T65] veth1_vlan: left promiscuous mode [ 52.433172][ T65] veth0_vlan: left promiscuous mode [ 52.494330][ T5632] loop1: detected capacity change from 0 to 8192 [ 52.511039][ T5634] loop0: detected capacity change from 0 to 512 [ 52.520351][ T5632] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.536258][ T5634] EXT4-fs: Ignoring removed oldalloc option [ 52.582959][ T65] team0 (unregistering): Port device team_slave_1 removed [ 52.597037][ T5634] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.756: Parent and EA inode have the same ino 15 [ 52.612488][ T65] team0 (unregistering): Port device team_slave_0 removed [ 52.625645][ T5634] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.756: Parent and EA inode have the same ino 15 [ 52.661536][ T5634] EXT4-fs (loop0): 1 orphan inode deleted [ 52.688156][ T5634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.708505][ T5642] loop1: detected capacity change from 0 to 512 [ 52.716964][ T5642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.740195][ T5642] EXT4-fs (loop1): 1 truncate cleaned up [ 52.746685][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.746808][ T5642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.768347][ T65] team0 (unregistering): Port device team_slave_1 removed [ 52.784623][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.795122][ T65] team0 (unregistering): Port device team_slave_0 removed [ 52.871977][ T5651] __nla_validate_parse: 3 callbacks suppressed [ 52.871996][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 52.898825][ T5605] hsr_slave_0: entered promiscuous mode [ 52.905411][ T5605] hsr_slave_1: entered promiscuous mode [ 52.970166][ T5664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.758'. [ 53.081020][ T5676] loop1: detected capacity change from 0 to 1024 [ 53.109961][ T5676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.125670][ T5676] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.151726][ T5676] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.763: lblock 1 mapped to illegal pblock 1 (length 3) [ 53.158726][ T5605] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 53.173594][ T5676] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 53.186404][ T5676] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.186404][ T5676] [ 53.196570][ T5676] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 53.211833][ T5605] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 53.224914][ T5605] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 53.231938][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 53.244641][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.244641][ T31] [ 53.254905][ T31] EXT4-fs (loop1): Total free blocks count 0 [ 53.260951][ T31] EXT4-fs (loop1): Free/Dirty block details [ 53.267613][ T31] EXT4-fs (loop1): free_blocks=4293918720 [ 53.273358][ T31] EXT4-fs (loop1): dirty_blocks=16 [ 53.278689][ T31] EXT4-fs (loop1): Block reservation details [ 53.360156][ T5605] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 53.399863][ T5686] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 53.431915][ T5621] chnl_net:caif_netlink_parms(): no params data found [ 53.461260][ T5628] chnl_net:caif_netlink_parms(): no params data found [ 53.533697][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 53.533714][ T29] audit: type=1326 audit(1756367789.769:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef17b0ebe9 code=0x7ffc0000 [ 53.579975][ T29] audit: type=1326 audit(1756367789.799:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fef17b0ebe9 code=0x7ffc0000 [ 53.603755][ T29] audit: type=1326 audit(1756367789.799:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef17b0ebe9 code=0x7ffc0000 [ 53.655427][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.662734][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.675347][ T5628] bridge_slave_0: entered allmulticast mode [ 53.682060][ T5628] bridge_slave_0: entered promiscuous mode [ 53.694678][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.701958][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.710721][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 53.711444][ T5621] bridge_slave_0: entered allmulticast mode [ 53.725997][ T5621] bridge_slave_0: entered promiscuous mode [ 53.732796][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.739919][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.747361][ T5621] bridge_slave_1: entered allmulticast mode [ 53.754433][ T5621] bridge_slave_1: entered promiscuous mode [ 53.760930][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.768053][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.775252][ T5628] bridge_slave_1: entered allmulticast mode [ 53.781763][ T5628] bridge_slave_1: entered promiscuous mode [ 53.793298][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 53.803582][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.812902][ T29] audit: type=1400 audit(1756367790.049:1317): avc: denied { firmware_load } for pid=5715 comm="syz.1.773" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 53.844955][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.866043][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.880114][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.890423][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.931008][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.945591][ T5628] team0: Port device team_slave_0 added [ 53.956118][ T5628] team0: Port device team_slave_1 added [ 53.967756][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.974922][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.984600][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.991956][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.027713][ T5621] team0: Port device team_slave_0 added [ 54.035737][ T5621] team0: Port device team_slave_1 added [ 54.042534][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.049697][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.075876][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.101502][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.108640][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.134800][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.148189][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.155195][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.181771][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.193509][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.200601][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.227014][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.270669][ T5621] hsr_slave_0: entered promiscuous mode [ 54.276684][ T5621] hsr_slave_1: entered promiscuous mode [ 54.282937][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 54.288816][ T5621] Cannot create hsr debugfs directory [ 54.310873][ T5628] hsr_slave_0: entered promiscuous mode [ 54.316906][ T5628] hsr_slave_1: entered promiscuous mode [ 54.323294][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 54.329055][ T5628] Cannot create hsr debugfs directory [ 54.457679][ T5743] loop0: detected capacity change from 0 to 1024 [ 54.486392][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.596457][ T5621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.612895][ T5621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.629040][ T5621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.641014][ T5621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.703427][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.719786][ T5762] loop0: detected capacity change from 0 to 1024 [ 54.725076][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.740780][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.747897][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.756848][ T5762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.788711][ T5762] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.801733][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.808973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.822317][ T5771] loop1: detected capacity change from 0 to 512 [ 54.829553][ T5762] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.782: lblock 1 mapped to illegal pblock 1 (length 3) [ 54.830110][ T5771] EXT4-fs: Ignoring removed oldalloc option [ 54.856635][ T5605] veth0_vlan: entered promiscuous mode [ 54.869251][ T5762] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 54.881858][ T5762] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.881858][ T5762] [ 54.904427][ T5771] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.785: Parent and EA inode have the same ino 15 [ 54.909865][ T5605] veth1_vlan: entered promiscuous mode [ 54.917220][ T5762] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 54.926605][ T5771] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.785: Parent and EA inode have the same ino 15 [ 54.959170][ T5771] EXT4-fs (loop1): 1 orphan inode deleted [ 54.959633][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 54.965521][ T5771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.977686][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.977686][ T41] [ 54.999540][ T41] EXT4-fs (loop0): Total free blocks count 0 [ 55.005544][ T41] EXT4-fs (loop0): Free/Dirty block details [ 55.011617][ T41] EXT4-fs (loop0): free_blocks=4293918720 [ 55.017360][ T41] EXT4-fs (loop0): dirty_blocks=16 [ 55.022632][ T41] EXT4-fs (loop0): Block reservation details [ 55.025076][ T5628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.060722][ T5605] veth0_macvtap: entered promiscuous mode [ 55.078388][ T5628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.087707][ T5628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.111029][ T29] audit: type=1400 audit(1756367791.339:1318): avc: denied { ioctl } for pid=5779 comm="syz.0.787" path="socket:[13171]" dev="sockfs" ino=13171 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.136214][ T29] audit: type=1400 audit(1756367791.349:1319): avc: denied { write } for pid=5779 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.160992][ T5782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.788'. [ 55.181681][ T5605] veth1_macvtap: entered promiscuous mode [ 55.194472][ T5628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.199005][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.220465][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.234692][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.261000][ T5791] ipvlan2: entered promiscuous mode [ 55.275207][ T5791] bridge0: port 3(ipvlan2) entered blocking state [ 55.281741][ T5791] bridge0: port 3(ipvlan2) entered disabled state [ 55.289359][ T5791] ipvlan2: entered allmulticast mode [ 55.294682][ T5791] bridge0: entered allmulticast mode [ 55.300742][ T5791] ipvlan2: left allmulticast mode [ 55.305791][ T5791] bridge0: left allmulticast mode [ 55.327179][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.375911][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.414454][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.432539][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.442875][ T5806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5806 comm=syz.1.793 [ 55.455965][ T5806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5806 comm=syz.1.793 [ 55.481784][ T3440] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.498362][ T41] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.508948][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.518783][ T1787] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.525915][ T1787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.553530][ T1787] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.560744][ T1787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.577771][ T5621] veth0_vlan: entered promiscuous mode [ 55.585820][ T5808] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.596358][ T5628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.607973][ T5628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.638380][ T5621] veth1_vlan: entered promiscuous mode [ 55.655196][ T5621] veth0_macvtap: entered promiscuous mode [ 55.676430][ T5621] veth1_macvtap: entered promiscuous mode [ 55.697718][ T5822] team0: Device veth1_vlan failed to register rx_handler [ 55.717107][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.739404][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.767065][ T29] audit: type=1400 audit(1756367791.999:1320): avc: denied { write } for pid=5828 comm="syz.0.798" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.804003][ T1787] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.806456][ T5829] vhci_hcd: invalid port number 96 [ 55.818029][ T5829] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 55.829480][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.834798][ T29] audit: type=1400 audit(1756367792.039:1321): avc: denied { map } for pid=5828 comm="syz.0.798" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.868190][ T1787] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.891285][ T1787] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.926469][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.020377][ T5855] loop0: detected capacity change from 0 to 512 [ 56.063988][ T5855] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 56.084364][ T5855] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.103943][ T5855] EXT4-fs (loop0): mount failed [ 56.109857][ T29] audit: type=1400 audit(1756367792.349:1322): avc: denied { setopt } for pid=5867 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.173452][ T5628] veth0_vlan: entered promiscuous mode [ 56.200469][ T5628] veth1_vlan: entered promiscuous mode [ 56.239520][ T5628] veth0_macvtap: entered promiscuous mode [ 56.266131][ T5628] veth1_macvtap: entered promiscuous mode [ 56.297620][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.339958][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.364965][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.403744][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.429333][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.464881][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.611296][ T5914] netlink: 'syz.6.828': attribute type 3 has an invalid length. [ 56.620887][ T5916] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 56.765460][ T5926] loop6: detected capacity change from 0 to 4096 [ 56.808708][ T5926] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.837113][ T5926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.865787][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 56.919990][ T5621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.943217][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 57.381523][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 57.408181][ T5990] netlink: 332 bytes leftover after parsing attributes in process `syz.6.863'. [ 57.588101][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.875'. [ 57.610727][ T6020] loop1: detected capacity change from 0 to 1024 [ 57.615851][ T6019] vlan2: entered allmulticast mode [ 57.635791][ T6019] dummy0: entered allmulticast mode [ 57.643498][ T6020] EXT4-fs: Ignoring removed orlov option [ 57.649383][ T6020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.693873][ T6020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.731003][ T6034] loop0: detected capacity change from 0 to 512 [ 57.796045][ T6034] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 57.796853][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.819952][ T6034] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 57.846290][ T6043] pim6reg: entered allmulticast mode [ 57.848999][ T6034] EXT4-fs (loop0): 1 truncate cleaned up [ 57.869964][ T6045] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 57.879036][ T6043] pim6reg: left allmulticast mode [ 57.882171][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.913756][ T6045] bond1: entered promiscuous mode [ 57.920306][ T6045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.943557][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.966263][ T6047] bond1: (slave veth3): making interface the new active one [ 57.973712][ T6047] veth3: entered promiscuous mode [ 57.981220][ T6047] bond1: (slave veth3): Enslaving as an active interface with an up link [ 58.053365][ T6059] 9pnet: p9_errstr2errno: server reported unknown error W~uZz&4 [ 58.067431][ T6061] loop1: detected capacity change from 0 to 1024 [ 58.103316][ T6065] ipvlan2: entered promiscuous mode [ 58.115825][ T6061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.144288][ T6065] bridge0: port 3(ipvlan2) entered blocking state [ 58.150925][ T6065] bridge0: port 3(ipvlan2) entered disabled state [ 58.153142][ T6061] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.171520][ T6065] ipvlan2: entered allmulticast mode [ 58.177069][ T6065] bridge0: entered allmulticast mode [ 58.221452][ T6065] ipvlan2: left allmulticast mode [ 58.221473][ T6065] bridge0: left allmulticast mode [ 58.255103][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.894: lblock 3 mapped to illegal pblock 3 (length 13) [ 58.272079][ T6061] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 58.284731][ T6061] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.284731][ T6061] [ 58.297137][ T6082] bond1: entered promiscuous mode [ 58.302242][ T6082] bond1: entered allmulticast mode [ 58.307765][ T6082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.313731][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 4: comm syz.1.894: lblock 4 mapped to illegal pblock 4 (length 1) [ 58.330653][ T6082] bond1 (unregistering): Released all slaves [ 58.365936][ T6061] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.894: Freeing blocks not in datazone - block = 3, count = 1 [ 58.397543][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.905'. [ 58.417504][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.423324][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 4: comm syz.1.894: lblock 4 mapped to illegal pblock 4 (length 1) [ 58.424933][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.480620][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 5: comm syz.1.894: lblock 5 mapped to illegal pblock 5 (length 1) [ 58.546308][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 6: comm syz.1.894: lblock 6 mapped to illegal pblock 6 (length 1) [ 58.561981][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 7: comm syz.1.894: lblock 7 mapped to illegal pblock 7 (length 1) [ 58.579064][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 4: comm syz.1.894: lblock 4 mapped to illegal pblock 4 (length 1) [ 58.598154][ T6121] SELinux: policydb version 0 does not match my version range 15-35 [ 58.609018][ T6121] SELinux: failed to load policy [ 58.616355][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 5: comm syz.1.894: lblock 5 mapped to illegal pblock 5 (length 1) [ 58.657201][ T6061] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 6: comm syz.1.894: lblock 6 mapped to illegal pblock 6 (length 1) [ 58.724304][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 58.724329][ T29] audit: type=1400 audit(1756367794.959:1418): avc: denied { write } for pid=6140 comm="syz.6.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.823925][ T6148] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.823989][ T29] audit: type=1400 audit(1756367795.059:1419): avc: denied { write } for pid=6146 comm="+}[@" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.854713][ T6148] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 58.859821][ T29] audit: type=1400 audit(1756367795.059:1420): avc: denied { ioctl } for pid=6146 comm="+}[@" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.001685][ T29] audit: type=1400 audit(1756367795.229:1421): avc: denied { create } for pid=6159 comm="syz.6.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.022045][ T29] audit: type=1400 audit(1756367795.229:1422): avc: denied { getopt } for pid=6159 comm="syz.6.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.045003][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.091142][ T29] audit: type=1400 audit(1756367795.239:1423): avc: denied { bind } for pid=6164 comm="syz.6.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.110372][ T29] audit: type=1400 audit(1756367795.259:1424): avc: denied { write } for pid=6164 comm="syz.6.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.129722][ T29] audit: type=1400 audit(1756367795.299:1425): avc: denied { bind } for pid=6169 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.149376][ T29] audit: type=1400 audit(1756367795.299:1426): avc: denied { listen } for pid=6169 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.169366][ T29] audit: type=1400 audit(1756367795.309:1427): avc: denied { write } for pid=6169 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.228314][ T6184] netlink: 'syz.5.931': attribute type 1 has an invalid length. [ 59.268795][ T6187] loop1: detected capacity change from 0 to 512 [ 59.303069][ T6187] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 59.315320][ T6187] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 59.331176][ T6187] EXT4-fs (loop1): 1 truncate cleaned up [ 59.350543][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.399569][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.752227][ T6258] loop0: detected capacity change from 0 to 2048 [ 59.789961][ T6258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.813158][ T6258] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.877199][ T6275] pim6reg: entered allmulticast mode [ 59.904450][ T6275] pim6reg: left allmulticast mode [ 59.935376][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.149742][ T6322] netlink: 68 bytes leftover after parsing attributes in process `syz.0.960'. [ 60.362007][ T6354] netlink: 'syz.5.971': attribute type 1 has an invalid length. [ 60.393225][ T6354] bond1: entered promiscuous mode [ 60.406431][ T6354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.423041][ T6361] smc: net device bond0 applied user defined pnetid SYZ0 [ 60.443514][ T6361] smc: net device bond0 erased user defined pnetid SYZ0 [ 60.461859][ T6366] bond1: (slave veth3): making interface the new active one [ 60.469355][ T6366] veth3: entered promiscuous mode [ 60.477907][ T6366] bond1: (slave veth3): Enslaving as an active interface with an up link [ 60.500559][ T6370] netlink: 68 bytes leftover after parsing attributes in process `syz.1.978'. [ 60.706795][ T6399] syz_tun: entered allmulticast mode [ 60.712880][ T6398] syz_tun: left allmulticast mode [ 60.733229][ T6403] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 60.761673][ T6403] bond1: entered promiscuous mode [ 60.766953][ T6403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.796815][ T6403] bond1: (slave veth3): making interface the new active one [ 60.804246][ T6403] veth3: entered promiscuous mode [ 60.810240][ T6403] bond1: (slave veth3): Enslaving as an active interface with an up link [ 60.936394][ T10] hid_parser_main: 18 callbacks suppressed [ 60.936413][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 60.950107][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 60.957709][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 60.965339][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 60.973113][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 60.980903][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 60.988361][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 60.995823][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 61.003279][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 61.008325][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.011083][ T10] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 61.020165][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.031896][ T10] hid-generic 0000:0006:0007.0005: hidraw0: HID v0.0a Device [syz1] on syz1 [ 61.070891][ T6426] fido_id[6426]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.135609][ T6430] rdma_op ffff8881197c5580 conn xmit_rdma 0000000000000000 [ 61.683015][ T6496] netlink: 'syz.7.1037': attribute type 12 has an invalid length. [ 61.690935][ T6496] netlink: 'syz.7.1037': attribute type 29 has an invalid length. [ 61.698875][ T6496] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1037'. [ 61.708265][ T6496] netlink: 51 bytes leftover after parsing attributes in process `syz.7.1037'. [ 61.722112][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1039'. [ 61.731526][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1039'. [ 61.887531][ T6515] smc: net device bond0 applied user defined pnetid SYZ0 [ 61.895225][ T6515] smc: net device bond0 erased user defined pnetid SYZ0 [ 62.060981][ T6532] netlink: 'syz.1.1053': attribute type 10 has an invalid length. [ 62.091898][ T6536] loop6: detected capacity change from 0 to 2048 [ 62.100391][ T6532] team0: Device hsr_slave_0 failed to register rx_handler [ 62.137498][ T6536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.171027][ T6536] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.183360][ T6543] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1057'. [ 62.192393][ T6543] netem: unknown loss type 0 [ 62.197037][ T6543] netem: change failed [ 62.203739][ T6544] smc: net device bond0 applied user defined pnetid SYZ0 [ 62.211461][ T6544] smc: net device bond0 erased user defined pnetid SYZ0 [ 62.257632][ T6549] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 62.257632][ T6549] program syz.1.1060 not setting count and/or reply_len properly [ 62.275773][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1061'. [ 62.318527][ T6553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6553 comm=syz.7.1062 [ 62.331071][ T6553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6553 comm=syz.7.1062 [ 62.352414][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 62.496683][ T6567] ALSA: seq fatal error: cannot create timer (-22) [ 62.919236][ T6584] loop0: detected capacity change from 0 to 128 [ 62.957981][ T6584] syz.0.1074: attempt to access beyond end of device [ 62.957981][ T6584] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 63.073549][ T6569] Set syz1 is full, maxelem 65536 reached [ 63.181661][ T6607] atomic_op ffff88810d3f8928 conn xmit_atomic 0000000000000000 [ 63.500747][ T6651] FAT-fs (loop3): bogus number of reserved sectors [ 63.507630][ T6651] FAT-fs (loop3): Can't find a valid FAT filesystem [ 63.856846][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 63.856861][ T29] audit: type=1326 audit(1756367800.089:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b56bebe9 code=0x7ffc0000 [ 63.890385][ T29] audit: type=1326 audit(1756367800.089:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b56bebe9 code=0x7ffc0000 [ 63.913850][ T29] audit: type=1326 audit(1756367800.089:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f32b56bebe9 code=0x7ffc0000 [ 63.937606][ T29] audit: type=1326 audit(1756367800.089:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b56bebe9 code=0x7ffc0000 [ 63.961320][ T29] audit: type=1326 audit(1756367800.089:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b56bebe9 code=0x7ffc0000 [ 63.985140][ T29] audit: type=1326 audit(1756367800.089:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f32b56bebe9 code=0x7ffc0000 [ 64.008793][ T29] audit: type=1400 audit(1756367800.089:1652): avc: denied { relabelto } for pid=6676 comm="syz.5.1115" name="bus" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 64.035125][ T29] audit: type=1400 audit(1756367800.089:1653): avc: denied { associate } for pid=6676 comm="syz.5.1115" name="bus" dev="tmpfs" ino=297 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 64.062252][ T29] audit: type=1326 audit(1756367800.089:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b56bebe9 code=0x7ffc0000 [ 64.085932][ T29] audit: type=1326 audit(1756367800.089:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b56bebe9 code=0x7ffc0000 [ 64.413584][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.433736][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.463489][ T6691] netlink: 'syz.0.1119': attribute type 13 has an invalid length. [ 64.487718][ T6691] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.607680][ T6728] SELinux: failed to load policy [ 64.643252][ T6730] hub 9-0:1.0: USB hub found [ 64.661047][ T6730] hub 9-0:1.0: 8 ports detected [ 64.753001][ T6748] loop6: detected capacity change from 0 to 128 [ 64.809692][ T6752] netlink: 'syz.7.1147': attribute type 1 has an invalid length. [ 64.827248][ T6748] syz.6.1144: attempt to access beyond end of device [ 64.827248][ T6748] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 64.845099][ T6755] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=6755 comm=syz.5.1148 [ 64.851511][ T6752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.877274][ T6756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.888633][ T6756] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 64.915703][ T6758] serio: Serial port ttyS3 [ 64.921062][ T6760] __nla_validate_parse: 3 callbacks suppressed [ 64.921078][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'. [ 64.939003][ T6756] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 64.951906][ T6760] IPVS: Error joining to the multicast group [ 64.978164][ T6765] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 64.984798][ T6765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.992397][ T6765] vhci_hcd vhci_hcd.0: Device attached [ 65.005710][ T6765] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 65.012366][ T6765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.019936][ T6765] vhci_hcd vhci_hcd.0: Device attached [ 65.057163][ T6765] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 65.063723][ T6765] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 65.071466][ T6765] vhci_hcd vhci_hcd.0: Device attached [ 65.090461][ T6765] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.107068][ T6765] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(11) [ 65.113779][ T6765] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.121448][ T6765] vhci_hcd vhci_hcd.0: Device attached [ 65.147926][ T6765] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(13) [ 65.154570][ T6765] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.162499][ T6765] vhci_hcd vhci_hcd.0: Device attached [ 65.197241][ T6789] vhci_hcd: connection closed [ 65.198327][ T65] vhci_hcd: stop threads [ 65.201398][ T6774] vhci_hcd: connection closed [ 65.203152][ T65] vhci_hcd: release socket [ 65.207493][ T6768] vhci_hcd: connection closed [ 65.212278][ T65] vhci_hcd: disconnect device [ 65.232434][ T6766] vhci_hcd: connection closed [ 65.237923][ T6784] vhci_hcd: connection closed [ 65.250707][ T65] vhci_hcd: stop threads [ 65.260886][ T65] vhci_hcd: release socket [ 65.262790][ T6788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6788 comm=syz.0.1159 [ 65.265324][ T65] vhci_hcd: disconnect device [ 65.277800][ T6788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6788 comm=syz.0.1159 [ 65.297915][ T2956] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 65.318080][ T6767] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 65.351962][ T65] vhci_hcd: stop threads [ 65.356431][ T65] vhci_hcd: release socket [ 65.360880][ T65] vhci_hcd: disconnect device [ 65.391893][ T65] vhci_hcd: stop threads [ 65.396264][ T65] vhci_hcd: release socket [ 65.400828][ T65] vhci_hcd: disconnect device [ 65.441805][ T65] vhci_hcd: stop threads [ 65.446166][ T65] vhci_hcd: release socket [ 65.450674][ T65] vhci_hcd: disconnect device [ 65.555165][ T6824] syz_tun: entered allmulticast mode [ 65.562185][ T6823] syz_tun: left allmulticast mode [ 65.575637][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.591129][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.665410][ T6831] loop5: detected capacity change from 0 to 128 [ 65.695027][ T6831] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 65.705567][ T6831] FAT-fs (loop5): Filesystem has been set read-only [ 65.727372][ T6831] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 65.737074][ T6836] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 65.741043][ T6831] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 65.748497][ T6835] IPVS: stopping master sync thread 6836 ... [ 65.914180][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1189'. [ 65.927967][ T1787] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.935937][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1189'. [ 65.938295][ T1787] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.955254][ T1787] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.964306][ T1787] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.974128][ T6862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1190'. [ 65.983233][ T6862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1190'. [ 66.004933][ T6862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1190'. [ 66.014117][ T6862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1190'. [ 66.025899][ T6867] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 66.032613][ T6867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.040379][ T6867] vhci_hcd vhci_hcd.0: Device attached [ 66.062701][ T6867] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 66.069274][ T6867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.076920][ T6867] vhci_hcd vhci_hcd.0: Device attached [ 66.090343][ T6862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1190'. [ 66.099469][ T6862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1190'. [ 66.106773][ T6881] loop1: detected capacity change from 0 to 128 [ 66.117945][ T6867] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 66.124517][ T6867] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.132221][ T6867] vhci_hcd vhci_hcd.0: Device attached [ 66.142352][ T6881] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 66.155003][ T6881] FAT-fs (loop1): Filesystem has been set read-only [ 66.169480][ T6883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.183483][ T6881] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 66.194109][ T6867] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(9) [ 66.200645][ T6867] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.208600][ T6867] vhci_hcd vhci_hcd.0: Device attached [ 66.214681][ T6892] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 66.220639][ T6867] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 66.228878][ T6867] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.236505][ T6867] vhci_hcd vhci_hcd.0: Device attached [ 66.267015][ T6893] vhci_hcd: connection closed [ 66.267248][ T6868] vhci_hcd: connection closed [ 66.272614][ T6888] vhci_hcd: connection closed [ 66.277451][ T6878] vhci_hcd: connection closed [ 66.279012][ T6871] vhci_hcd: connection closed [ 66.289262][ T3440] vhci_hcd: stop threads [ 66.298454][ T3440] vhci_hcd: release socket [ 66.302961][ T3440] vhci_hcd: disconnect device [ 66.307406][ T6887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1196'. [ 66.310134][ T3410] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 66.325632][ T6869] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 66.332287][ T3440] vhci_hcd: stop threads [ 66.336603][ T3440] vhci_hcd: release socket [ 66.341207][ T3440] vhci_hcd: disconnect device [ 66.346556][ T3440] vhci_hcd: stop threads [ 66.350863][ T3440] vhci_hcd: release socket [ 66.355314][ T3440] vhci_hcd: disconnect device [ 66.367961][ T3440] vhci_hcd: stop threads [ 66.372261][ T3440] vhci_hcd: release socket [ 66.376707][ T3440] vhci_hcd: disconnect device [ 66.395550][ T6904] syz_tun: entered allmulticast mode [ 66.401827][ T6903] syz_tun: left allmulticast mode [ 66.407127][ T3440] vhci_hcd: stop threads [ 66.411481][ T3440] vhci_hcd: release socket [ 66.416153][ T3440] vhci_hcd: disconnect device [ 66.575438][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.582696][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.632065][ T6933] SELinux: failed to load policy [ 66.664071][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.675228][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.711947][ T6921] bond1: left promiscuous mode [ 66.717027][ T6921] veth3: left promiscuous mode [ 66.726304][ T1787] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.735762][ T1787] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.746928][ T1787] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.756163][ T1787] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.768607][ T6939] bridge_slave_1: left allmulticast mode [ 66.774398][ T6939] bridge_slave_1: left promiscuous mode [ 66.780390][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.788885][ T6939] bridge_slave_0: left allmulticast mode [ 66.794704][ T6939] bridge_slave_0: left promiscuous mode [ 66.800679][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.820666][ T6943] loop7: detected capacity change from 0 to 512 [ 66.840871][ T6943] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 66.867058][ T6943] EXT4-fs (loop7): orphan cleanup on readonly fs [ 66.892415][ T6943] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.908343][ T6943] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 66.926572][ T6943] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1222: bg 0: block 40: padding at end of block bitmap is not set [ 66.953470][ T6943] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 66.963764][ T6943] EXT4-fs (loop7): 1 truncate cleaned up [ 66.972891][ T6943] EXT4-fs mount: 1 callbacks suppressed [ 66.972907][ T6943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.051898][ T5605] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.386975][ T7005] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 67.412865][ T7005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.437454][ T6960] netlink: 'syz.6.1230': attribute type 13 has an invalid length. [ 67.441161][ T7005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.453449][ T7005] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 67.465673][ T7005] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 67.512539][ T6960] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 67.654120][ T7029] bridge_slave_1: left allmulticast mode [ 67.659936][ T7029] bridge_slave_1: left promiscuous mode [ 67.665715][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.678963][ T7029] bridge_slave_0: left allmulticast mode [ 67.684727][ T7029] bridge_slave_0: left promiscuous mode [ 67.690565][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.777654][ T7044] 9pnet_fd: Insufficient options for proto=fd [ 67.936630][ T7059] loop0: detected capacity change from 0 to 512 [ 67.953985][ T7059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.982165][ T2993] ================================================================== [ 67.990412][ T2993] BUG: KCSAN: data-race in d_delete / step_into [ 67.996827][ T2993] [ 67.999160][ T2993] read-write to 0xffff888119d57900 of 4 bytes by task 3288 on cpu 1: [ 68.007742][ T2993] d_delete+0x15a/0x180 [ 68.011905][ T2993] d_delete_notify+0x32/0x100 [ 68.016595][ T2993] vfs_unlink+0x30b/0x420 [ 68.021118][ T2993] do_unlinkat+0x24e/0x480 [ 68.025720][ T2993] __x64_sys_unlink+0x2e/0x40 [ 68.030401][ T2993] x64_sys_call+0x2dc0/0x2ff0 [ 68.035081][ T2993] do_syscall_64+0xd2/0x200 [ 68.039590][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.045598][ T2993] [ 68.047945][ T2993] read to 0xffff888119d57900 of 4 bytes by task 2993 on cpu 0: [ 68.056123][ T2993] step_into+0x12f/0x820 [ 68.060661][ T2993] walk_component+0x162/0x220 [ 68.065617][ T2993] path_lookupat+0xfe/0x2a0 [ 68.070232][ T2993] filename_lookup+0x147/0x340 [ 68.075016][ T2993] do_readlinkat+0x7d/0x320 [ 68.079660][ T2993] __x64_sys_readlink+0x47/0x60 [ 68.085363][ T2993] x64_sys_call+0x28da/0x2ff0 [ 68.090073][ T2993] do_syscall_64+0xd2/0x200 [ 68.094930][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.101353][ T2993] [ 68.103677][ T2993] value changed: 0x00300180 -> 0x00004080 [ 68.109400][ T2993] [ 68.111808][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 68.118136][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.127417][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.137645][ T2993] ================================================================== [ 68.148420][ T7059] EXT4-fs (loop0): 1 truncate cleaned up [ 68.154717][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.193192][ T7059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.367945][ T2956] usb 13-1: enqueue for inactive port 0 [ 70.373640][ T2956] usb 13-1: enqueue for inactive port 0 [ 70.447949][ T2956] vhci_hcd: vhci_device speed not set [ 71.328045][ T3410] usb 11-1: enqueue for inactive port 0 [ 71.333652][ T3410] usb 11-1: enqueue for inactive port 0 [ 71.418268][ T3410] vhci_hcd: vhci_device speed not set